{"report_id":"1ab38270-8385-4b3b-8dfb-110ced78d943","version":6,"status":"done","tags":[],"date":"2026-02-02T15:05:10Z","url":{"schema":"http","addr":"give-reward.specialfors.com","fqdn":"give-reward.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"172.67.204.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"give-reward.specialfors.com/","fqdn":"give-reward.specialfors.com","domain":"specialfors.com","tld":"com"},"title":"PUBG MOBILE","dom":{"size":22570,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3782)","md5":"3724fe90392ef06d9556c2e344f7f76b","sha1":"9020148dd6b2f82290d8a5c5db29af5cce3e8bcf","sha256":"315dc77b2354434f06dca638e025ef4d83d40ffc3ef562fcce2c9b0e85814cfb","sha512":"f40b32f144e33139ed285c8397e4f7a75675acb18ef6ff446988e42a7e6ff0b448a70c33a3656597a0a1265b2723760745aa583bb9da7c4c4fe67d66faa9c838","ssdeep":"384:/NkLZPyqYRqtZMBUaYKyRJyyNarV43sRFCuYN:/NkLZPJYRWMBUaYKyfyyNa2UFCuI","tlshash":"47a2ba2065f1a86301db88c074665b1b3df19367c64b0598bbbc47e56f9fd6ade2301c","dom_hash":"domhash80396197fc1e2bb0a36b63c8d2b80b60","first_seen":"2026-02-02T12:53:22.619171Z","last_seen":"2026-03-22T22:37:39.897631Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"give-reward.specialfors.com","fqdn":"give-reward.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"172.67.204.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T15:05:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":6}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-02T15:04:49Z","timestamp":1770044689,"ip_dst":{"addr":"104.21.52.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56162,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-02T15:04:49.754284+0000\",\"flow_id\":476289275354397,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":56162,\"dest_ip\":\"104.21.52.83\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"pro.gamezone.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":926,\"bytes_toclient\":3546,\"start\":\"2026-02-02T15:04:49.744733+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-02T15:04:49Z","timestamp":1770044689,"ip_dst":{"addr":"104.21.52.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56160,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-02-02T15:04:49.757616+0000\",\"flow_id\":770241132059773,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":56160,\"dest_ip\":\"104.21.52.83\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"pro.gamezone.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3472,\"start\":\"2026-02-02T15:04:49.744573+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"give-reward.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"give-reward.specialfors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"give-reward.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"give-reward.specialfors.com","ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-23","domain_rank":0,"first_seen":"2026-02-02T12:53:14.667728Z","last_seen":"2026-02-02T12:53:14.667728Z","alert_count":6,"request_count":2,"received_data":3179,"sent_data":957,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-02-01T22:46:30.991716Z","alert_count":0,"request_count":1,"received_data":90137,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"jipang.fortoday.asia","ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2026-01-05T04:44:03.575122Z","last_seen":"2026-02-02T12:53:15.476953Z","alert_count":42,"request_count":14,"received_data":666054,"sent_data":6638,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-01T22:25:39.559997Z","alert_count":0,"request_count":3,"received_data":365109,"sent_data":1587,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-01T22:32:08.727296Z","alert_count":0,"request_count":2,"received_data":37196,"sent_data":901,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-01T22:29:52.319656Z","alert_count":0,"request_count":1,"received_data":1903,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagedoo.midasbuy.com","ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"domain_registered":"2018-06-05","domain_rank":2848692,"first_seen":"2023-05-26T02:11:09Z","last_seen":"2026-02-02T12:53:16.213613Z","alert_count":0,"request_count":1,"received_data":31115,"sent_data":505,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pro.gamezone.workers.dev","ip":{"addr":"104.21.52.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-01-21T05:30:59.275403Z","last_seen":"2026-02-02T12:53:15.173597Z","alert_count":0,"request_count":2,"received_data":502349,"sent_data":976,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@0.3.8/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","size":17266,"data":"","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-07-22T11:05:53.226108Z","times_seen":1630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T15:40:41.538622Z","times_seen":421379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-17T15:41:07.914768Z","times_seen":498680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-08-17T07:36:36.150874Z","times_seen":4972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzcode/lenzz.