{"report_id":"3598610a-fcff-47e4-9a49-a54f7175f721","version":6,"status":"done","tags":[],"date":"2026-03-17T08:17:49Z","url":{"schema":"https","addr":"anniversaryclaim.dpdns.org","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"title":"Midasbuy Top-Up","dom":{"size":374,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (374), with no line terminators","md5":"4868acdea89db259b161289eec9c0bc5","sha1":"333f6ccd43f36056d99bb846705aa9c820479574","sha256":"f7e97323e389c54bc1db481270d0df9e904c0553dfc0e01888fd072656335919","sha512":"95a6a10c630b47191cb1bdc019484d5c6b92f2ed03a321726ce1ce0ecb017575668a5342f92f760740a3ffb493438d03acd04e3b33100a8cfea9c1c3bded8d23","ssdeep":"","tlshash":"b0e061e65d56c82415e0128a60f5e25d651051d47703d90042dbdc6a8a00fd3cc42c58","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2025-12-26T07:43:30.4496Z","last_seen":"2026-07-25T15:40:05.701257Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-21T08:17:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-03-16T02:04:12.350343Z","alert_count":0,"request_count":1,"received_data":31883,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"site-assets.fontawesome.com","ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":380600,"first_seen":"2022-02-10T06:20:21Z","last_seen":"2026-03-13T04:13:49.22431Z","alert_count":0,"request_count":1,"received_data":378,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":3,"received_data":109330,"sent_data":1685,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.pubgmobile.com","ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-10-18","domain_rank":76737,"first_seen":"2018-04-27T11:06:13Z","last_seen":"2026-03-14T04:58:40.554736Z","alert_count":0,"request_count":1,"received_data":406591,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"anniversaryclaim.dpdns.org","ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-13","domain_rank":0,"first_seen":"2026-03-17T08:17:51.990477Z","last_seen":"2026-03-17T08:17:51.990477Z","alert_count":101,"request_count":101,"received_data":6888499,"sent_data":47057,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-15T22:30:49.343058Z","alert_count":0,"request_count":4,"received_data":365429,"sent_data":2156,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":2,"received_data":27483,"sent_data":947,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74cb42adfe3e14756966bc9c553935e5","sha1":"51ce1726c1a69db9d68b322f8c7de28c3786f4ab","sha256":"502465d110f1c86fe532ab1c5bbdcce4c2134e702db995dfbad72eb3ec0c5a10","sha512":"baaca22402db67b946274476b97ac27bbbc9e416729f4ab75127255a6c3f27ab6ada774818af786fd0575b84dea3df2744c38f4c1dc85309e2fa8520418fc93c","ssdeep":"768:Pj5FSV8HpbRzWuMeh4grgbeMkfGzPDA0UDslggD:b2iJlzW7nLyf4A0UNY","tlshash":"7fb2c9ce79e5b61ce7bab07310bb30cab5ae6c84349cba449210d8f4f470758556bf98","size":25693,"data":"","first_seen":"2026-03-17T08:18:00.567309Z","last_seen":"2026-03-17T08:25:28.009561Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"5a6ace9629f9ded780c3b42f9e045eba","sha1":"02f658b831b70a8e24b882d7b976188854dadb24","sha256":"d061b359a380d8a96716189dbce4d2e487efadb394ae379f8c3f0aa55f6ed538","sha512":"1bc7108529ca22b1c388b0539b8d540dead21919bc823cbbeb59dce9fd13d59a694a2e0a30141d5aa70034553a8d72d2f83e9ab39e2beb21a303be03ef7b43da","ssdeep":"","tlshash":"12800080008020aa3c0c30cc3bc2282880b8a2c200c88302c22a0e28200e0820080002","size":28,"data":"","first_seen":"2023-06-03T02:29:09Z","last_seen":"2026-07-16T12:51:59.665719Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/slide-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"302d3645f49bebefe33faa337fa16743","sha1":"a0fe38d2ce57acbc95b1f4d3f7b5b5baafc91d6c","sha256":"38d59929272413395dda18835ae26c39de2cbf43a95a6778cfba10199e594dcf","sha512":"3d6c7ddb8212d06e0edc6f47940aff20bdae80aa6ee27fadfe38d59058534ee6f0fa74f479ff07c30eb084343bcc4e10a6dd2798b795c4ffc8c3da26aea0b052","ssdeep":"","tlshash":"c0312b05a4181d2c9af666389f59cd02e8fa08118e09d680fce8a05f5fb0e1562ddef9","size":1530,"data":"","first_seen":"2024-04-16T05:43:21Z","last_seen":"2026-07-25T15:40:05.715724Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/main-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61c46dba509ed4003d18053b613edb39","sha1":"f20c38330a2dd1ec8fae7f53220d8a3a5cff8177","sha256":"6a66a6f467e40c2ef0c8f0c6c77ff558538b20a4f9f0ce7c9c31331df5bf4b9e","sha512":"1c2362a84584d3baffdeedd857b0096ca2db907e1511be618e9a6999ead2274a4cfc3c9a5c7209db8b84106dc3361aa4cb3bb39d90d69c4d9978cebc3eb46aea","ssdeep":"","tlshash":"edf0ffac4b84c84b2bed1e9745294cc128e28235aed8f5c7831cfe9c0685042e81e5be","size":610,"data":"","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-07-25T15:40:05.72881Z","times_seen":317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/alert-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d8819d4b15ffe076a804a074e0229da","sha1":"0e76d42421e78a58d71c99e233335f39b8b47645","sha256":"b49a2dab55008d7ba1277b3adbb0b5f590f9b3ee25e3e89a9d78696efd262dde","sha512":"feecb522cc035e71cb96f2f0dece6b8c9da287a66dbd57eb5ca0aa96a0cf5e76d5505be44b17cd5d5c29522416e251bdd72117688bf21cb659d023c02085c82e","ssdeep":"1536:7USf/fL0hmyr2qdXUfaHKVBl8l63rBvz/TjxU7phH7KwVABNClrvBorz9AT7nb/T:CyfbxWYLOz","tlshash":"13c399d85384c8bb1ece6d03ad38598695b3416ba68c3e4fd319fb4876b41dacb484f1","size":120664,"data":"","first_seen":"2023-03-07T01:06:45Z","last_seen":"2026-07-25T15:40:05.761094Z","times_seen":746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6757da209489d96df42a614bf285cf75","sha1":"f8397e6774f88545c26e5d21b3cf694ac0aa7867","sha256":"d28cdc76319fa01ac711c9605b84d7cac08c39a52d83ca192aa0acf388bfba51","sha512":"3318376831588d0fedd09cd9cedaecc686e49db3766716689a31507f09ad595d2e91cdc833ad8f2e0d4ad1eb5eea02c189d3c5480b1f420382d4959adca557ca","ssdeep":"","tlshash":"8a70002000232a20220008222020c3a02ab88c30f8022280a02b0c0002808082000820","size":22,"data":"","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-06-01T08:50:18.297776Z","times_seen":918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/lazcode.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a79f8a0ffa1374253d7bda820ed25aa0","sha1":"4044e8f5f29daf7a31ab23058ef4ca8fb16b623a","sha256":"cb97ee7e9120b9d8ca8e403068ef9298174382509b3f305cd8881c950eb41546","sha512":"96ff5064df8cf68acebdab630e8891a703671895686ed630156cf976e355ddd0aff997ef480c8ba36a46e6bfbb439af4b04e79fc8815fb1c3ab10701b81064a6","ssdeep":"384:L4iNHi5JYF3gxqHdPsYbYwTHNeIdkxPXfsTHdpmm+fVI:LVNCdI","tlshash":"b362c148b29a1d452e33a4b5117b10043bac981b1906ce0cf86c69dc6f65f7eee76a4e","size":15256,"data":"","first_seen":"2025-07-27T06:58:26.741756Z","last_seen":"2026-07-25T15:40:05.717937Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/international-telephone-input.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5674ef5a95b8f48ba0a8405d056ba0ce","sha1":"9991445667304928434eb128a38ab05902c38391","sha256":"595f1377e816f8f8f50b3cc558c4cf3f4a83a20ac45675b3e558b6aed1d0d42a","sha512":"5a3a0916c466dab4209820c2270e23da544432c26af5d6c6baaea7ec1b5baac0cebbb764a1afb48aea2fe55d71ac9b32f1141e78d86ba6f4655d3c67cb7f60c6","ssdeep":"3072:CsJjxDkcrFNjeNkWGlXQlXaDiNQOdrZXCiu:C8xAcvyOxlXQlXuPFiu","tlshash":"5aa4f092d6216b16f750b63841a67d89298c59db8cbd7d8876ed9b8c0f2c0be4f7c10c","size":462811,"data":"","first_seen":"2023-10-14T05:17:14Z","last_seen":"2026-08-10T19:30:56.521328Z","times_seen":548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"afc22e8e3be45d7aaeb1e024e07858ec","sha1":"5b581ec2739022a3dc0dd097639836f17ec22bec","sha256":"35b9e9004d8051dbbe521c55faae29e39e646ca56fa654232359be58e42fc66f","sha512":"9cf66f16c8ba57f8565cb0792f3f7b7cbb43b97b51c1011a1f14c1bc81c4bb92d2b9ce8f0c01a6f19dfb6223cfd8893813db97760cd0c098e7d03813aa80592a","ssdeep":"","tlshash":"0a900441400d3354c45c03dd75d00534417c437044374d14d13d4d3f5c0444035dc504","size":39,"data":"","first_seen":"2024-01-05T16:39:51Z","last_seen":"2026-08-09T15:33:06.239471Z","times_seen":463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5789ed90a223c679b87ca0eb354b0611","sha1":"f52c146ac0936025fca84293996270f443e4f74d","sha256":"2a03c7059da760708330887bd0db13bf36a8545ab4551b2ef1cd42c1a9d19dee","sha512":"5076a4bb6bf69d273c9959e0c6396706f1b37f1382384edd6bdbe633396e428ad403f989908a25a17e535d5cd2c78ce242abef96db24995805b29b687e611bc9","ssdeep":"","tlshash":"f1b0120043fd7234264510c09315fa08dcfe8a32d11c51108a1f39e84d82b0c50f7364","size":99,"data":"","first_seen":"2024-04-05T07:59:35Z","last_seen":"2026-06-04T17:36:17.925981Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dc9344f8f17e4d2d569be90927f5c0f","sha1":"dc642b1b3e95cc81e042a70abae49afdc936fc41","sha256":"cf8c0b28c16db4155298015413c0accb2b07f66dca9e0c8fc1f00783c0573474","sha512":"e8007f3a3a52285e3fa658c5abde6d13892b8578a477475e6d763defa15e7c3fb72d6152d76dcd80395c4b25c29d52231e22441544f6383e5b1e6483463b2b02","ssdeep":"","tlshash":"5451cc45baa4096855a7607f1b7be404bdfd4407c508ee00fc6ca2c88fa0e2565ea2ff","size":2639,"data":"","first_seen":"2025-12-26T07:43:30.589716Z","last_seen":"2026-03-17T08:18:00.601491Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/jquery.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27335de838e10bf2a4b4d5999c517d76","sha1":"83b660b19244c170d715f4da30013cf57284682b","sha256":"e654612977b4226247e6dacd00df39e20942b906c9aed2fe405da0de47af6e91","sha512":"14e0b4ed1bc6031d7b6008c1c1735d3321d98c06b73e0a920386019806abbeb0f38033f56bc88bd633cc95090bebc1e40ad259e7b3965812942f8da988d5ca1d","ssdeep":"","tlshash":"1b41f8e897c8c89b6edc5c13ee19cdc620b6c576a3d8b2d7c31cfd8d056a252c81d85a","size":2253,"data":"","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-07-25T15:40:05.702629Z","times_seen":780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/zero-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8bc208681bc7c344435baac40077bdb","sha1":"4f4dba62ca53df4bf110d80c8a4c8d9b49e6e007","sha256":"5d7bb44c4a0536797e65f861922c457cdc17dcf6d5609f0fa65346ede695b323","sha512":"e50c0c58cf9eaadfdc1e4d44da90daf4b31dbeccbef9354a5ec34f9d292b47dfbdb6a0a06c812f8461f87f71f7ce724a12754af8973563090deca6f09ab3cfd4","ssdeep":"","tlshash":"f0312b9877c98c4767ad2c23c5758884e6bda0e1c9997b83d258ffc91f81215bc2748f","size":1801,"data":"","first_seen":"2024-04-16T05:43:21Z","last_seen":"2026-07-25T15:40:05.751643Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"999e8fd07aabced704233a141b4282c7","sha1":"35c9e8cf24e41c4154bf43f2dc6449deaf9ecdaa","sha256":"f8fbf01cc01d71760780a71ec361622b545c5ce34fa383f3a3466ab75ee58598","sha512":"d8d5ebe0d2ae0bafe206a34f2cd60245089960f8dafdf20a5660ab264b54cb913b011979830a3acc74ae4294413d2fcadc12c88d42cc3b57e23babf55e832909","ssdeep":"","tlshash":"5f900028c8232a20220000322030c3a02ab88c30e8022280a03f8c000280808a000820","size":52,"data":"","first_seen":"2025-07-27T06:58:26.759345Z","last_seen":"2026-07-25T15:40:05.776138Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/index_files/gift-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7c190cb422e83497836ce3f61fdca7c","sha1":"4f4b6d1ce3335a030b32e87f24aa95ea374c0ef4","sha256":"96ce04d959f86c00cce2f118cb55f0d87fd5fb75e9fe34f0b9973b57c1393bb8","sha512":"3fea600accbe46e4c56ce8441032c3ff8495f007d62c4c10caa05389ecbe725b9cdc43eab548fd56e609b658a28f9833c27126dea1ba813cd34e32d49e503d05","ssdeep":"","tlshash":"8031906c61a3254229cf75ac97df4051311dd103eb05ba163c1c5088bfa9d3cf9a5d7b","size":1761,"data":"","first_seen":"2025-12-26T07:43:30.542292Z","last_seen":"2026-07-16T12:51:59.633673Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/link.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b825a548e96fc6e7b6c25b9fd0d0d49","sha1":"aaf3569c3596c744989a922839b1d57f0793d725","sha256":"5980a4ef9e11dc6d99e455e8bdc538ad9ee163a2ce0eea9d9569f664c6f339f5","sha512":"8a34b4885d84b372aa04698ffb76dfd1adb81dfab5deb4ab8d930bf0b954ba4b25d5fc17fbc561cbcae65cfdb43187e4b3faca50c781b4febbd30dfdb8f76884","ssdeep":"96:VnXEWiHRwiKLAN4LSz7btQAMrAELdlQLeN4Lq73hUIeJA2E+6r8:l0WiHRwiKsN4t3rrIaN4XlJpB6r8","tlshash":"abb187047a19185199779bb6b0bb9500eb2d072f09115f09f8bc28c86f70f16fb76d9e","size":5530,"data":"","first_seen":"2024-09-17T16:02:28Z","last_seen":"2026-07-25T15:40:05.765064Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/xgoogle.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd8c6ee378a324898a89f79670d5c27d","sha1":"8236d6bbceae16da222b08ddbab82bcba33265d0","sha256":"7f82723c81221bd72b81a3426cdc2c64e4c4db0319e412c6be92e55aceec6304","sha512":"e1fe04643cfed9b1fa74fff2008d1677267b7b34b7ddf0267c5dc317ff9fa8f8a13f389e9325a1f84d65d104a367a422b9c206a70865635e36d36ed309badbb4","ssdeep":"96:biv6Ye48stLy4LjLFLlJX4MAP11lOZL6xgSIIBKut8LYLWLsLfBPS5YgP65t9h5J:mdZ8ste4vJGPicCwqnW","tlshash":"a6c12a0ab1291e9f9972d67621f64404bf7c182b45418f0cf9ac18c42fb1e49bab7dde","size":5992,"data":"","first_seen":"2025-07-27T06:58:26.661388Z","last_seen":"2026-07-25T15:40:05.727123Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"08ea2ebb2310233b8166f5389c7aba16","sha1":"d059f36af8d4e12452fb7fdb6a2c5257e322c903","sha256":"e7ec58ab3df8b550dc70a67bbdd6c359d01ece34d7c4ff8dd178dcf660299670","sha512":"e826b6f5311fda3c6a6aa6d59917922b49b549893894d5147b1a840715b3ab5defaf592b788b79cf5aee5e4785cfd281f22a88949f59a91ebc8345009f9c2555","ssdeep":"","tlshash":"ccd095621d968c3017c4014f70fee355751011d42703a90041cfcc1f9900d83c451c58","size":247,"data":"","first_seen":"2023-12-20T16:51:30Z","last_seen":"2026-07-25T15:40:05.776623Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd402595e4c55f9cfd2bf61f69d0f12","sha1":"a647a92d93a8e257cbda0407aa009c53aa51fa4b","sha256":"6c23276a0a3193fad0ed447d3beb59d29779383f535770a1541bdf9a58a6c619","sha512":"dcf723895e07b7d56bb7254b7403b102592596609f6c31f8fbdc6e8137b7177378cb7480eb4f26c697eeb0b2d2df1849fc4813fa9d5e52afedc73ab7bf1cf338","ssdeep":"","tlshash":"dcf044648b09d3a644833399547fd91b1eb2f8789229b0c238cdcfc305f8b7451798ba","size":641,"data":"","first_seen":"2023-10-05T03:23:29Z","last_seen":"2026-05-07T20:02:39.534181Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/index_files/jquery.min.js.download","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-15T15:10:20.333277Z","times_seen":142936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/trueid.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89938cb2cf130f637f6d1db74a32063d","sha1":"69cf8e41580b17e479342db0a432c785389ee362","sha256":"0d3b1851465665e900547641f7f9c620fa7bf970520acc08d9dbc1deb1e9a87e","sha512":"ed350af2a158172ff5dc3609423b2ce25275bf7542afdb7adf4b17458e61da0a1bafd7ce19163420b693c264c9b98a400659103527e78ffcd2e17844350e2c76","ssdeep":"192:eV1HJaqJAAARANUbiNmzC3j32fIYlR+ZTURQE5P5Kszgh85kebUP:eV1HJfWAARANUbiozC3j32fpRUU35F0F","tlshash":"9df16b013dc4acea634bda56fa15f2d5f32e48d0f3905e2fd114e84364e53a2a5835bd","size":7536,"data":"","first_seen":"2025-07-27T06:58:26.669766Z","last_seen":"2026-07-25T15:40:05.741928Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbfb876a16a178f38cfacf7d4385514c","sha1":"9d5b33402c979b80bcb61b8a90e3a018c80d2be5","sha256":"859affe51bfae6d98718c9dea6de5edf0de00eade7854ae81d53601f07593dda","sha512":"4d16816780a6b93bba9a263dcc13169fd4bdd4d16d327d93f8865803b8b8cb80b4aa5f08faf928f1daf80587457c768e69c99b6605f2c416aba945b422fc0009","ssdeep":"96:k4LW4LELZLuM5Md5IAbZLuuDc6K+S5TqLj4L1L2LfMPM9TWMzZMUreAfF+SMTkKb:X64YFhuNN8qv4xqY03MlkR4Yp2P","tlshash":"c9c1bc48f66b1e952e7790b911be440027ac6d2b0942ce08f46d68c87f90f6dbf7ad1d","size":6082,"data":"","first_seen":"2025-07-27T06:58:26.76051Z","last_seen":"2026-04-04T02:07:49.634262Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af90ab0bc721d00812d1ac13e8c44547","sha1":"d7acfbf24a55823f3227e76659a4bf5bff071762","sha256":"126481e9fcc364ef877975f86c3ebe21559ce9c64d76d88c8250836ea44c710b","sha512":"475f3371ef1373da7d50dc9a73b66d2c98c4d5b1ea799d1967ed2e0b28fa5aac13c29ba6d6728d4e51187fc445f3ff84815f87a8b05b11d9d0d1ca4bb5ac5290","ssdeep":"","tlshash":"92112c3935e8613ec7c6609e21bde7a83e7c21523a0b504081aecc6dad10d57c85fdbe","size":1076,"data":"","first_seen":"2025-03-04T20:15:17.317993Z","last_seen":"2026-04-04T02:07:49.635541Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"914dadef0120224114573295cd60933c","sha1":"c4811ce68cfbc54e1eca2c2ba1af8dd6fbced84e","sha256":"c5cbce3172fffe2ca10ef64d85ba4b2ff52cf3989e7ba4a04b3024f50efa5f31","sha512":"b7cb7314338437d062c4f2ef28bc9cff735642a2069400433f888087d3c7eeb713267fffb8f1775fbf3a32c101bfec2479086acb8c599a3b06071d80d4604947","ssdeep":"","tlshash":"a47000000000c00000ff0cc000300cc003fc03c3c300000cc00003f00300c0cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.393392Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cdcc8499dec336fe655502037873ad09","sha1":"df29230c72cec47be7797309e7f4dd868b430a32","sha256":"4b74080433c7e1e2cc034124f3f5acb444b95bd320d9ef3827db207b92214e6d","sha512":"0abfeb642770f7b88623dc119940432e2e68229ad8f25b2d527d756e94d0d66b8f6c0be04a98d9e8234927e737e977d26adbaf36337e1d3eade3ee21e0cf84f3","ssdeep":"","tlshash":"c4700000000fc00000cf03c0cc30000033fc33c0c3000c00c00003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.380887Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4faba762a8b0eeda162b204eacb9c3af","sha1":"9b9ccf92f9811df1df8ea6d9d4cd650f8719d23c","sha256":"67a750f06cb8461db3c08f09cd4cb51932b8f99be5afc6e97b094be20ff17b45","sha512":"70e70ba41601a9fe1ec144ba99d592332ebfa2a4d4d9d79a555622155e0764be03d2d705df58c25380223e868e2ce5c84a44c54a95ddb69acf49519517d533ee","ssdeep":"","tlshash":"6170000000c0cc0000cf00c00030030003fc03c0c3000000c00003f0030cc0cccc3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.417496Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c2274bf4d3d8c56c24099c9c6c922129","sha1":"f9ca14e62356c3d1ac19c1cfbaf96bd721bcafd9","sha256":"da55c710a4bfa6102e7212e9685e1e6ca6072de478b9b5a4ef73fb629043b9f2","sha512":"5b98acfddcf6c7700219b2f584de898054fed132c0f121c6dbb0a620299de9e832ec621f3df038d9d2790ee8a8864836607018c4930b5a07f52b9933df1e6b89","ssdeep":"","tlshash":"fe7000c00000c000c0cf00c00030030000f00300c0003000f003c3f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.40521Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c27e5c2ed7c9bc021cf46027c8d241a2","sha1":"251315bfd44456a07441481d1c9b3fc811f4aa3a","sha256":"0870b6fdcbe4700c7e9c7c316ad592e0dd191f78b472267d3946db8a8ecc8f21","sha512":"5ff6722c22fdc3a20d9f01b1d466f99779c836e841e7f4551453434bf51ac7e251e19433e907a757a77e08c9a99f050563c9526c277447bd0f209ba84477f09a","ssdeep":"","tlshash":"29700000000fc00000cf03c00030f0c003f03300c0000f03c00003f0030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.422898Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2ae35f56a615f14d8728c7874404207c","sha1":"b41cbe47fbc97c9f18d854d5209e0871beb5237d","sha256":"a6effe7a48b7aaf9b0f0efb65395e3f6a3a0f74703508a1190c62eada4a95ba0","sha512":"b9c5391f5b88e07903aa418990a8c39c606c2c8e8f025ef762b91fb6aad3b3a180817e7ce556cbc005e864c2def8bd8a38efb449e3b8d459ebcd91f74779204c","ssdeep":"","tlshash":"0c7000000000cc3000ff00c00030000000f00303c0000000c003fff0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.41971Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"37964c4d9cce527dcb1ac8b7c24a3786","sha1":"5338666ec585469c5b572b68d3927bcca80fce09","sha256":"9fc0e0126edd39b42528d8f8851ffb1275b8cb9db15548041fab20c581d1b070","sha512":"b5d3858e51822eaa9c22e867c69be0833b079e1a78b1b89081fcbc4485d2f397326246dbccce5433e9257a0b3f42123652f4367176de745b94ca93619be69703","ssdeep":"","tlshash":"45700020000a880080cb02c02230200022b02300c0000802c00003f0020000cc023000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.396535Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"569cbaa5d4e07d93d0ef40f00325dd8a","sha1":"d53d3ccf37eb01c61ab82418727c25fb284eb205","sha256":"c2a331c02c1ee796f08d7178d991fbaf91961275a5cf9986035d61a484fad97e","sha512":"ad99dee313910c9ef045e36e2b4f87c7689c54813bf764627d3beff49c6c1d71b80b5933ad9138436bcae2912e2d2c43702108ebe301a76a9974f5d4cce18837","ssdeep":"","tlshash":"d57000000000cc3000cf0cc00030000003fc03c0c3000000c00303f0c30000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.38877Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"729409264fc1bf2874651a3c16ed3ac1","sha1":"744d4edbcb9de5287abd15da414ac712e4ba7dfd","sha256":"63370806c302182c42c242c16817f18c7d204507c31a32957a241323a667b93f","sha512":"8fcf93166552d5f33e402fc5b1fc57a072ffcc6350e082e3079743c1f4ef9c4dcbefbc2686b0e424ead208d323d0d1415b4ef645f94fe3e5dcb8d1b8d0df6562","ssdeep":"","tlshash":"4e7000030030c00000ff03c0c030003c00f03300ccc00000c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.404188Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2ff07b7af9c1223cc816428b9699a077","sha1":"2f7744b74e67feb8b4d37fd68c5b341e657a5d09","sha256":"947ba6e211b46fd494a831c93774e351a2114a2068306ac8137023a29c22d717","sha512":"04a6f8e6e88c4f7f7b3cc57f919c0751dff1f5189891e1725aa6373a72bdd597926cfda9e736de4ead977c6b5ce585b42c204b5c4bfdb59f7202aa5c1358d0e4","ssdeep":"","tlshash":"f37000c00000c00000cf00c00030f0c000f00300c0003303c00303f0030030cc00303c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.410464Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e4c7a