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87ba503fe3fa2e9e5fe36ec7c7ec293f","sha1":"40ec0ece28a1caf10bec62673864d07821d5366d","sha256":"730f0d44a4520ed7ade0e03d99924ee3057693f1f0736fe0b34f46156a4dab21","sha512":"3e4017de81eaa8765c005a1979537078f0739d91ff6bd071d015be5a5d92e27bed90f372e0b16c19f5f524ac850edf0a3a684ed9a25b490e904c6ec7ec58f909","ssdeep":"768:gxWmx5NxnVlPCO9YR9CG5lFgy3vqTRb75nleaHFViXy/KkVLlJc+kTKWZcZIV4f9:n3RDyT95l5V8KyKnwU","tlshash":"366374d83882a04f6a060e7fba36e8d9d5153f39e04c46d9d684bd65d1f013ea8f6339","size":71732,"data":"","first_seen":"2026-02-02T12:53:22.623371Z","last_seen":"2026-03-22T22:37:39.930294Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"give-reward.specialfors.com/","fqdn":"give-reward.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e1d1d7cf4b13099aba5edaad1d3d2ea","sha1":"dcf8336675967fb790ecf94d9a8344ff1b97d8bd","sha256":"45c6992a731067444824f9e2c62064479d435d7e9544f721602f847c3c94cfba","sha512":"94d84efc0634b79c40d72feee9e98d16b56dc506367110ab805a826605caec9f2996892d7785f3d5b7e32081f1ba0c14a8841656beff8e3f96d1b14e03a66cd1","ssdeep":"","tlshash":"a7d022d33c1793352c59029a276fe0d828944a336915c434bcfab7004f70b43a506bd9","size":209,"data":"","first_seen":"2026-02-02T12:53:22.64874Z","last_seen":"2026-03-22T22:37:39.939079Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nage: 1106796\r\nx-served-by: cache-lga21931-LGA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 407927\r\nx-timer: S1770044690.789228,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-17T15:41:07.914768Z","times_seen":498680,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":53,"dns":1,"connect":14,"send":0,"wait":13,"receive":6,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 02 Feb 2026 15:52:49 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1uEzHPucPb6yO2yEklG6Y6UKbwjBTHPpNxK%2BDxGTkizTuBfXdoFLMCqzJiDkGdFWMEfLnJRFHbZ1Ne1di5UlpD8crB0Z75JhwGu6QGt0rykYGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncf-ray: 9c7a954ede1e56c1-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-17T15:40:41.538622Z","times_seen":421379,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jipang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 109808\r\ncf-ray: 9c7a954fee847130-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-1acf0\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1005835\r\nexpires: Sat, 23 Jan 2027 15:04:49 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HhQsF%2FZKesSrr9Fyrr42z25sSpxKrvDH7pKJK8Yuk967hTrawNevdImuSznBTPpWQ3nEWF7ZUooZwdO07XpTwE6OlRfiQzlP%2FhlqhEIbysufpK3yTtGsFQyuZlh%2BD9fAjTIP%2FEFB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109808,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280","md5":"005c9aa92b564b73b7582cc4f1fa49cb","sha1":"373361ed756b1fe68ce2f5968d467826b6973bb5","sha256":"faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1","sha512":"cf057683226d25fab8518295d9a2bbc7261b85a0e911d323f949719b6484beb99843887ac634e58f21988c5af3b8d825b8289cbfe29b2d4e1817016be1499bba","ssdeep":"1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK","tlshash":"56b312cbe021d582bdee1c5b69ba14bf61180424427dbe9dc306746bbf16e023d0bd27","first_seen":"2023-08-04T22:28:11Z","last_seen":"2026-08-17T15:39:17.244235Z","times_seen":31092,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/3.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/3.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 23 Mar 2024 15:34:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36640\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7TlUjvylgZM3SD41%2FaHeHfcpIVERwa%2BCNL3f0Or7g0P%2FAa%2Fov8wLo0Wxhz9H9WXU2RV6WRhSb249ay5e%2Bo%2FI8vDuguYXFZ2mfryR71uIkteYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95506e3756c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b3a839a759d0403f4e2645ccc2d7d6f7","sha1":"0a2a09d3ca75b9a2fdd7198c15dd7d34066225fb","sha256":"255e84dd3395a7be094dfdbd60f9a3df16a5741419dceeeab0cecb82101e4787","sha512":"e647cc5af229b6db025cb4f785c5a5e11ef09f2b4b07eccdf83c648daaa4f8e159b000bdba7db9fdc124f7f02798e03ba171696a43cb0e088efa63b3efe46267","ssdeep":"768:IRG5XErKMO07aUdxu6AUnJ9YkAHbeCZWGR+BaoM2ZnhXK3PVa7jWc:c5mqxfFXYh7eCZW/55K39aR","tlshash":"e9f2e09e3874d2bdfde1020056b8caa2ce61c2cae5e13516b4078cb5ed92fcd4694af5","first_seen":"2024-12-09T16:53:48.092205Z","last_seen":"2026-08-16T20:15:51.074472Z","times_seen":51,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/6.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/6.