3c9e72ec837c02a88cbf6b7a80b","sha1":"0444c709587d095566e6bebb1d03c22291bd0784","sha256":"dcc572e88b89cf5f1e285e3ecdf898574e421fcdc7edb5e215a334161e7a23eb","sha512":"c779a1cd14a13e9171ce59fec3f728e3e896e6527a35e041c758b215a964243e8cdc901dc36d1f1c14be877ea410e571c095d4dab75f9f13c03b09f60a6425b4","ssdeep":"","tlshash":"ec70000cf00fc00000cf03c00030000030f03300c00c0c00c00003f0030000cc033300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.403671Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f24fb692080af454ea0130ae04dc8273","sha1":"a434de2f9c55719a8bd7eebabfad3ba9d74f0395","sha256":"e7e4e3b9731b5f668a1bf28080a2908caa3c2c2e811ef8cdbb762c7fd226296f","sha512":"79977ff67e18cae680038ef961fcc3cc928b2c37bc8e39f72494ce655eb494a671a04771f2f531fbf151d32d7fc7000bb176e79db40aeab7823fd251dd4d4cfd","ssdeep":"","tlshash":"aa700000f0c0fc0000cf00c00030030000f00300c00c0000c00003f0030c00cc3c3300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.432711Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9268bb720f57b661570d77717fb1cf8f","sha1":"b9a950fd874919ed5bb11d31b42cc036b1984ae1","sha256":"e4d50938965686c89329c9f3f0f7b67f9d183ac06da98664125994353784e4ed","sha512":"7afe9117e1e394cf14a6943b3d38112391d6af85c6923f4bf4e92d990c9a6659f9694673a5655db8c2420ce0461e841fa46daa828f6cc6d004f4d7c311fba211","ssdeep":"","tlshash":"50700000030fc00000cf03c0cc30000000f03303c0000c00c00003f0030003cc0330c0","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.420822Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"596e6606d7c4ede34de2935f3c6c187e","sha1":"d3ea84761e98142b91559b1a922cea287a5a3011","sha256":"a6171bc58c97c84152bf23c4cd548779070196e84b8ac898f0c3f6c573bb372d","sha512":"11ee51f329da90ffee3848992b6ae5552dd9449e67ec5073fd344c7c801b1a52a4a3debec85f38b7479763fe82b0a55b6953fe98d593e7ae83dbe8787f91fc82","ssdeep":"","tlshash":"1d70000000c0cc00c0cf00c00030030000f00300c0000000f0c0c3f0030000cccc3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.380377Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1fdff8c34626da4017aff0a2821d8b13","sha1":"55f2cd64499c15d5984aab9866dd55d365ccef23","sha256":"b3dff5aa27eafabdaad74a18cff6b5fe4c1d8f3772ecf27d7f97a929cb88de33","sha512":"12a4a8ae51557b64e6f163e5e00280848a72f3dd76e14dd56412fc97333a28201396a2c0ceff6fecb96345f552e2108a863df9ac2736d70e65a1366747206954","ssdeep":"","tlshash":"6c7000000000800000eb08c00028088000b20302c8800088c08003f0028000cc8030a0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.40631Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d5d4a03bd7a18c5386526c4809b986be","sha1":"cd8ee075dd8b9b45e44a1f294a363189d12c037c","sha256":"c391d5c8f3478b12e350ffe590cc18b8b53b7c0ace33d1ebc9f6a91f227515bf","sha512":"05c21e4dc5fbdcef8539e41596a5bacb6cb8d2641673920d9dc9fd7e7a8f00e221412b7e8f07b4c486f1b14ea0d0b46898fb521df9fa586e03b0c2e9bd03fd8d","ssdeep":"","tlshash":"d6700000000fc00000cf03c0003c00000cf33300c0c00cc0c00003f0030000ccc330c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.44363Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"da8268b7f06713dcb4a225ed4352c5b7","sha1":"64e26d66dbc71a35e56b995b7ed2952cd4416698","sha256":"4565f77725f2acb3bb1ddbd1a8154d6156bf0d399bc87dd62e22e5bd836468ad","sha512":"c27bc82eb01362abcc12fb842e191ca7707094db84b65e851fd51f582d3cd7f6d64ded9289adb6eac0b3c68b68dcebcae80fecc8c7deef08b1e0b111b85b5b3c","ssdeep":"","tlshash":"d17000000020800000cf08c00238000000b20300c2800080ca0003f002a000cc8c3080","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.4073Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8dc6baddfb887c207f2cfc80a440e097","sha1":"c44cdd6dd814762e2d52f58f72f09249aadf60c1","sha256":"7f97e2f5d8ac6458a314d609681f35979521288e3a0f2950cbabb8f0c0cad0c3","sha512":"f38df28f567e21ce58a2bb804f1e706b50dbf5e6448510ece60e7e2c36ecdb623dad712f564a8f9f88a490b695c952cf3968dc24e0df09f985c663daf25ebd37","ssdeep":"","tlshash":"f27000000003ccf000cf00c00030f0c300f00300c0000303c00303f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.394952Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bcac842be7f8998e3880a54fae737f5c","sha1":"c4a801e5013546c703ba5cba5c176e7d525aadc9","sha256":"69db51683da9aaff997d8865c60e37445e2bc99d451ec64029183b375779df4d","sha512":"30964c164cf84cd0d34f64b1c20e4f240ce6f0693d97dca13026b86f1763a29dfaee7e6b290360767a1ae2181476cebd5f723dd259d8914c916f3092296ba565","ssdeep":"","tlshash":"7ec09b0a18068f3c61342595d041ea15e0f7624d9fd4acf115a50d3756bc1c5406df8b","size":140,"data":"","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-06-01T08:50:18.3035Z","times_seen":936,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"79c215027f08cd82c529a10402c8b253","sha1":"99e302dfaec95f521c1deee55d07fe431578dfd1","sha256":"6e6f81dd25c454e564a7dd6db3c735f45dbe63bc45aedfc18d6c63fa82b0934d","sha512":"58088a5766f6ae5f6cab1a8baf2234da56d9ae35b6591b0f51b50ea2c1a9c685966838cb26c2c1ca455d53cec6e2876e691baae9c170d5604f64f0724fc68119","ssdeep":"","tlshash":"497000000033c00000cf00c00030003000f03300c0000300cc00cff0030000cc0c30c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.382466Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c03b9a1c6d2d1376ab7110b920b5d11d","sha1":"bc7832ff98ec68e189cd59bdac5faaa8cd059747","sha256":"ee40c4a368f53c7893aff3c16c8ac59dbec639ee5bcce94243e05aff45db1089","sha512":"a47089e16195d486038c9931dfc79e71b305f5fce1b8a9e8833d7c4b1a4a624800820afea5d86913fef30a484a13fc3810472df5ed28ce0ecfaa9ea68a758e6d","ssdeep":"","tlshash":"107000000030cc00c0cf00c03030300c30f00303cc000000c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.390286Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f7aae66ae2b52b128d01fd1b35e33453","sha1":"52b74544712d5ff9de4b1a5305f5a7a388ab6346","sha256":"519ac6acbff2bfb0f62eeec8219821a845f2cd063737b2aef9d4f2384fa6f733","sha512":"af43ca0a482d57d6f0ddb1f2a005cc91e25455fd7b1852986357dc5657d4fc4bb3b3a13682d8fa55b01ceac15857e8ec9f54294add4f7661b20dfcbc39f5c8ff","ssdeep":"","tlshash":"bc7000000000c00000ff30c0003c00300ffc03c0c3000000c030c3f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.392891Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f5799f97dd01d1b506b6c56d11b4b3ab","sha1":"24baa553dfea4ee7eea29c33ba5b62c8da6e62bc","sha256":"be90525374346d2f86a64dd1b13c775c34e9f7ed52f78543c308590d29336f24","sha512":"e4668a162a9ceda2fe22da9d46af0df8f2cf69d5c48ac5d5b020f67c1721530e14a660595201b92563e319f1aa90e2dcd09d033cc31df9344815ef3fa0c98e3e","ssdeep":"","tlshash":"4a700003000fc00000cf03c00030003000f03300c0c00c00f00033f0033000cf033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.393906Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"162f95de2178cea10bf79eb715e4d3b5","sha1":"0ac1048b6863928b93acc3f91cda49b162326c20","sha256":"661cc1cfe956c3e47afe43542b0956d36df0967d344be3a5abc13daf7f6f9646","sha512":"3ccb936c27af9f0c47ee2403d14551ef6274a514c15fdf816235be81f54755db6d6262a19448ec509bce35e5fc9492dda6c6029cc8243a9eb87bd17061239c62","ssdeep":"","tlshash":"1c7000000000c00000ff0cc000300cc000f00303c000000cc000f3f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.38721Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d04ea7f0b92f18997d7780e97ecc7005","sha1":"46147adf20a41b5c1b52c5f72e9204dc76ca23db","sha256":"360fa8d722755207a3463bfc054ad79c3c49db3d6062f57977f1eba3ce662d58","sha512":"38187574d19d2a12d968c8e5e1737513fae42cc0dcd060b95dbecfe2387bfdace3f31c97b02cd6d7e72cdf59522bab394081b241e6f68a2e057c9466aec58141","ssdeep":"","tlshash":"357000000000c0000ccf0cc00330000000f00300c3000000cc00f3f00fc000cc0c3000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.411467Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"249ee03bf7db43c6f29e76ba6404b78d","sha1":"9b4125a177d266bfc1519b6335a3fbda4d67c5cd","sha256":"3956d7cb31e362559ca075d5528bec5005aee524c51a9f77cd9455d3f41615a9","sha512":"51185abd97f31e023d4cf51144580bb51c4c0230021e6191affe6bcd0972493c3c663ddb53d6bfcd452d9c4b09f93952799c4f7d55339b8361113dbf7ef24e8f","ssdeep":"","tlshash":"997000000000c0cc00cf00c00030000000f00300c03c0000c000f3f0033000cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.430637Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"246541b0664433f23212b252305bb32a","sha1":"0866efa92eb7f9c75b3a45856a9c7e3310719b7d","sha256":"d056a96cf6d509c9def10b7dd78a46fc7b137713344e804ed849f9766c57ad19","sha512":"c1349dfaccad1b657deff3bd9329f111398235aa9cf2519526ff671203599809b733bb470379ccaf0afd2688041c421484966ade58f1ffde4dbe30bc28da3431","ssdeep":"","tlshash":"017000000300c00000ff30c0cc3c00300cfc0300c0000000c03003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.409457Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c64569b31d5a228f032c7af0dbbb959e","sha1":"e73d60cace93a0fba385efd2dda2fc91144b857f","sha256":"faff0e661677302655ef41c0fbef9c2a414473eb4fc91717bff201e5d58e311c","sha512":"5efb141ba1f51e65821fd3476d2ca7f73ec11a7aabf1cb3ccb2d533372eb742f7f49f24324e6ce044e5364558c0cb8aa41d6853ee07b30a055c1f3c8188dce0b","ssdeep":"","tlshash":"187000300030c00000cf00c00030000c03fc03c0cf000000c03c03f0330000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.375472Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dbca3d0c2e30aec4bb8135129e26071e","sha1":"c9e1cfe63d9ca153308d08d009b38f5281ac9073","sha256":"39e9000d8bf5dab29600ed51f277c601b33e2950a545e583542b9bd68cb9b1da","sha512":"5cd62ee6a5a51902cad5e230e616dbfb9b1765e6b0d981a8a94b9f33cc238af64c8d54b2e4fb92ba0d1008ccc2f570821fae447c400b8170668050fe49d5781b","ssdeep":"","tlshash":"867000c00000c00000cf00c00030000003fc03c0f3003000f00303f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.376039Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d29638340b860a0169f2c6cbc8dc9e94","sha1":"2dda54c8164c7e88101cc3f8af0464102035e38b","sha256":"21049af0b39201d5e0689734e95ddfa2a20244afeabcbea8cd9fc4de8c8bfef9","sha512":"49aaf5c2aa53b18ab4ed50eb490b1eef7b1cd89b0b4fb3d016cc91bfee606e39575704cf953f9aff2ffc0154a4e9116047a82f3f09c50ba82bb732a1c636ccd7","ssdeep":"","tlshash":"a47000000000c00000cf00c000f0000303fc03c0c300003cc00003f0030000cc003003","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.373708Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"54fa6a1a732804cb2eb71846c1c88c85","sha1":"ac48a7381ce0cea53de9797bff9ee3d827e1c50b","sha256":"28776dcbc8585ccfedc6125ab43dabb41c1733e77220bddc30365376adf9de4f","sha512":"da8a3b293933d9dc8dc0ab18576eaf6b25990ced15a13b9b5060bf8d20e27fd1a99e8046a6c42b648132688fa3dfaaa4bf821e5e4aa46f6921bd5db15f7859c6","ssdeep":"","tlshash":"227000000000c00000cf00c0003c000300f30300c0c003fcc00003f0030000ccc030c3","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.391321Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"647fb2e887881e7a43e38681c7fccfff","sha1":"3aafaaa41604b57786f6c68f552b18ddbcc2e3a0","sha256":"bd46d9f7163328d6cfe6f1ffe092d73d4bf31a10b7c13afbbee0819760113b4e","sha512":"2f9a6b2d96dc4b348d66061119840555c162a72b650af7f677103c3403722b8314dd35102f624cd17dac6f8c3ad138c90d168336427de405273e14599e1d20cf","ssdeep":"","tlshash":"8c7000000000cc00c0ff00c03030300330f00300c000003cc00003f0030000cc003003","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.395957Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fb95a63e798bbc1c52b2f422cfe52052","sha1":"03786e47acce519416eaea6350a4488f36ef2edd","sha256":"383ca780d1ed19d7c3b4a02d2b928ef255554880c51ee3317b58974bb7ba453f","sha512":"305c63fc47c7008d5f450ca05f6e575c4854405c550733b254c08b4f2f5a383e28dc2cf0519b0c987aba81d70c110a9bc77d3fee852799608c2d80d7f4cbddcd","ssdeep":"","tlshash":"f37000000000cc30c0cf00c03030300030f00300c00000c0c00f03f0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.392334Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d3b57cc7a3f68972d1d815b2b7c9d262","sha1":"d753b0fa88877e503d25cb2d4f84a46b742ea90d","sha256":"faf7526df94ba09d8201c854b3605295bd6c991b47bf736166a418e3f86ddf7d","sha512":"d7d485d7e0940479b9ba585364eea0baa6d4fb2058eafe38012c8395c1ba5a146d689752414d9ffda3c0301a22246eb83dd2afef3f426e88ae9f63dc3f4c963b","ssdeep":"","tlshash":"b070000000c0cc00c3cf00c03030330030f00300c0030000c00003f0030000cc0c3300","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.412517Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f82dff41574b0ddcad47c145b0e28050","sha1":"a2370f27ed38a5fc1e12ed4711814951c6926b1e","sha256":"db847cb68230ec9117bd8205a6aff20b71d27c3eceace3c765b22f92653cfa83","sha512":"a9b9a450285cd47fc80e0d9dfc2724937f42e4080d686224461a6116525360a8733c2344c0d836ca86643a972a2209232fdf9fd656435d07320414175c845501","ssdeep":"","tlshash":"c77000000300c00000cf00c0cc300003c0f003c0c000003cc00003f0030000cf03300f","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.426725Z","times_seen":1108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cac42769044d0dbe5b683086ab70007f","sha1":"451bc1076e896baf8c00f8c311abbd65f85d50b7","sha256":"7559e26f738b52c0f790444412c346745de4d13ebb8fcc28884862560cc9519f","sha512":"faf3d66955fbf279d054c7dbe0dfe116540eb7aa7e936aa91256810a1575504b10cc16dd0bae43036fd258d7e45b5b95dc78c9be951d85ed953c97b05676d0f3","ssdeep":"","tlshash":"987000000000c0c000cf00c00030000003fcc3c0c33c0000c00003f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.390798Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fcf74b4a77f8a18258dfe246846fd85d","sha1":"4c9f24c70f5d69ff80690a78e47f62c2ef9b8fff","sha256":"7a519afdf92bd1373c0aa3900c6c455811f624a070d68cccf5da124e6579f54c","sha512":"dc827220ccf2c5ec3426f6a80bd9fae99c5659bc936d2baa4fba0b9c07f6bec8664dd0e0809f6221ddf4251b3f278ad7e71b1e4a9b738b440773acd1eec295d8","ssdeep":"","tlshash":"167000030000c0c000cf00c00030003000f03303c0fc0000c03003f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.414696Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f5cab08d58af1c86a04a9231f211264f","sha1":"f2d69d788b83bd5ae40c26941d0c498b2fffd6aa","sha256":"f17b1d59157c1da10c25ba260aee32275310e2af951352611a5d40acee244cd0","sha512":"96a611175cf28ef88b66dc11d964de97377dc8f8b0672a69e311b96fda1431cc9f9de700ba3f3f210ce8815cdefcef15288a2e534708771f6796e25117714132","ssdeep":"","tlshash":"f07000000030c000c0cf00c00030030c00f00300cc000000f030c3f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.379856Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f878e8bd0445ab90e42c6ff26a714cd5","sha1":"cef4addbd9946a09aa2545fea536b580e5aa75bb","sha256":"bd2a6457dcf585698134e31288339b2c83c90bc3efa0207082c16f1947d81698","sha512":"1d8724433f59637b18e6a2a1ebd24a3f63f1f2cc7a3272205d29b149225865449bde74a7b80eba897d79d273e6cbe64207878f0a7bc8cd9ed42ccaf87a75608a","ssdeep":"","tlshash":"e67000c00000c0c000cf00c0003c000000f30300c0fc00c0c00003f0030000fcc030c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.389274Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a1c6b372448acd4925b2d6d2ec1a69fd","sha1":"93d1d5fade913b71328130aa3bf7e11621dd7620","sha256":"a47fb74d2df6ec243a96b3afb0a02569398d11e82a11d77acd303fe9c2ac83e4","sha512":"0c27a42c6ade1cd6443fba3829a36f40d366ef6cb0beb8f2002ca1726f6e81c0b1df64a0a08b5a61098b6bd3b46f888b27df00243f694a85373a4b23e381ecae","ssdeep":"","tlshash":"8f700000f000c00000ff0cc000300cc000f00303c00c000cc00033f0030000cc003f30","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.374956Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5d2dc822e8d4f0b306ca69e54950679d","sha1":"ec5cf0bb110d219d7e4bda5d14c0071c703cafd7","sha256":"374f328ec9257ea51783a844612b0d075cc7ecc70805534c0224f44adda5e069","sha512":"af8d84cbf0093e0a52753c419f82290b88aa4447ce835cbb5deb78afa02f8b7499b160dc86850d0bc7aacd72f6a5a8596413132a37d8786c5e4cc92637cb5ea4","ssdeep":"","tlshash":"d0700000c330c00000cf00c0cf30000c00f0030ccc000000c03003f0030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.39871Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d2708560ddddf9fe2854103ea6095b0e","sha1":"61af9e5b5b5e96580a7da75ebc27c57debb6137b","sha256":"6d013dfe3b7e6304821534f0802b91d7ecb34e69dc880ef3efecac06a14e8a78","sha512":"abf7d0253c13a28b55acf9f7ed685efaf639d70e888e7d3b4e3f26b7987f59b83bac1fbad72f217600bb8691e179f3edf910e82b9218201d9e4c2283a2813b53","ssdeep":"","tlshash":"a67000c00300c00003cf00c0cc30000000f00300c0003000c00303f0030030cc03300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.412989Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3881d0ce03d76f22df4ba5ad7b17e61b","sha1":"344a651785ec5e4e5ca05d468aece729e927533a","sha256":"b14632ce7eeab46e72d4414f3ea594402c906d09dfba025f62ef714681b8008d","sha512":"4df66b1782d046d9e34662bbbce7034c57230c0b57c66a00ed9d8f4842a77f7bc01be54ace550aafea13735ef1107ac7d7ec6d7bf0aa3ad9eadfa420d241f47b","ssdeep":"","tlshash":"ee70000033c0cc0000cf00c3cc30030000f00300c000000cc30003f0030000cc0f300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.424529Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f81a8aa27ad547b620591c871a087e2d","sha1":"77daa19609f08762d1e7544cc63e0feb2200ddc7","sha256":"6f75db5c15ff88f889f6ad98cf6ce1a0aef119df1777de1b1a992fa0798fa077","sha512":"32bf1a11a083f7acc19afea88e7249b24d88eae448c50c99f47a613db18679aa08b358de48421c80972e0dec7d8b64414ecbd74357a60d7cedc0d57ddfb9855a","ssdeep":"","tlshash":"217000c00000c00c00cf00c0003c000000f30300c0c030c0c00303f0030030ccc030cf","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.418057Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4999933195d7474661a7588a5ceea991","sha1":"a10e2435d00ff565b423650e231fc3a7ab060671","sha256":"0bd8d756a5a5967d29f7675f3cdada4a6b19f54af7e23e9b62fdb386b325d74e","sha512":"79a788a952b8bde04383a9e7d35a7fac850596b206382beb7a8fce64a7cfc1f2e6ed7723f8a83d6569d1f95fd7435b23d31df0535c1827f9f46bce6078219b8b","ssdeep":"","tlshash":"697000000000c00000cf0cc00330f0c00cf00300c3000303cc0003f003c000cc0c3030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.410979Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fccb11dde8a7d3a197ba6dc22fbb231d","sha1":"c86b853f11220a14d0a667bbe08be97d18679fcc","sha256":"f37b4e527dba46d6e9ebf512a36a060780533a164c538b67a259910b79d96125","sha512":"478a1000872e5cbf4ff6b6df095d21975bbfa4994cfe50e33e24258ef57b001a8222f9352f0dbd1172b258f2d015ddef700bff73d5bcfae09a4543cfa303f464","ssdeep":"","tlshash":"897000280020c00080cb00e00020000800b02300c8000200c02083f0228000cc0030a0","size":20,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.430056Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a9760db6ce462dc40062b65a940fb027","sha1":"7d6f111c75e4d5b4b061f8c6c81692883e80fce8","sha256":"a155a9d1fd9ba999b8a5e384a89513097831bdfcec72082c4b7d8dbc74439af1","sha512":"39043af135c03ec7de880b015885544057d9025bd8946223ff960a53f2c9542cd047a2af08893334d158dfe2be0baadd64c3203a546f7b6afb3a1bdb6f6ebaa3","ssdeep":"","tlshash":"e470000c0003cc3000cf00c0003000030cf30300c00003c0c003c3f0030000ccc030c0","size":18,"data":"","first_seen":"2023-03-12T16:21:53Z","last_seen":"2026-06-06T02:23:39.419161Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8fc40ad6c73bea5a889fe64e47f00b8f","sha1":"cbb493e570ab2e501f3932563bb18efdeef3b2d8","sha256":"499654ba55a697b3ae5283cac5c035e0f9c55e1c887d2c53b8a9097857b65c4d","sha512":"82f81e389295414796c1f64624959edaedf897b3fe42e61033423774d5d271f7ae103b76a9f7afd6460033cf875c735a84d41a0a00b60cc05b94985f23d5fba2","ssdeep":"","tlshash":"b77000000000c00000ff30c0003000300cfc0300c0003000c030f3f0030000fc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.374327Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2f5270701fdc3701859bc4c4c050d9ee","sha1":"709cb0666d8c2d6ac55bf7c6cdd5fdf10f3b08f6","sha256":"61c8f97e4290c1b6e5cad7f1dc88316ceff39ae9f8c6473c8868ea010875ff11","sha512":"c450a3f851fbcbac100d40799f38953e4aec92a33769a82b806bd5890ab6002294ea3ca9f268915fabec44a6071d30548fc83f813705734f048c6649cae874ca","ssdeep":"","tlshash":"3670000000c0fc0000cf00c00030030000f00300c0000000c000f3fc030000cc3c3000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.387691Z","times_seen":1159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d90560affe7012b8f8e4cbf45b4ca9ce","sha1":"6cf02cda967c64f7b85bcfde72f88c7c53623f38","sha256":"0a0204c41ed0bf5389f077f49cfda3e0acbd1a5941414f8c0fc74ee91aa81581","sha512":"6d2e8440ee6619970f1bcb5c47f3eb2e4ff5a165df28ad2f575abcc907550aa87b03f690a85b6eae7b74c5318faee536200d903c48e4789f67f68918062da183","ssdeep":"","tlshash":"407000003000cc00c0ff30c0303030303cfc0300c0000300c03003f0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.388243Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ce67180f52a4e213b02a73de699ac9d7","sha1":"406af3ae3db036d5e0a52bced3aa8502371a4cf2","sha256":"49b4dfb6858a942ac006505cb2511424617ae6f26d173aa2363f1128e32bb503","sha512":"611665a65144ec32f67bef90ce76a29c7307da770ae065743d3002a0e03c51054f2dc9e5a5850d6679ad016cb8c6c5431fca6fc799bad36e2c24606842ddf482","ssdeep":"","tlshash":"857000030300c00000ff0cc0cc300cc000f003c3c000000cc00003f3030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.409963Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"680fb8d8d22989bb18183258dcdf9f56","sha1":"57474cf81ab39e5b093493d0c35d048cbf466fb2","sha256":"2e2f7a853d7480bd50d7021551e427eadcf5e7814f07eaa47ee2542835a512c3","sha512":"7eb04dfb32439f24cc67ca37a6b2f9349bfa96f271a5e33f54336497a2bdb93f3528d2c1221a387f1cc4a2b2a982a48b313d3a84ee454cea5c9a42368e