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 24 Mar 2024 12:29:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28752\r\ndate: Mon, 02 Feb 2026 15:04:50 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23146\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXTIOGVm2Nq5abqJJqDbwmiBhqre9%2BKHhUbk1oed%2Bbfx2bEOaG%2Bo1VAZjcrvb%2F9p4oLPMPlaipvQUEpbPkt2gBDL6HT%2FNfPc26aZt9QbPykk2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95507e3a56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"64eedf0a9b00b77c428a7bad65d8e608","sha1":"d008fcf0f62b35e6c322de7e94d125089f9640af","sha256":"31fddbbcb0692d1d5a8f97e1d76d0b5f0588e9b12cf26567a224341aa7e95c59","sha512":"694356aa3d2b56c11b0688b257f13fa8f51ef86b9a12002c0c7bd2a084d4f237c1950bb670ec1ee8e77d9f087e4190dcb993565634b99f25606aa6949d054e67","ssdeep":"768:G+FPoPHF+0wzF/42Q0j4wBXfKd0LF5rb2lsiZ7kh7o3g:hFPAHEpzF/L7BXBLFdQsiZwh5","tlshash":"3fd2d06ea9d7a3b452303b74f4413da09b93ff59638cd72d0db22eaa689d804516c02b","first_seen":"2026-02-02T12:53:22.634221Z","last_seen":"2026-03-22T22:37:39.918114Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/item.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/item.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/lenzzcode/lenzz.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 03 Aug 2024 11:38:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16196\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23145\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FG9JAiDy5QJWZrx8RT0fW2PhVw2iasKxqZjlxGAzivGDWNpeEaxpHCx6ubXPwhGyNqxxxkkxIxItYr34U83%2BkTgZLVAvjB0fQqF8FftgaXM5NQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95507e3c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16196,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1632x1632, components 3","md5":"2205c53ac628186449d92d682c4d1342","sha1":"9c195c6d26f1701be1aefd70c1beee253941fb40","sha256":"39aad5845a177d9d18f42eac4bb58209812d0fee0468055625db9571a5f0dfbb","sha512":"1eb3db7c6a23726208eefed532497ffc1a806a1e6c1f7bb0eab64c727ab26c59a8518b9f0ace5a4e7658d0e0d388599204dd4c649be1db1e16684135b82d6734","ssdeep":"384:UGTE5MroX6Jm/KFfmoJUP8GDjmHwP6Dt4KVQ:Un5yoX2AWJUjZSDtE","tlshash":"fa72bf373b8601cbc5949b798e6b17b77f729582e72788c9140c08e237932b6bdc9791","first_seen":"2024-04-05T07:59:37Z","last_seen":"2026-07-22T09:48:27.385343Z","times_seen":73,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzcode/lenzz.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzcode/lenzz.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:38:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 01 Feb 2026 20:01:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3578\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 23149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECpz9K53pN4cTjKPb%2BsXWhbZ0vCSNzfJM3e509f8QK4w8bT%2BBKUG1fmrUPZaz9aKouu5w8%2BEunmswJ1uzB%2FPp%2FZ1zF0PF9uosU855r9O7YYJXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c7a954ece1b56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16577,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (913)","md5":"491c4e5073d75d9ddbdc38c9d9b0139e","sha1":"259224eb7bdc26525d0af22309caded3d508ba76","sha256":"44d10319dc5054607a39f21deb3382ed46db2026690382b3a8e37455c37e7d67","sha512":"ef94135eedc11d742e5f48c0bd0642ee749757df7af55ce091dc6a33c999a5ed59f931f05cae20eacdc8cf9b98d2663f41ce9de793aa86dc113ba66283173a32","ssdeep":"192:PkeENoiIntjxjBmsMHOuvHmj49z5dcjvb5d6vJed8bjNnsqzqh0p1iTGF1VCQs0D:ce6or1YNVOPYFjNsqzqOtFzjPxFElfiV","tlshash":"747293a239431045f517d6607fa3dbaa726da543c506c63dbfd03098cf8d2e952b6b8c","first_seen":"2026-02-02T12:53:22.628595Z","last_seen":"2026-03-22T22:37:39.934652Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/disable-devtool@latest HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6646\r\ncf-ray: 9c7a954ecc2456b1-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230143-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1449\r\naccept-ranges: bytes\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TJrB1tk1qDuX6aRUZcEruJnfS6%2Bf0OZxEOmOmde53nFRrZnSkli743%2BJbHTgXQ6u%2BkN9ktbFwQgUk1KLhalWIOyUCzm1vl5j8mHPS7a%2Bg9%2F71EUz%2F0mL%2BzhX6lHVVxdAPUY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-08-17T07:36:36.150874Z","times_seen":4972,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagedoo.midasbuy.com/material/202212191737170171064960/80b0ef40a85a81570372c174515cba23.png","fqdn":"pagedoo.midasbuy.com","domain":"midasbuy.com","tld":"com"},"ip":{"addr":"43.152.140.79","port":443,"asn":139341,"as":"ACE","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.midasbuy.com","organization":"CENTAURI DYNAMIC PTE. LTD"},"issuer":{"commonName":"DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Thu, 17 Apr 2025 00:00:00 GMT","end":"Mon, 18 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:C0:42:2D:03:4F:38:58:E6:A1:2A:40:FF:E0:C8:99:CA:D5:21:99","sha256":"30:85:DB:98:42:24:54:F2:64:05:32:EB:ED:AD:83:0D:25:C2:2C:34:27:EF:72:1D:D1:BB:C6:C7:B0:BE:EC:36"}}},"request":{"raw":"GET /material/202212191737170171064960/80b0ef40a85a81570372c174515cba23.png