1166c7","ssdeep":"","tlshash":"0e7000000300cf3000cf00c0cc30000000f00300c0000000c00303f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.440825Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"54dadabdb14c173b950fc5ac0647dc61","sha1":"100c82bb931eedb7fe034bbbbf0c1373cbef348e","sha256":"1d8d74849c3855d65dcdf22c44407e3b34d34279aff0b991e24c5a08a8f62b07","sha512":"06d0506a57fee7281352046a4baa67d418dfa6fea6d4ea8837d61b5e5d14ca5388d5b38a5cb4c59c562a70d5cd9177725ecb8d06846c3f422b1124e9d262be6a","ssdeep":"","tlshash":"cf700000000fc000c0cf03c0003003c000f03300c0000c00f000c3f00300c0cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.383993Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7b777c8258be4d66daa963d0851338d0","sha1":"7d3e13bc46e3ff6b2d1365e2c51b943b6b250f5b","sha256":"690824b051f1ae8815e995f91232422bdb859066dc36605eb3d5cfacf604c908","sha512":"6c1214626f9160f0a0210098b8f658f8cb42ed3c3f7a8fb6e67acf45a10779400a56c51c03676269320ef27ccb2669ca4545203b5c539356fa33bf641ad47dc0","ssdeep":"","tlshash":"b470000000c0cc0000cf00c0003cc30000f30300c0c000c0c00c03f0030000cccc30c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.425644Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3c1546a94da3620e4978e2a646044824","sha1":"5308f928d39eb12a2d72472adb2be17ff63165df","sha256":"a00fa4d73a796073d56091271d0bccb0259527e76ab4a4174a145c41b4bf8059","sha512":"57e8224c6b737560edc2f6e830c0abb2be83dc7bfeec6d064805e88736466e6ab35a83a1b47f7417a8c8b167015fdd27f42097dc8c53df368930ef0c11bd43cb","ssdeep":"","tlshash":"01700000000fc00000cf03c00030000000f00300c0000300c000c3f0033000cc0330c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.408415Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2eabd15d7fb48764ad68da88149d6155","sha1":"d8a3fe7e022a7625954db8a68c259d8195898051","sha256":"7cd8d5733848900383d3a6998886c7cdfd5a57eaa280c916d7c39c84c91faa3a","sha512":"c82d9f451841bfcee8b64252d16b2f30471b0ba326df9e334f5cd1ce3267ceb43ae2a62ee411d8b584822a2ac4d1f99f74e6f6c6f11c383a3531e724609551ad","ssdeep":"","tlshash":"29700000000fc03000cf03c00030000000f03300c0000c00c00cf3f00f0000cc033000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.408917Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"160edc8db45d8cf1db6b306e01b1b522","sha1":"eb3cc2404ff47a884d1b38f4e5570e992c2b28c1","sha256":"5c4db52d774d189e67be581f8cf0a1be27580d903ac882f6dc8fcdbca5d4dc89","sha512":"4966aec1d737a12b8e232a53a8076ffa14c7ac1952e029b3081cda99be00538b3ad23f6f692e7fdc7182c83e19f63150249277fc2698d00b99de29865ce9a052","ssdeep":"","tlshash":"d87000030000c0c000ff0cc000300cf000f03303c0c0c00cc00003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.414136Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c063106f27cd1452ae135f642e53eebf","sha1":"47a5ba2c254149265ba308a7be7b39924ea90b2a","sha256":"7ce37963c8c42196e5562cd6f4804e4e7eb5ffb3d9393e0e8404bc55f6113cba","sha512":"648b8a67273dff0b5a04c9d760335b8aa48cade46cda4103f1ed56700f37cce7e0d7272e8f07ff6b8f670d2bf4eae2c94c8b4be0c5b07a80b84c2ebe3a9b59c4","ssdeep":"","tlshash":"aa7000c30000c00000cf30cc0030003000f03300c0c03000c00303f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.376742Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c57e69dc1c3714796fe1663d7f6a758e","sha1":"103d84e469f09107059d8a67f615cf2e20652664","sha256":"eebd48c89f0b43036acec1a4db2909eeb314c5076bacaa6ac8bf9f4921a50ece","sha512":"18088b30af3e40d8f9bda2a487312b8ea56de42981041184b341fdb115613f4a25693cf00b574d68706ce77e393435be6ea49d35d51bbdb39134166e181c0fd8","ssdeep":"","tlshash":"877000000000c00000ff0cc00030fcc000f00303c000030fc00003f0033000cc303030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.407906Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3b7cb9e898b2368382615803a65c75d3","sha1":"60fa902993681d254fde4c6066be68db74de2ed3","sha256":"38dfdd15caf30f9899d49a6422b73018cb552f873de5dce24d1c2bd01a72c888","sha512":"025b1331e59f60815a6bf4e0ecc18ee6a3a10fab697265e9acd05509478d5006fdc8fe9bb288e58e89fe5d5f8e1a79c2b2973711d5bda0b70ac68eab41b1b324","ssdeep":"","tlshash":"e870000000c0cc000ccfc0c00330f3c000f00300c0000303c00003f0c30000cc0c3030","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.4295Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6a1cc42d9ecc09ad04c6b7f1ed9b6f7c","sha1":"0addfe6c569b463fc78a85f1a000f46141678101","sha256":"06f04bb101ca5086aa7cc8625be865598db47cfeadd30fc16d8198aeb100cfff","sha512":"83e4dfe51f33f34b4b3a9e04950ff265a1e63ab35d7601645a810f49f060e995c55159f99c1bb7406052cef4b4b6f8ab1bbd987b8cb7c993ef8eaff06c8ddb99","ssdeep":"","tlshash":"b27000000000c00000cf00f00030000330f00300c000003cc000f3f0030000cc003003","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.431059Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6a0f475b9036eaf5ed81b8fbd3723157","sha1":"ca0eec508471941b33160812e50112521f27f317","sha256":"f552df46f9705f908d8c238fa31da2a9343a706c85c0d9e318b0f1ff3b82fc9f","sha512":"41735bf2674e8a77daecd6401ca8a7aa2e0dcb88d1c386965dc7952c0eabf6698f5aa87f37471338c92d3b67fb72173f43b06c09b1cb4783933b4aa016245411","ssdeep":"","tlshash":"557000000000ccc0c0cf0cc03030300030f00300c03c0000c00003f0030000cf003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.42346Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3a3037c3b96ff0a3193bca0e7f88aadc","sha1":"76a57d086b2730b9f8ed53d9d436cec27afd6f25","sha256":"427baae29ffa2912b54f3efe7289d6feb962258dab66f3e66fe7f97a74c05781","sha512":"7816d8cadde05ab305d89cbfd7942d9bd1cbf53c42ee1e8ceb55f365fa0a96f4872973ce2ee0e6ce106811e44c96cdcedff2f0a261dea361130b9efd6f351859","ssdeep":"","tlshash":"777000000300c0c000cf00c0cc30300000f00300c03c00c0c00003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.413549Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f2f9eb963a5bc112561501b10eb9f688","sha1":"e7be8ffd6bdc4082a2c86b83940f291ddee8cb9e","sha256":"eb6d59fae5702df6e19944401b185d631f495acc6a1b27707bc524e4a26d3768","sha512":"20c4618e3e2878f73570ca9234390eeebcd6ff84b2c6e3041fd8d0c83cc0c65e62196eb30d97bfeca2a5cf04adaa55d389c52ba7f4dc5e4152276a58e25f6ec5","ssdeep":"","tlshash":"4a7000c00000cc30f0cf00c000300300c0f00300cc000000f303c3f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.421928Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e517ae48d6a82cefa2de65e88b6f5693","sha1":"ca25ce518f711726cb813ee73efcddd79211e1e0","sha256":"169ebb8cf7ebcc8b8340edea912177a118a79c22c031852b1d412cffd13500a0","sha512":"3cb5a380419a0579d6422350ade0ae728ccf8cf85be361f7fc9d0ad27e695e581e712f43330792e46c144a0c7b3633313795ba7e988bbfd08208bd0880d159b5","ssdeep":"","tlshash":"de7000000030f00000cf00c0003c000c00f30300ccf000c0c03003f0030000ccc030f0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.428389Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a33748764d90c55aca2d7c5eea289616","sha1":"5d61e51294395a77b6738e3a7f82be2478f9d801","sha256":"d6cbf00237a8151746b2ebf6ba332d9f62d6981fc2b717b63e7dc5e70e026c2a","sha512":"070c5524dc825263f91ea4105c025736e0dac1e279b3954369f8256a7f579db9253f3bb1452adbec670d6fa938edd0f12635c36e14fc97009daeb352f0484749","ssdeep":"","tlshash":"7a700000f003c00000cf00c00030000000f00300c0000300c003c3f0030030cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.415817Z","times_seen":1158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ada9a1753b25fc846f70be907672be67","sha1":"62284959825518893b665ebea6b031ef55df7f80","sha256":"8e135684ca301e393371d1b6ecd56ae0e4012f5385a482770053ccea41476ccb","sha512":"a06ab12c7912413e05ef2b7789f7703cebb3953697c92931067e032001fdea3e477920f0637bdc692fd97b871751283654288cfc07b46512a794954cefad3f09","ssdeep":"","tlshash":"977000000000cc00c0ff0cc030303cc030f00303c003000cc00003f0030000cc0c3030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.395445Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"76329b4f309ad0211bd98453fff68ac5","sha1":"50bf5e047121af855a3d42a222c9143d86c8d091","sha256":"b02a058152f38597d83528c997017bb74bf95d4eed4d224883a406a4db4236a6","sha512":"86e58743956467fe7d04af40720fcfacfc6c455cf7d790945db1d9db3b59530291b2ded12f6c54fb86be047f31e4c88cef782d25144ddd6bb6a63e03f92c2d49","ssdeep":"","tlshash":"20700000f030c0000ccf00c0c030000c00fc0300cc0c0000c03003f3030000cc003330","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.37928Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6b917a41c9ce27526ca480713e81d2d5","sha1":"765c462784fa25ea41d89b454897d227b6c9c63d","sha256":"f0a7e368791613d36120e33ac4525e01c01d1c007fb79a454e761f4a95ed0d7a","sha512":"4d2c9b097d64b6ce6ddfca436adf4fa1fca59e53e6303571876bf285d597f3c64e256a9b43afaf59106a513eabacb5a8740440edafd49d8a047de1dae701a54e","ssdeep":"","tlshash":"cf700000f000c03000cf00c00030000330f00300c00c003cc00003f0030000cc003303","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.424006Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"53c240fa6885652da29ddaf4dbf8c505","sha1":"ed8d6bbc962db63b8e7c34225a0f0698ba2119d1","sha256":"35567e82ee7df5a7386f8ca0a1e6b1e67b0a2e3522bc94ddd21829e6711a240e","sha512":"aec41e89bbecfc4f58fa42372121188892d1137c64c657ea6c108ed28f67f7f4612ec0fe15fecc1f27c8ec80c4eececf5bc66af8e7333420412c2e8cda9c023b","ssdeep":"","tlshash":"09700000000cc000c0cf0cc00330030000f00300c3000000fc00c3f003c000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.386596Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b85819574e5970e1d42dbe01ece588e3","sha1":"41f6388934d879255cce5ac579ad8081280437d8","sha256":"68a074bfbfb0580f9e91dc885af163fc951ece471b3e477e02d8aa4dcd869bf9","sha512":"28eab177ad1d18905a342cf1bd06b0f966b77f439d5c08aff247df832d6dea20465459f2a6996d4934c63ec4d29a819b7e0433d814e72c47ba1985e8c6927b81","ssdeep":"","tlshash":"2370000c0030c00000cf00c00030000c00f00300cc000000c030f3f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.378803Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"104eaaec377fb78d0b1478984f38f3d3","sha1":"cc4f020560b23626807ca4c76f343b81602c2d1c","sha256":"72e9c6362d28cbf9388242bcbf0459073706e7893281cdf07d314bcec18b69ee","sha512":"0c4330095c4cb24ace162b4c3fbda8cfc6040166cab6b168e52d93e75a73355129158311ab3a368fc9054c9decf4d98dd9a791af430cbbaa7d7368c61d4b6707","ssdeep":"","tlshash":"59700000f000c00000ff30c0003000300cfc0300c00c0000c03003f0330000cc003300","size":19,"data":"","first_seen":"2023-03-12T16:21:53Z","last_seen":"2026-06-06T02:23:39.416936Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"db0a49341fdf4c15231eac4c984768eb","sha1":"7f672147079f45765be2a5aa1259520ac55d5187","sha256":"a096d07cb4eb3f9b68c17cb876dbc2e067c1092e38dbe84704fc00b1112b5530","sha512":"a5398f33a60988ff68eff961ead7ec27f66bcdb464f2b27d8fecc05dd0a8f578775f2c18e3c2226d5ee87592ea086d56f30bf93f6afa306e033fb8fb4aa81589","ssdeep":"","tlshash":"a47000030000c00000cf00c00030003300f03300c3c00c3cc00003f003000ccc003003","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.427831Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0aaabba7ccc2505b6870a656b6819d3b","sha1":"5ee2b0096cb5a7a03db1452893d0f0efbd3f051c","sha256":"f32cced9669187aebe75ba41a8f0d897a27cb02bbcd5dcf0ad6dbfe31cc208a0","sha512":"793ef6b9664aae05ee972825cf2fa3b60dafbae9706788a1f4cbedee19d357fc9ddcbf7107f0beb2a7ae1c2f29794568e9cf39ef16f17ff2494ceca583f4777a","ssdeep":"","tlshash":"eb7000000000c00000cf00c00030fcc300f00300c000033fc00003f0030000cc003033","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.389778Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1381ddde79e03e1767f7819397700163","sha1":"bdc8e80553918ed9d64bf922becac723bd9fb729","sha256":"9b80a2abb7cef34f34d9c1b5f2ed4154352b8b4b1802b6fa3609b3c9d2b1a458","sha512":"256cfc038c118ad64df5cd0fd40a1c9c3b15cf689dd91e3f8c1058d062d928843fbd4584a53bcd47d3f2847e688a6e420e9c4e462f7beddead220c1c171e1210","ssdeep":"","tlshash":"0d7000000c30c0c000cf00c00030f0c000f00300c03c0303c00003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.418611Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"35411849173c3d4db532cb75586fbeda","sha1":"068c3c37cd989d0b2ac9ba507218914b98f9194f","sha256":"419a2e337ee37ad5e724a3f328d81af33322d8ccacc12c9e4ce5e4e39fa2e757","sha512":"42c0cda45a2d89162022e03a24e13c26d5b8d295c1c35695ee166112aba2afd392faf318425b42a7e7f358b3d2fbe063199a39219379e9b00575d47b77e7ffc1","ssdeep":"","tlshash":"0b7000300303c00000cf00c00c30000300f00300c000033fc000c3f003000ccc0330c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.416374Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0d5998c0f8104238cd96cf17a9a2faeb","sha1":"8550a2347fba8b97c74e0b766f099c7610736be7","sha256":"89543153b3f84846def623cedf6219a84f697be7e8ba4f30d5b9b613c3f2ea4c","sha512":"31dfa548901d960e92f343439f06aac91e48c94a5028e32622d09e87a31c52adf666306df70e50bf189d133dac10b5b4cd2687a7694cef1be94307ae0828e259","ssdeep":"","tlshash":"8f7000c0f000c00000cf00c00030000003f00300c00c3000c00303f0030c30cc00330c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.420273Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7d5854ef579b22b85a1308a464991cbe","sha1":"bca2593c39b377d192b5be3d23f73a6acc1ba9dd","sha256":"ee855aef125f82c560259778b792cdeb143dee61b40be24ae78345ba96ab07dd","sha512":"aa5d5459522b9787974eb941675153be6a008962ff4e0bbda6c7e6844b1ce2de8058cd99607b903c9bfd509b9df5cc8e6c9c84057a673d6ed2e764fef402cfb7","ssdeep":"","tlshash":"4b7000000000800080eb08c000200a8000b00b22c2000008e00083f0020000cc00b020","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.421378Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e0783099007df1ed28a11c3e447ea74","sha1":"01fa4d2d862c8d4cec527823cea2028de9928c5f","sha256":"afbd1461a80f657118dc4824a30e2604804026fabfcbe6ca2ab93458a53e8a82","sha512":"14c544dae3baa5f2d7016724721219a19cbbae2db8882cc64c0f14ed37eb75dab6cb29f8c920c6b9a468785abc6d5973b1fa79d4d9971c17f9368e3c35b4caf8","ssdeep":"","tlshash":"dc7000000000c00000ff30c00030f0f03cfc0300c0000303c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.394475Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"892073ca8ede08c4c19af3b85f4738de","sha1":"eabe1476df968605084d2546e97ee712e62657b8","sha256":"ebb8dddc409d0524ba533290ecbe2f1c59ada52063109d097a5617ddd53d514a","sha512":"e9f5b86eb6dc832694430db0cbb55360951151a9707f86d7eaa92d7e965efdff635955461fb743063d776952c66e55ba4e3f3e8d8af6a35f3fdb141dad5cddf6","ssdeep":"","tlshash":"b670000000c3c03000cf00c00030f30000f00300c0000303c000c3f0030000cc0c33cc","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.382948Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f647cf4291b3514acb6dfc5903620806","sha1":"77b87aa14c8a186cbfa31490eba508307ea1b58c","sha256":"745aea14ad1731fa076e2e237af3006c8c7a0ed94379ba01dbe3abcd0947efc4","sha512":"b419afcd49f5ea3fa17054138528545eb2e18f90df61ed0332b640d1004b36616a2d1504bbbb9667ef76f3291f61e5b47bfd431db9e01c38b540b02adf27fcff","ssdeep":"","tlshash":"6e7000000000cc00c0cf0cc03330300030f00300c3000000cc0003f003c000cc0cf000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.397035Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d376a619d339b30958e60e92b3613146","sha1":"28cc836bf9fb7b587bfb4b7159862e2adc8d432e","sha256":"ff4ce15fa895a6743337778c3a010eed23f7ffc99a2c50f64ccfbd6ca4e76dd1","sha512":"831107c930076ad9ea26c88529a8e5880280c768b5a88ae5a39243b051d256c860bc443734f82e086853b1faf89fa9a7179faf8842db03be7ca8bd54cf302159","ssdeep":"","tlshash":"8a700000f000c00000cf3cc00330000000f00300c30cc000cc0003f003c000cc3c3300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.383476Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e8af7d0f5e6370da8570b377c888d9c","sha1":"c2de01f9d3daa641b9401c4e55770b1a4bac5b4b","sha256":"8ef50bb1bcd890c39e916c12f6eb9f1db9c08bf1e326342d1cc5ebaa4fe446be","sha512":"626a0da759cd83929530eb12aedb1a5f908cc44f57a516c6a5e1c766cdcd0ac7c20e29dbd1d441ed3c159d9679001a2f77a4ea7bde2504b3ca7051163dabb4bb","ssdeep":"","tlshash":"cf7000030000c00000ff30c0003003300cfc330cc0c00000c03c03f3030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.427286Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"57574f53b6de200174d35574df1da053","sha1":"2fb004ca614092eee28fc45611cdeca1d38ad065","sha256":"c990e04237a0fabc10c638a3340f0af26b4555ddbc373bdf453ff00910afa15f","sha512":"5ec41a4d16e518bcce4c65d4ee0a38bbb1b404239f41879331c7f9f778f874b8080190c132aad624fb58d0ce29de8d8f3aa7ffd7d03ea1ed1c9d386ac4039b60","ssdeep":"","tlshash":"a17000030000cc3000cf00c00030003000f03300c0c00000c00303f0033000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.425076Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b6dc090a79226495e9644bbeee756518","sha1":"449b67436c8785555c781956ba56a454515682bb","sha256":"8367a78ccb1e3cde37697b3af2f117e317393718fe68e566e6c13ef210dcc66a","sha512":"b846940ecb72d97808d5f1109f2b04c7ad24266490bb85b416b34b7ed607c09b58a3b73c2604caee225302f1978cc3d7f77e9cb786501c4fe173c5e482ebea28","ssdeep":"","tlshash":"2e7000000000c00000ff30c0003c00300cff0300c0c000c0c03003f00300c0ccc030c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.428942Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"22e39ae49f7a49a8c6ac9e9a426a64fd","sha1":"73706b4bf4bb0e76c3bf8edb7852f248d4e5e91b","sha256":"08d0469b8cafe434d317480ce41859356a91804de4d8fd6243a7068d7d926524","sha512":"c1e00c5ccfb523889f974a7ef4cc3adba70540f84d64a37d31ed528ce412ae52e88f10b1928cece8fa1f1c9ca6e130894ebe23b845744b62f2f1532bef54cb0f","ssdeep":"","tlshash":"377000000003c00000cf30c0003000000cfc03c0c0000300c030c3f3030000cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.381413Z","times_seen":1136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d8e70e433e262e3409d713393b5055de","sha1":"279d1b9c1b4f513b80d1b5abe34e691269a5642c","sha256":"a4627a0619402e40b332d3152fcb46564ee28df15bb24963393da28364090d20","sha512":"dfb0974cad223dd5a6202f9ec965c017270249f08f8b43765481167142e3c67b93730dcf06c76215a3235ad55ba89d4f545a922f1c3e76f83959593e71bafb69","ssdeep":"","tlshash":"86700000f000cc3003cf00c00030300000f003c0c00c0000c00303f0030000cc003300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.415257Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1f0abd9d8e8190ccb8b56268b03eb97a","sha1":"852e909d6d20f5672428502ba0541fad7f0ee2c1","sha256":"a14c6fff6bca9d195ec25fe83830d69768fdb69b0fd1488e29cc7ba00ca04755","sha512":"7d8b11bb30b489f3247b3566fdc6655be78ce35914b1cfbf92f0781be9d349cae704d45c1a872c9edbde2d30d90a1926e18c7601951fa3bf26f450f3fc9a36b4","ssdeep":"","tlshash":"617000000000c00000cf0cc00330000303fcc3c0c3000000cc0003f003c000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.403133Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b463a44051f5ec20ae48196f36054e13","sha1":"5b732f6e972167e618e38cdcdf292c5a63dca9d3","sha256":"87da72b460eea48a4375dcf38b3192896a661cd64ec1465b856b81538f7e3918","sha512":"b235007cfb7764d3339ce0c489497814f37213734829dc2d287f9c56ba9134a1e9b1ab354e0c82d2d99311128207d05432bdb4b4ac36c9271bbb9b69f8eafb44","ssdeep":"","tlshash":"f97000030000c00000ff0cc00330003300fc3300c3c00000cc0003f003c300cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.442035Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2407ddb62e965883f20fa23c826bf328","sha1":"8870fbad82926b2a51ec8f4d96b0dea661f54d0a","sha256":"87484b3dbb15f32dfc8952ebd6b9530b83bd03c1693c2c0a870db80921c241a6","sha512":"782f1536b2910e0a2aa1400fdff8716039a5fe468b99cfbb3a1d4ac342bb07a9285cf69eac395392d330c8dd044f887b017c3fe0b5c6a818636146b6c1cca1bd","ssdeep":"","tlshash":"267000000000c000c0cf00c00030030300f00300c000003cf000c3f3030000cf003003","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.405779Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ce5b835c74307454b195bc9b87ab25ad","sha1":"6e2a7143cb9d2f1c196ea81fcff842aa7ad2bfd0","sha256":"2bc85f2a21ff1488d409bb7549110022cdc2274fca518696103e6ea4ee971392","sha512":"94af6846f0e4afded87dbf8a89fc1a8900aefef1bf4bedac2e292b749eda6589fcc339ccafa613409ed4c69d6917b6b2e9e7de92fc72238699ca287911f119f6","ssdeep":"","tlshash":"49700000000ac82000cb00c00028000000b28320c0800080c00203f0020000cc8a3080","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.39173Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d7d45230746aadb587b5421834758994","sha1":"65480c14ebd56b32288f937a0a51867362c530ae","sha256":"06d287bc821986c6d2cea4631dc0329b9cd9e15ca19737eb1479e118526bc3e9","sha512":"199e366d65c2be5b20897d2587bfb336be6786438ea48e14836d29361495692521e5986ba704ff89e7fb3f52322b227cef345641a915419f506f01c4f689c107","ssdeep":"","tlshash":"d3c08c0aac02cabc903008c5a033eb1c999eab24efc0dc1841fa08090644bde0c008a2","size":171,"data":"","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-06-01T08:50:18.302988Z","times_seen":932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8eaf4d081dedfc08c187aba7541c733d","sha1":"31db4de8047c65cf3f13398fa2a6370d9bf24715","sha256":"fb1e251f69d755e669e5e0207910977ba8bec923abcd0c264331da8ed4bc5de4","sha512":"e532054cbf82038f4115f8c1de3c940abc30196071e5305978cc9d35527779a65249b8f6b76bae5b69ca514615277582115e2b2fcb1ddaa186182be65ba52917","ssdeep":"","tlshash":"d47000000003c0c0c0cf00c00030030000f30300c0300300f000c3f0030000cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.378294Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b44ff8f68d1f8325df640a60702c18f6","sha1":"38b8117a575001fb06f9a0