HTTP/1.1\r\nHost: pagedoo.midasbuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 18 Jul 2025 06:22:08 GMT\r\netag: \"546e052fbd5406ed76fad52803ee139b-1\"\r\ncontent-type: image/png\r\ndate: Fri, 18 Jul 2025 06:24:05 GMT\r\nserver: tencent-cos\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nx-cos-hash-crc64ecma: 15280052147421766208\r\nx-cos-replication-status: Complete\r\nx-cos-request-id: Njg3OWU4ODVfYzlkMTE3MWRfMTI1NzdfZGU2MWM2Yg==\r\nx-cos-version-id: MTg0NDQ5OTEyNTM5ODA2NjY5OTQ\r\ncontent-length: 30169\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1480614759732278282\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST,GET,OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: Origin,DNT,Accept,X-Mx-ReqToken,STAFF_NAME,Authorization,x-request-id,X-Request-Id,X-MVS-CSRF-TOKEN,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type\r\ncache-control: max-age=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 248, 8-bit/color RGBA, non-interlaced","md5":"80b0ef40a85a81570372c174515cba23","sha1":"ce1cad7d54b530012d2f45203c814df6abd76aea","sha256":"972b20f95a6e6a3ae7968cf94b20851db352780f7cf58f46f416b1d5cfa7b0d7","sha512":"2843bb928b46ce75301c64ee148e0dbca2afce0c69560fb2be259d73ec2e1f314590b4cd779934acef77a9e4d8aa06d78ce04b28113dbc97167d02b0304474b8","ssdeep":"768:6IZpvRQgRYC0vwnU7e3LvfXglZewCxMts3DgROiEeNq1d9:r7vRXYC0vwU7e3LvfXglZevxMtcDg8iC","tlshash":"f0d2e1fe087bf7d21dab91b4d6b4df062aa7568500f7957df677816cce02ea18100829","first_seen":"2025-10-12T13:55:09.259677Z","last_seen":"2026-07-23T22:44:16.932179Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1723,"timings":{"blocked":852,"dns":390,"connect":8,"send":0,"wait":9,"receive":3,"ssl":459},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.gamezone.workers.dev/?v=https://cdn.midasbuy.com/images/1.84558463.jpg","fqdn":"pro.gamezone.workers.dev","domain":"gamezone.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.52.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamezone.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 15:38:34 GMT","end":"Tue, 31 Mar 2026 16:36:21 GMT"},"fingerprint":{"sha1":"92:4D:A6:E9:00:64:B0:8C:C9:E3:B1:2F:C0:0E:76:D6:37:42:40:D0","sha256":"5D:B4:CC:1E:60:85:AB:A6:44:C6:07:22:CD:24:B3:4D:03:CF:17:03:4E:CC:9A:D4:17:66:2E:F5:B8:4E:11:34"}}},"request":{"raw":"GET /?v=https://cdn.midasbuy.com/images/1.84558463.jpg HTTP/1.1\r\nHost: pro.gamezone.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 300293\r\ncf-ray: 9c7a954f2adf1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7916\r\ncache-control: max-age=604800\r\netag: \"53a4eeaab9cbb1267a6b072a037a74e25c1196bc\"\r\nlast-modified: Fri, 26 Jul 2024 08:45:36 GMT\r\nserver: cloudflare\r\nip: 9.21.4.69\r\ntiming-allow-origin: *\r\nx-cache-lookup: Cache Hit\r\nx-cos-hash-crc64ecma: 4863905231523818987\r\nx-cos-object-type: normal\r\nx-cos-storage-class: STANDARD_IA\r\nx-nws-log-uuid: 10801007193462122853\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpkCb2QY3Dgz%2Fq9XLfa5jwJXwjiEZ7N9XxdrMbiyicVjlJlKnR%2BOewR%2FsrkdXXV2w19KJd8v4wcEFrs9su7xcuMqdYDS7pCh%2BmSl1Qy%2F%2BnU26gJJILJi0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300293,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2460x1080, components 3","md5":"845584637878717c9f1826acf9fcbbd5","sha1":"53a4eeaab9cbb1267a6b072a037a74e25c1196bc","sha256":"ab5a2fdfd17a380d288304b941740f2b3cd5ab580202ebde0eb746e75e1c5d90","sha512":"cc2fbf284fafafb28b145487d809ace8ec7d4604036b8e9b5a1d7a3b2ea960c021e2fc46be6430368b14e5527601b927f2bfd37f2c5c42c7c8e241c0eecf18fc","ssdeep":"6144:2HqoMZjjJ+kuHSW1tpBtzTN+YOKELxCcGxkWnXfa8h9QpG:2KdjOHbpBtf7ELADCDo","tlshash":"de54223d5ff4c2a0f2b651b89b0293516841e56a46a126339573ee8bf33c5fc9d1223b","first_seen":"2025-01-22T15:28:39.070635Z","last_seen":"2026-07-23T22:44:16.923059Z","times_seen":28,"resource_available":false,"data":null}},"time_used":964,"timings":{"blocked":43,"dns":9,"connect":2,"send":0,"wait":867,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.gamezone.workers.dev/?v=https://cdn.midasbuy.com/images/2.4d71ee03.jpg","fqdn":"pro.gamezone.workers.dev","domain":"gamezone.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.52.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gamezone.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 31 Dec 2025 15:38:34 GMT","end":"Tue, 31 Mar 2026 16:36:21 GMT"},"fingerprint":{"sha1":"92:4D:A6:E9:00:64:B0:8C:C9:E3:B1:2F:C0:0E:76:D6:37:42:40:D0","sha256":"5D:B4:CC:1E:60:85:AB:A6:44:C6:07:22:CD:24:B3:4D:03:CF:17:03:4E:CC:9A:D4:17:66:2E:F5:B8:4E:11:34"}}},"request":{"raw":"GET /?v=https://cdn.midasbuy.com/images/2.4d71ee03.jpg HTTP/1.1\r\nHost: pro.gamezone.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 200126\r\ncf-ray: 9c7a954f2ae41a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7916\r\ncache-control: max-age=604800\r\netag: \"89aace8dfc7a3c29c852b081625380c305d2f5a2\"\r\nlast-modified: Fri, 26 Jul 2024 08:45:51 GMT\r\nserver: cloudflare\r\nip: 9.21.3.131\r\ntiming-allow-origin: *\r\nx-cache-lookup: Cache Hit\r\nx-cos-hash-crc64ecma: 14288460256449759432\r\nx-cos-object-type: normal\r\nx-cos-storage-class: STANDARD_IA\r\nx-nws-log-uuid: 15918491313977443565\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0w7geqIgVAgaO9bIV6V%2FiqEgtdvCssR4xznLe7a2Wo3DCrB4QSgRBIELIkJbWnxdt8NaMAIj38jp%2B3odzke6OybcXzYafO4SUmhoPTXMT3Fzfau8oz2lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200126,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2460x1080, components 3","md5":"4d71ee03b0f0bee2365c91b54956c404","sha1":"89aace8dfc7a3c29c852b081625380c305d2f5a2","sha256":"8dd984223922810afa892b8d60539352f4e30ea19c1826f46529dbbb3f42d898","sha512":"f7255d8b805069ae829b985ffe6cf3c135a688de7b27e778c02c9af2c26a77f75612cee950f15806f60ccfdd1aa3bc7457f62cc260a69208455c9ea66c7ddd95","ssdeep":"3072:9Z0h08Unwyn/2zEmk91N5jE+ytPNlT8j8VZoh3kcw7RT03gZ1vTvsbXvgv8NCY:9ZGUwkzR9fq3tPwj4ZEGU87sDg4CY","tlshash":"ab1412a5090626d7c9ffa3300296db7d2a0b85fcc5598b61e2b44f71e8e26f2bc34516","first_seen":"2025-01-22T15:28:39.132159Z","last_seen":"2026-07-23T22:44:16.925234Z","times_seen":28,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":836,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/1x/googleg_48dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:50.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /images/branding/product/1x/googleg_48dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 02 Feb 2026 09:58:31 GMT\r\nexpires: Tue, 02 Feb 2027 09:58:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 18379\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"48d1e61838fab0ad9ec504e6542df68c","sha1":"0f16d1e3efcc7004e956d9c4b6a5d512f16d49b2","sha256":"07720415844812cd39f10d2cfb6943092539552f8308c9fad970ed75eb08bbe2","sha512":"d3382e03d081079672d7bdff35fb3d58d6b79a92d701b9a034e8bef058c7bee3ce50f470e6446c69ddc5fc9cf35a52d69deed9f7cae0d733efeffb1aa6cb7768","ssdeep":"","tlshash":"e42174d684564629fba552a7771811b0fb2368ea711deb289d1f365c34123e2818b8e2","first_seen":"2023-05-09T16:41:39Z","last_seen":"2026-07-18T13:25:17.48968Z","times_seen":356,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":198,"dns":8,"connect":28,"send":0,"wait":29,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18778\r\ncf-ray: 9c7a954eecc8b503-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64cac444-495a\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1578613\r\nexpires: Sat, 23 Jan 2027 15:04:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=y0ZUrJXeS%2FYSeQ8SizsSgm%2Fuarn%2FaSS%2F%2Frzfe0ukle5PPjdtkzdXCUAPKyJ72HBKftPASXPQgcyWAGO4TGHphyp14UdTVn%2Fuf1evt5cAIQjoKcWs1NdgUHuFEpRYdmp%2FVz1z7CUo\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-17T15:39:17.255306Z","times_seen":47032,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":18,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/token.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/token.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:38:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Feb 2026 17:10:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89558\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23149\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APqX5rxEQtlrU%2FLjN8mf51gXpEHEgMBGBVx%2BaAmqqw%2FAYPJ3zOTz6uhGjbikfLIllTZvelFFsOO0D3J5mooFRPUQFruV6%2B8qmlrhCwFJb3%2B85Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a954ede1c56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89558,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"e5043dfa5c08d9d747975e29eb3d3e21","sha1":"6a28004a74e14d70a931cacf2b5c22e5aa5b2227","sha256":"a68c43e6fe0b68060fb51f607b6032339271a8f798a0983bfb70dde8d1e3d3be","sha512":"87dae2300d77b785885f32cb3f0e46e7a8348457c7ab3eafa7eadc5225cc5d686265b9eb4d1858055bd8addf3ae39f4e4c13a3af35ced8938d23613328efac2d","ssdeep":"1536:6Exhy7pKA27ifV0RwW2mZd0X2ybmTsmXV6LT89ZsdM87AciVOKdO7JzPwyReNctb:6Exh1K0a3Ed0X2yEl6Lo9ZUM0AcLJKNW","tlshash":"409312f7b4e3f410ec2128a89a40ddb83788a24c9dcb59e85123f57139cdb89dc94b2d","first_seen":"2026-02-02T12:53:22.64271Z","last_seen":"2026-03-22T22:37:39.912933Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jipang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150020\r\ncf-ray: 9c7a954fee837130-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-24a04\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1002152\r\nexpires: Sat, 23 Jan 2027 15:04:49 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6TXtgXjoch24WBl0VeVRhVe60RVUbrR29nS3u3Jf4bVm9BlAucm6v8pqYqB15JiOWxsK8dKGgq2cN7Xf9MPCRjKk5utoyvmj1G%2B8zTT%2B1laQxl9pk%2FdzMB83XyP5KByIWwTNZaI3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-17T15:39:17.24345Z","times_seen":41273,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":14,"dns":1,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/5.