ceadc55228ccdce7b3","sha256":"d6465167999520a23127488c727ed47123218b0418295045e7fcd628039c0b31","sha512":"eefe2e0a86b14485ce7ba1ce2f135bfb0db342df99b8060ee33e16b54df58f23f12da0ebf6f1f50b770d3e8304a42ec91dd49489bab7f4b35dd62aa55b6e32d9","ssdeep":"","tlshash":"6e7000c00000cc00c0cf00c03030300030f03300c0003000c30303f3030030cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.411954Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"af42124fb23866e29287836fff6d3896","sha1":"8417cd2acf7b2fb483102d54c5238f91da85deb9","sha256":"1f0008a619fdf98128a6bd9c386f8f8b41254adcfec1a1195d46009568c67b63","sha512":"509f7c7839b5b13e88812ba21ab0ee059f9d014ea4c7a5075fc06b2a77e4879cddb1f14e9daec9ba10661962fabba400a2a6a2d43bd7d272702bf925f91daeba","ssdeep":"","tlshash":"d87000000300c00000cf0cc0cf30000003f00330c3000000cc0003f003c000cc0f300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.440041Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"709dcd1b74993ea1d86ef30bbe75bda5","sha1":"49c6ebfdbff7a45a3af735dba2494fd9ab107b17","sha256":"4ad9deee352fba0870bc0b6f55370cf953f8a042e00c7ccbd3bceb16592f4df7","sha512":"c8dec8905a9450b9946ef6fb015313c8151828c304abfc03d00f43fa811e72c40fe57fdea7ad8d9a10488773240d88764232ede6e51e0f8150443a56ebf80ffe","ssdeep":"","tlshash":"9970000330c0cc0000cf00c30030c33000f03300c0c00000f00003f0030000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.404699Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"26b2bc4dfa81b43fe5a91d2c178dd361","sha1":"fd7919b5dda72e5dc5ff29f39439ed5f6ca81871","sha256":"8adcf28e1f74b9d284b6a8e7621e79f89ff5bb458dc81d9b366fc51bcb75f28b","sha512":"292f16a9750d730b3f5d2ba2847a423aebdb805686410cf8dfbfb228343e3db1d9efbc89c2471745e412493e4c7d796a2158e4f7b4a489d1af2e97b9c89f0d4f","ssdeep":"","tlshash":"597000000000c000ccff30c0003003300cfc0300c0000000f0f0c3f0330000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.44305Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b1b8a68909e47131052789e18ed991c5","sha1":"bcd0f3c9cfceb4a62dfddb168f3547b0ff706374","sha256":"8476c02876aea613cda596f888e3e454d1aad05d221a3d45f3a60ae9393ed319","sha512":"eea08b07e99828e3dbf85705caad39517171fc08d9c1670f845ccce955d32daefba5596d4007927ba3ea2a5d4fc18bec8498da875a66c08830996bf2f84f7aa6","ssdeep":"","tlshash":"f77000c00000c0c0c0ff00c00030030000f00300c03c0000f000c3f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.377736Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"08981acc0dd5c00d58e592297ed2f12d","sha1":"6d917c2adac56ad56decf665139db8643f8713ac","sha256":"3e305db42daec26a98e6e0cf1a29a7c956a323a6ed1b0304409a505ebc7c5e1f","sha512":"8fdd6e777c8930635296eab251b9474342a23a3cb3eec69302bb16118e6dd0ce2dc2c81cf5a558c023081086dfd49cf356852fdb14124fbd442f77d7aece04f7","ssdeep":"","tlshash":"247000000030c00000cf00f00030f0cc00f00300cc000303c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.426207Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2411b0302e914ba65e0fa282ccdb294d","sha1":"7665ae057c875df2a3b5627aed7505144d01ca47","sha256":"dd6dc2cae94ee25ed18e37d5129912d4b59c065c9b4544948d80bd1a090d1f26","sha512":"e2144977c5cc76500630ca96ca8fa541941756df32b7269cd6bf2b280084afd9e8cfb390c079044b5c6a9e34a433f9bd3b074b28b70ef0e851d1f524e288e7fe","ssdeep":"","tlshash":"bb7000000003cc0000cf00c000303c0000f00303c0c00300c000c3f0030000cc0030f0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.381929Z","times_seen":1153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f2bafedfaadb0f2669dd99db32cfaec2","sha1":"26952b7bb4226705e8f86f7f191ff4e5a5f8ecff","sha256":"3d7208cc324b7fd6b0e4582c2b82b92314b1d40f918f7cffef7054ff38888eff","sha512":"d943867aa83336c8770bf2711bafe1343d3b2403f07ea6ad24b481e4dd5f7b39304fad4f438be998732313b552dc6f8f72270a14f65ac47c8b8e08a019fd6365","ssdeep":"","tlshash":"b07000c00000c00000cf00c00030000000f00f00c0003000c003f3f0030330cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.397563Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7a2758e340ecd0b98d3fff7299fd1893","sha1":"d62c034d608bd0dff30b756d7f4bc19bab964411","sha256":"967ad897643bf218aad6f18ba7572b8f1ab6d3f577b1dcbcfa82cc9deabedd47","sha512":"96ac99de4e50242ca218de5dd6144dea587dc6ce908df609b93b98c856c931ae3259268a8bc4f1bb793f0971a60988a59ce08250a0a4f705f982f4f875e621d5","ssdeep":"","tlshash":"f4700000f000c0c000cf00c0003c00c000f00300c03c0c00c00003f0030000cc003300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.398074Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/media/open.mp3","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /media/open.mp3 HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: audio/mpeg\r\nlast-modified: Sun, 02 Oct 2022 09:58:58 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-length: 12675\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-range: bytes 0-12674/12675\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ej5TfFYRB1qNWZ0GgzQeu1koHLni6k9MWaHWtNDKnDxKeeRVmIQa2n5xe%2B7Vm%2F5zlRD0keP%2B2i2RDBVJCpPoNGYNCnoOLxHCK1AapmjESF6KdqjgftA02JwZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb7bd0c3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12675,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"58418a30e1310bf4fafa9fa0e57c18d6","sha1":"b477e72668b181c3080d6b921e2edf15ef134f17","sha256":"d5ad34e8bb64fba432c1a12b24cd1e532104d0183045e73abaaec72aa824df1d","sha512":"082eb64f97dd80d382019c11f002badf74c35ba0c27e7d6ddbf04a0ef8f028b005a183224c6481f642f06609b166c1b24dcedb248d5a3f756492a88007c8daa8","ssdeep":"192:NRg5B+tUSp4IpICb0rswRVqb+nmCkyKEM7+sXspvPC9y8ZlgM:cvmmr1+60Ff+uP+M","tlshash":"26428e077f56010ff9e4a73531af2431e9c45e5e28a9cbeb36108bc095af3947b295ca","first_seen":"2023-04-07T19:47:22Z","last_seen":"2026-08-10T19:30:56.519418Z","times_seen":784,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/main-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/main-zone.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 299\r\ndate: Tue, 17 Mar 2026 08:17:26 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 270\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FwejXXfgoMvWZkW7xOP%2Fyx4FbiH2ChkWCXB%2BHMxo5ac0iJESyMjRTwUJfNby1qasN5E%2BSp9lrTQ%2FCbbr8KjGh1ZWa8nPSbTpU6vQOHwoVu0HnUHhgD%2F3fdp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf3b903483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":610,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (316)","md5":"61c46dba509ed4003d18053b613edb39","sha1":"f20c38330a2dd1ec8fae7f53220d8a3a5cff8177","sha256":"6a66a6f467e40c2ef0c8f0c6c77ff558538b20a4f9f0ce7c9c31331df5bf4b9e","sha512":"1c2362a84584d3baffdeedd857b0096ca2db907e1511be618e9a6999ead2274a4cfc3c9a5c7209db8b84106dc3361aa4cb3bb39d90d69c4d9978cebc3eb46aea","ssdeep":"","tlshash":"edf0ffac4b84c84b2bed1e9745294cc128e28235aed8f5c7831cfe9c0685042e81e5be","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-07-25T15:40:05.72881Z","times_seen":317,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/1/mbl2.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/1/mbl2.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 11:29:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 236756\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6vXUS2AIyr7ku%2FL0WnGM1FC3p%2B37NNHz%2Bxs6AQA4JsScURGHNYXuT1vLqJh1341sSHyd26mgnZv7bmlF05FpnM822Xe4SSchCCTZQYKksMdoNS1v2249%2FAC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b9e3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":236756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 499 x 499, 8-bit/color RGBA, non-interlaced","md5":"0325aa3906efafa1c8c067c17a9906be","sha1":"fa584c5e5dfc48ce9c408fcb5a67f851f8d70588","sha256":"57a73f962c47509fd5a69bab492e1ef116c3619ab84345308f930588ae409643","sha512":"a26278a5e8ab76635e2f95e0c33dfc5a14248b65d15c94f7c3e6e832def8d92222b0d4158def5da60b44b348b5155664987e2205f62054e4b979735e44eb1518","ssdeep":"3072:+OLzuucoXu749ydT7IdHexpv1XmDThnqguuQ6k8Jlha9ERQ5IQx7ZA6/OTDJfSIK:Dys61hMTAuQ65l0gKva6ExVnkbuk","tlshash":"ff34124be7c2eea4585b382c85fe3c1f4a645338477907a9e5fdd21401ca5c2ced8ba6","first_seen":"2026-03-14T04:58:49.86328Z","last_seen":"2026-03-17T08:18:00.453984Z","times_seen":3,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/bgilt.jpg","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/bgilt.jpg HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 07 Dec 2025 15:52:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 83587\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBz9HTHw0f8GLpLaAwShYDD99wgbVo2Iqa1%2FzndwGqEFxkQoInzic3wME6OMYAl%2FjJx%2FxHLUYFSmBud%2FUjf90XHDvn%2BoAA34hRV3K4BqhhOmulpH%2ByHDd%2Bdo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b9b3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":83587,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x407, components 3","md5":"4dfed49ca25a53a1fe5bb18371ea14be","sha1":"0a6f7828b73e4936ab859c4da05e36190b50e9a8","sha256":"b0322c0858241a4c0a165a81ff6f20a10a60b18741bda5394459391d4626c0d1","sha512":"381baa95c9e78a7d5af727851ec96c53255bcd6e1b0cb015662d644c4dc0219e2c95e6716392ca7729757b404152d1c3c9709cef24d6416d7b9a58a9d2018404","ssdeep":"1536:Yq6V5E7Rw8mU1o7Y2jV0tcc7KCDzcC4CZ8xuDtHWjTZBN33Uj6U5YT:MV5E7Rw8mU2U2jVubzRDZ8mITZBNHvMc","tlshash":"a88302c821baf236f112167484583f41c367feb6446bd606e956202aea31cc1fdaf97c","first_seen":"2026-03-14T04:58:49.872496Z","last_seen":"2026-03-17T08:18:00.456013Z","times_seen":3,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/8.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/8.