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/5.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 23 Mar 2024 15:34:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44378\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IhV9J1ARHUEVgG35Y5mz%2F0fNRirsCA0%2F9udIuK%2F7Bu8FD86v2vnpVV%2BU7JKpkmz2wFKqErOXP18wo6XtsOvZEHuxDT5Xo5NKzo6zTHLOPzlnaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95507e3956c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"9665828be7b6f58c283ec013c85a7c3f","sha1":"2dded3180a150d60de0d738486c3c074429d816c","sha256":"5058d3671ac6a5f186e756d1ad0e1108247df39a03165f42e288ca6442817a65","sha512":"2b0a2877384fd9cb41b33fea33573bf221768acd92f0709446e8b1defcd977fa9bf8a96d72437d5ab2280d743b8605d9134a9d50886164db8ad425e5090e17b0","ssdeep":"768:1i+FXnUCHAdYp1PduhQLs2Drz7J/g6FXbqKRpNViyyK3:sijgdQOK1rF5XbxdVbN3","tlshash":"3f130186b75278ff822396209c7dfe6ac6944539f1ba3b20413e6f28315c52e5cb521e","first_seen":"2024-12-09T16:53:48.094138Z","last_seen":"2026-08-16T20:15:51.0306Z","times_seen":52,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/banner.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/banner.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 31 Jan 2026 22:03:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 176655\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23145\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FZgowTVIeYAtFwotE5e%2B7%2BpnXV7X4kVsqPfRl3LQlNB2Foy5P9S6Q%2BF3tVVhoYP5ENLBeFsdVFBU6lWHZTjeCdtkRS6FmG%2FLZk0PSTL5FB8AQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95507e3b56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176655,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x533, components 3","md5":"0402c5995465b57763ff0a94fe418ee8","sha1":"573adff8a14ef1f094bff9f9a26a07997049dca9","sha256":"398059e8ba72e4b21c07ab85bcc0025bc3021da6c8728192f4b24767445c6158","sha512":"ab620aba834126abccdfc2055a502c9c7e6b3eda17119cbbb9cd75cd56603f8796f806cbd1855924520278fa84a9d49971c9d9697b3ec5d3b24088fad34314d0","ssdeep":"3072:/UoKccdTJApe+NU+I05jIm0v+yeTzexFjeGlHPDTzhsvJyZRDgm0fl2lbxM3:/UZTQeaUa0/eTzkFNDXhshyJgmbxO","tlshash":"220412a9de28f10bd3ff1c9462230e081f4b49d656fa2ccfb44eb34ee5664689f1a415","first_seen":"2026-02-02T12:53:22.638664Z","last_seen":"2026-03-22T22:37:39.908652Z","times_seen":4,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/logo.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/logo.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:38:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 31 Jan 2026 22:03:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28082\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23148\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNg%2FqmhErQp%2F0GSdiM%2Fk46LkOZ4uqzOIG1gm9bXVh6ifrWML9bsrB%2BliqgvrPCfeyqu%2FKPHbOUMvHY0V1VxVsyXqWeB%2FtTVIhm8SJp9xKGBeNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a954ede1d56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 282, 8-bit colormap, non-interlaced","md5":"4405cb90278de89daf1940d54a1643c3","sha1":"72f2ca0d8f8bd2a9b5263177604c891327a54f55","sha256":"705cc078a18bec84393bf01455518782f2c70733ae0a512288170705e88bcc9a","sha512":"5665b0a983bc92d370d2f77331f7d1cbe7d82cd3969a4bbca42398129e2f4a60a12c79908ef8a883f838b8ab78c6699b0c40162449211e88042e1b474ec87dba","ssdeep":"768:KsOJVTtXtFA6YVAi2mXPM91BzyXd2Xz49X:xEBtFLYrvG15yXx9X","tlshash":"dcc2f14e2969c86e893e9ef30dc471ecc935d6b70885cdf546bfe42e040d95c74109ea","first_seen":"2026-02-02T12:53:22.622151Z","last_seen":"2026-03-22T22:37:39.915246Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"give-reward.specialfors.com/","fqdn":"give-reward.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T15:04:48.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialfors.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:20:18 GMT","end":"Thu, 23 Apr 2026 16:18:47 GMT"},"fingerprint":{"sha1":"68:E6:C7:99:AC:7D:04:0D:60:1E:7A:F3:6A:A7:28:71:AD:4F:E7:17","sha256":"67:9D:3C:13:E3:90:BF:48:1C:B3:F9:36:E2:41:B9:0D:9E:D4:B7:DC:D3:EE:5D:66:82:48:AC:F3:86:0D:0A:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: give-reward.specialfors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 25 Jan 2026 11:48:43 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikBUNghCTu6Y%2FknEtGrdkvQwvCSp4pcsWFMw%2B3aQrAoPcFSUjgrZwU90A4kDz6tp53AqhNYiksxPQ1x9SK2SWPHDkch9eOk07ldtjPteh9c661TO2ce%2B9kwfRg%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=1800\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: 9c7a9547c83a5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":899,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5ab3f6f45e07ca3b07a48ee3c8829a01","sha1":"3bbd9eb54c690142a3c5e68be919323d7ecbe65a","sha256":"25e4385a0620c6e5959cd80795f9f84ad3aa58fdda098bb9c13429a4a2e7c2e2","sha512":"10078b1c4648239bdbbe04f19445935f74442c0c44911088101f7ee3d24d2d6160800ffa5ef44306ce6005e85d07bb23a186b4f46f915cf31ec6afe1fa96a5a5","ssdeep":"","tlshash":"c71189976c8228184030c3746afaf09dee9704a337018671bdfd3a178f74b928897bd8","first_seen":"2026-02-02T12:53:22.64057Z","last_seen":"2026-03-22T22:37:39.920522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":708,"timings":{"blocked":45,"dns":26,"connect":1,"send":0,"wait":618,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"give-reward.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"give-reward.specialfors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"give-reward.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@0.3.8/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://give-reward.specialfors.com/","date":"2026-02-02T15:04:49.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/disable-devtool@0.3.8/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://give-reward.specialfors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6459\r\ncf-ray: 9c7a954cdb2d712d-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.8\r\nx-jsd-version-type: version\r\netag: W/\"4372-cTTqYs22VcKkI7FmI2XJm6ZFwr0\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220101-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P2tiR2aDg8MwpPTyRW%2B63wbo1vmFaP56WzezI%2FlWJSlktota8chplW4rHrTQk%2BU279Kx3LpgBHX2JF8E0tVrG7d4yWlk1Ys6KFbmH%2FfJHi4sq%2FSKBQHqu8onSOIvKVh%2FK6M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17266,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)","md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-07-22T11:05:53.226108Z","times_seen":1630,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":10,"dns":4,"connect":1,"send":0,"wait":75,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"give-reward.specialfors.com/favicon.ico","fqdn":"give-reward.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://give-reward.specialfors.com/","date":"2026-02-02T15:04:49.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialfors.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:20:18 GMT","end":"Thu, 23 Apr 2026 16:18:47 GMT"},"fingerprint":{"sha1":"68:E6:C7:99:AC:7D:04:0D:60:1E:7A:F3:6A:A7:28:71:AD:4F:E7:17","sha256":"67:9D:3C:13:E3:90:BF:48:1C:B3:F9:36:E2:41:B9:0D:9E:D4:B7:DC:D3:EE:5D:66:82:48:AC:F3:86:0D:0A:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: give-reward.specialfors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://give-reward.specialfors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jJG2lZ3QEC93lqVWsUTCXjOqdAFlVdUyTan2M3ItNpZN6TKEest7840H%2FPMpe4TYx%2FVUyj%2BsFDUm3Ipv%2FH%2BYPhy8pMeceRP%2F0LpoJ15FnZYHldJesT%2BTOc%3D\"}]}\r\ndate: Mon, 02 Feb 2026 15:04:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a954d8b040b55-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-08-17T15:32:42.439104Z","times_seen":53573,"resource_available":true,"data":null}},"time_used":748,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":748,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"give-reward.specialfors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"give-reward.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"give-reward.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzcode/lenzz.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzcode/lenzz.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 01 Feb 2026 20:09:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16063\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwnuTEdb%2F2lVIW7EEdr%2BgnNZT3L8FXO0cU0jOoo%2BdVDnK9ZTI2kJegb7b8UiAAXrrekcTawXWruBzXrQCUH6tO3Q2PZqEE3lvuE0%2B0LYCXNAjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9c7a954ede1f56c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71732,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"87ba503fe3fa2e9e5fe36ec7c7ec293f","sha1":"40ec0ece28a1caf10bec62673864d07821d5366d","sha256":"730f0d44a4520ed7ade0e03d99924ee3057693f1f0736fe0b34f46156a4dab21","sha512":"3e4017de81eaa8765c005a1979537078f0739d91ff6bd071d015be5a5d92e27bed90f372e0b16c19f5f524ac850edf0a3a684ed9a25b490e904c6ec7ec58f909","ssdeep":"768:gxWmx5NxnVlPCO9YR9CG5lFgy3vqTRb75nleaHFViXy/KkVLlJc+kTKWZcZIV4f9:n3RDyT95l5V8KyKnwU","tlshash":"366374d83882a04f6a060e7fba36e8d9d5153f39e04c46d9d684bd65d1f013ea8f6339","first_seen":"2026-02-02T12:53:22.623371Z","last_seen":"2026-03-22T22:37:39.930294Z","times_seen":4,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/1.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/1.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 01 Nov 2025 05:02:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23970\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEIPEiXmY01x%2FcYLzc8F9NlJzwZ1cW9gId%2F9Ek1y8Z%2BI1AeCYKkvz8OgOBWjRZQAOTiXNnht697G0igEXfe7HijuAxYj15sOSwUtJbHKXov1QQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95506e3556c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":23970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"6e2a3de79805499c5613898689672f04","sha1":"39ace867c6505fe07eed2cd894a45daad3b5bd2e","sha256":"beed3e95beb0427b1d8762ef58482b61fdda2c228878896bc4e3824525e056c6","sha512":"3ee46168acdf11eef4fa6bcb490ecac84367e76f24d9b2d0118c7ddd35cc88b7f585bbaf2eb5c027d81cea6995249748b73318be4726af277f34932723625049","ssdeep":"384:c0wobtagb6b9VIRyO20h4CVWoGlsHbqN6kP69/SooO2y6mHRj+1:cs7aIEO2f5o9biZxO2y/RW","tlshash":"a1b2d17fb817fd2048685a8808ef76858ce7f7d9b0cd5348e3e4e159bab19a0094b06c","first_seen":"2025-12-26T07:43:30.557344Z","last_seen":"2026-07-23T22:44:16.926535Z","times_seen":21,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/2.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/2.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 10 Sep 2024 09:49:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65039\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aH2q7%2FEj0xh%2BNO6HF7WPo24o0bx4qjUuhtCEIioFTU5mtu9sjkK1I317QoMxNar19ezMMBFg0SordP3cLFSBFxl2vOXrV3fVczKja9ye7VItnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95506e3656c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":65039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"3c7f1879756f89a1ac8a67868cb45300","sha1":"8e934488c3a55e93a3a94a77e15d6a1807c7c7cd","sha256":"7d163b26ed7cc76c4e8e1d709c06fb877c99f9f5a14fa6f69ccbb9f3b7f92b0c","sha512":"30536c042c2c190645abdc177ef2e076275609df228851f61f734f4940e9e4d35d01491ff3bfbe9778fa1d8f524262466b8354074a8521a27e0526c85947903d","ssdeep":"1536:x6nYTwQ71ZE6dpHMjAAz4DgxcV7ffdTexxj42iyjXYcQLs:88r1ZHpsT4ScBfdyxO2iOPQLs","tlshash":"e553f1a79074d7a24cf36eb6459b0feffa7ad30c43b102d4d125a726930cd92529d872","first_seen":"2025-12-24T07:24:53.313842Z","last_seen":"2026-03-31T09:05:46.479511Z","times_seen":6,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/lenzzassets/4.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/script/","date":"2026-02-02T15:04:49.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/lenzzassets/4.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/script/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 09 Feb 2026 08:39:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 23 Mar 2024 15:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41307\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 23147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLn7UxqBMqHiVWoH2GZfGxd6IvZx4PJbNUqyBoDO0VcGKhmDUCou0II5eIFjO%2BOn61N0P%2BLacA%2FdEscJ%2BNWDg1s%2Fodz2MLORUKutBo3j6vcGRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9c7a95506e3856c1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":41307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"d71754d0332f5a680eade64c08698b33","sha1":"7be26e60ab4b9b79eebbda5ba3acab971d721067","sha256":"c0e965d2d65ebefc6383c521daeab95fedb667008b04ce99e8bd7d7242c51c33","sha512":"d3478f8c911c3f4dbee40d8936b4e690c19da67c72f353f6996bfd6134e1ea8523ba985b784437c70e524278ec992fa719d500e706c261f116ca5bdff6ea36f2","ssdeep":"768:ycTdv6xlGDKvsJ84T3tG5vJgX7BhdC0yHu2zJe5ZyZRhnkb1/IVaIJwj:3TEyze4uvJgLHdC0euKe5ZQRt01gpJm","tlshash":"8103011fe781064ce3958f3699f832e145ce9062456d5ec1ce1aa0cac910f57cb5fa1f","first_seen":"2026-02-02T12:53:22.64515Z","last_seen":"2026-05-07T20:02:39.499212Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/script/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"172.67.156.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://give-reward.specialfors.com/","date":"2026-02-02T15:04:49.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /script/ HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://give-reward.specialfors.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 15:04:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmjEy%2BswWvTDNZRX9gwgA4H3Enwnh7yjNNq1fVA3AxvW%2FnDaKy8wBawdYfPPGL6eICBhZowSc1ktjvF1g5j4J2N7b%2FE4Nz2EULK9KjMZSpdShg%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Mon, 02 Feb 2026 14:59:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c7a954d1df90b41-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":14385,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0ff994b3166fd36b48a99176c70f17c5","sha1":"1c3e9e464a78aa6e7aec5459ac06d660c4e636be","sha256":"a5e4f2d099c732f4d270fc805d47d82f36ccb188d5e82922b0027d517c3c10c0","sha512":"e23c96773dff4de1d96fd5dbbaade44ae47428512301ad007a7ed0ccc9ca134b2cf8f0f610c8d64fcf5a916fd8663569d30abcfb0a63433c000ff6b5a59d3f76","ssdeep":"192:lD4NzzT1VS4zdRtZOKHnBF2aYZ8ctc0JtGYA1lPK5NU1lPZ9WuN81lPG7HYZb1lL:lD14zrtZzBUaYKyRJyyNarNCuYzJ","tlshash":"df52fa2191f524a70262d480b992ef0b7e829253ca5b46503ffc0ad6afcfd67de5314c","first_seen":"2026-02-02T15:05:13.752565Z","last_seen":"2026-02-02T15:05:13.752565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":46,"dns":21,"connect":1,"send":0,"wait":206,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}