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:19:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28638\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KETP%2BjjQtHszkSLsSKWhhaQfcsyvt3fNqM%2FQWS66uP6dBI13zJ8pWMURwmBaUyxFEq2U8XUjdd09OWSKuKZfwW%2FmEjvy1N9mpJZrbcDphACXi94JdLnQ4hpI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf6baa3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"5ba32f4a4826b02add17169136918ba3","sha1":"e85af297a4c3bd7979438f4fd4dc8d39c763ac05","sha256":"0fe0a82c4f2e14de94635186805a794c804b3c5b9ac59b1f17a11b9b35255c84","sha512":"c5de30b47a932a39eb0e75aaaedd70d0b6c57a1df47aeed8ae753aebaa3a02cb249a66f07101993bf1f7fa5ee126126ab2484e798c38f326cceed6d82b556a49","ssdeep":"768:hUtqPwuKRcQOdaCYYXXrDDjE4eM2qNQ/HLrsq9:hUSQOd5YYX3Djr8HH9","tlshash":"88d2e1dda7cedd62cf3b513675642ea740062c3c64f2b08217ea731954bbaab0d03a06","first_seen":"2024-04-16T05:43:22Z","last_seen":"2026-07-16T12:51:59.582454Z","times_seen":16,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 08:17:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5845\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ed9-1149f\"\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 353952\r\nexpires: Sun, 07 Mar 2027 08:17:26 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pL3NgOWMS6eP5F9Ey60vQbR%2F3Xn1D6p7uEO12UFj4cOAaCjBXfiWRDb9JJDmbV3hcbrnxME8UYjE0713Uyu4yxlxxVxIoZd6kZTMpjca52zT%2Bkw%3D\"}]}\r\ncf-ray: 9dda8faf8eb1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70815,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9365fe85b7e4db79a87015e52c3db6c","sha1":"2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9","sha256":"dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56","sha512":"ad142d178576c2d02f5eca2ee22500b369171e2dcb8fd344ef1251efb0c4ec61ecc6063d4535b2f77773317803206f13a224530f8e55b0335d4e251a80e15e64","ssdeep":"768:/KvcqyF7I4rb84dLM+JKvcqyF7I4rb84dLM+k:B/nLMu/nLM5","tlshash":"40631be8e80900d26fb1cc03ef62b7ca1685f0a3f9d10dd8f17a998c29d16551597fab","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-08-15T10:01:19.812075Z","times_seen":10797,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":12,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/ag.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/ag.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 07:15:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27808\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91g83mEaY4PPMgejjXmdz6cujhbfhGzhxHfNZKr60l%2FDLV4r4zOXod1sUf4VpPsuImt8h0bi9mUCMIEkGlM5IIybqesoLHBIouQoZxGFoGLoY1xoT2gXN%2Fyv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b9a3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 134, 8-bit/color RGBA, non-interlaced","md5":"2055209bf12d1a6d583ce4cb522b440e","sha1":"388ff4c266d3a8a91768d790461327e45c14aaa8","sha256":"edc67fe59ef35b3fae1d161cf57922d48cb35fb5ed4149a610460c5e902bc15c","sha512":"7a53145f8168710a706bf3862f6eacc131815437f3ae7b1ee2f0c50858d244154cc3912d5830434d80158fbc70812ae313416e3402cbdff76edeb91fcba706c3","ssdeep":"384:8PlHL4ifzsKj0MSUwp/sNL/8h0j85h8oeAqxL8Xv3uHjaCmWscrjrVW:8PlkerYMSVa/8h0jqn/qxL8meCmtEW","tlshash":"bcc2e03b9b1b4aea883aca0657521cf9d83164cec63717ec65d33428c72d31558b2cee","first_seen":"2025-12-26T07:43:30.577143Z","last_seen":"2026-07-16T12:51:59.62423Z","times_seen":9,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/facebook.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/facebook.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1000\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UnVmCDieefTRCt3MK1Rv4u3J6ocCHFhHKqusS4FOgsjw%2B6HweRnOKBcNdzGw6G3D397HmThW3dbENNsz7LnHtvPfWll4mRJ7WS5Qo8nwjc%2FlgKAGfsm8PWI%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf0b803483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4899,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b66c33cab73a96ec821dd6e64f44b0b5","sha1":"411fe1cdad302201a2b29522a8ea501ef3769a36","sha256":"a725aaa81ee06de69e93fa569aed938803a8ddc6142182bac4292821da63a194","sha512":"6ec7f53cb5bd187d5e3a1e66ad139008f7157494d21c9ef88bad29969e15b7c41a791341411f62474f1d4af785d132e8ca616603eea64a586775c47e82d1dedb","ssdeep":"96:egscmeFk4aF3eFmFsOFMFpZjeZSFeTFejFCqKFpzJ0XDE:egscmeFk4aF3eFmFswMFpZ2SFeTFejFa","tlshash":"8ba19a972b270548f502dcadbfa51b57b20e0863524fdcabbf80755ccf865a886a374c","first_seen":"2024-01-05T16:39:52Z","last_seen":"2026-07-25T15:40:05.714101Z","times_seen":66,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/logi.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/logi.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 23:58:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 979\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lCe2Z9URWBolHj94AJEgdxQxk1Gz06W8IFR1PH%2Fz6RP592d753CbfYBgjPmRaGaHA287aVrX%2FI4VMkm8MFjwTVuJg6u3LyQXZTmS14CaFmi4%2Fd4ER4Zxt0UE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf2b8a3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4bebe35b6d2d3bb9e4370a6deb01242f","sha1":"e2d2ba1822bed9652c0dab686ec7ed7450f429c4","sha256":"2ca100182fa15f196d85e27caad8d1f16282f4cf6aeddd9aa19de9f73ae3b718","sha512":"438625b7897e838567b922491ac37abfd24a1b71bd489732318853af548466242e4de806840715d86d08f234f6ab7643a1cfe83c4bd9243edab9c07b75875268","ssdeep":"96:KT4AtrLFzjddSHl8YO8vdFaOFts8EMME2HBgJzIt2pev+o/olo9PineXffNLc:KT4+FU6YRFFfG6J9pG+o/olo9PGqNLc","tlshash":"fb8141932ba6700cf81bd8a9e6121759631e5403768fce7ea6f0309cefc45904673b8d","first_seen":"2025-12-26T07:43:30.533601Z","last_seen":"2026-07-16T12:51:59.599517Z","times_seen":5,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/uc/3.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/uc/3.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 07:55:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30468\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iGqRWZ1mKPGpXFS3jjWjcmul6E%2F6p73yB%2FBQbSWKN%2B5Tui7MH7E3yGHNH2BadFxVOffE9uxQgxzuNSyHusboGSwY0DGI8dF8S5lUpA%2FGi8qOE9DBVJ5Ag1fW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bbd3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":30468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"5662a17492a2c0f97519250b8c9e9321","sha1":"be25b21ec92bd511538d791a4ba03ead379e2b6f","sha256":"926af782c1a5de559e0d39cec8199709c94925702d742516776ca3996528ea73","sha512":"603d30819ad6ce20eaf3d479187195e454e29728c6e501af6b6428733f8bbbfcffeec342143419aba9ff0bb26551830f60152d5c38865cb78ecbf0d0d904c975","ssdeep":"384:c0wPB2usifXMJgpn7xqTh8IVPOqsYjyAmaO4Ky/q8iYq1yh09dMWKeWh/wk2:cRdsiEYn7xqhVW8VmHyi5+Uu2","tlshash":"b1d2f12dbbe6acc682446c38dd38c0c49cdfc6417a905fa9f44deb36e917ec22b45468","first_seen":"2025-12-04T04:31:21.269553Z","last_seen":"2026-07-25T15:40:05.763222Z","times_seen":21,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/style-zone.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/style-zone.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6480\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FohuQ3gxtwwEgV5bG7PQCLWX3V87UDc5nRwRl1uMZZV7iT9kxpA69Tps8DvQPmdUfoRvBjuBwCjss0yFbZoqniQUJPFX1Q%2BmaD%2FQO9di3WrZKNHcsbH8xHKc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf2b883483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42569,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (411), with CRLF line terminators","md5":"86e4cfc218c18df7eb8574fdf9aad05c","sha1":"70f2461fee95d945eb0df3a4316319e410adfe7e","sha256":"c2784ec134a5899aa687a50a4019bafb3cecb7cc29aef2a8a2e3a9eedc83129e","sha512":"8fbc897327561e0354f7acbb469eeb3e7d16906c5cc8cfac097baa5648f5bc57659c4b160f5aeabb17136c23848d95167d3d93985d3e5340f1535f44bd30e089","ssdeep":"768:YUKn2dsRlE4ow8YCDKh3szz0zxIftpsHs5Fso4a7xHA/ZNZ4YAyxyXYi:YUo2dtYAyxyXYi","tlshash":"b11363355b50109cf13ba6b9bfb01ea5fe1a0012e30f19a7f4f0f854db969193aa39d4","first_seen":"2024-04-16T05:43:23Z","last_seen":"2026-07-25T15:40:05.721714Z","times_seen":26,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/load.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/load.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:18:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1216\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HwBxxzyJ0ep8KggCyHYJQ13c3lyHUVrLCpEeGt%2FSW2acnjAJVTJkCAxniaThbQliCa19%2Bs5sBQEXIuV0B1fMRUU1zML1DkMdJbwhaHhNIZ4CsNpHCScj759Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bcb3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"a69fc2ed26ae309cf286cfda8a4e24e1","sha1":"67737d61d5fda0870a05f9348f3d39bb7a2d7540","sha256":"811d969caab65f3cf1f7c176d716925857c638b13aa3bce44006b00eba3fbd8e","sha512":"53eb8153cad4d6f37bd6b3668f872062833bb1cf44083702d879c87e245949eb66fb089083d62757b6d5d5bf79cbdefaee463b330c53e530bc536c529d5615ff","ssdeep":"","tlshash":"c621a777e5f9b0658a817c32f639b2b062544d884cde11096f2af3b10c7b54a250ed1e","first_seen":"2025-04-08T10:46:38.439616Z","last_seen":"2026-08-10T19:30:56.52595Z","times_seen":107,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/1/mbl1.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/1/mbl1.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 11:29:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 164529\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1joKQDJEpLU%2BdwXAXQFkSs5ESlLTVXflv9UDzQcomRzqH%2BRA8jHWEkOe198nMmJwUk2dPCJuUdcpJ%2BJuH8EI8N0Z5e0z1PrdVed9aq6yzbAPmrXH079XbXse\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b983483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":164529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"87186a4892a26f47f4f743526532d808","sha1":"7bd817d4e4eac41a1014f3d7076620bc3b021865","sha256":"272daf112b07607741f22a37319f2f7273d16d66627d38ef5dc389ea3357c1d8","sha512":"c72402336cec2fcf5a3b017e998156b9a355e83db5733923307c26ebe1d6fbf93d2035af090778c7e536eeba4e03c00ffd6799c3f8b2a8e1833aa59afacfc660","ssdeep":"3072:sgFJTnXKrjZZGq/h4tlhsqc6Hmb7nZHRpMA5deR:sWBnXKrjGKSl/GfZHTDdg","tlshash":"7af31289edd3a6c5e659d333b090a701e6af457253b6e1480fd4947eee2ce0f889c46c","first_seen":"2026-03-14T04:58:49.818625Z","last_seen":"2026-03-17T08:18:00.467636Z","times_seen":3,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/Twitter-Show-Password.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/Twitter-Show-Password.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:17:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5070\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if3eH46WMf35Jm8f2RAyQNNqXToU3MDUofMjUvXvNiqTVzflfPX5q4K7Dtf8%2FvBQdBUZ8B23aX95gk%2BTaXxxdPGUu1KqldAiyprjd9brI2%2BbA%2BubOzHaR3GD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bc33483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 4-bit colormap, non-interlaced","md5":"fe3f3e7780743c58218a13c350c92ead","sha1":"2218fe5f88bba081234b256127eaf8f1578856f5","sha256":"d5014a50ed54ea2a268279431907b4cdf4506b7571e93b2f3e46804279d70fde","sha512":"d1e9c6ecd1cdf18fde799df69b5fab9b65ecabd117df60fe8930a6ac7fdc5522d40cf10f52fa927cf3542b23ff4a3593c415ab8a578e6c812784c7f6d98a43d4","ssdeep":"96:CBYzVav7M+G62juKCtnfgo2Zgs1VAgIeHRNNUU9MCa0kp4FC+wTHb8w:CBYzVawTEkp1VAluJ80k4rzw","tlshash":"fba18d90196c64e4f86e313805a67c98e2ec82398453bb819c1598bd1984f42e1f38cb","first_seen":"2024-08-05T12:55:29Z","last_seen":"2026-07-25T15:40:05.733296Z","times_seen":75,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/logo.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/logo.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 30 Jan 2024 08:37:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 86273\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04Wh0IDg8bcYB917Lnb8vLxVB630N206XK17X0YgxQ%2F6oIWAh1DZMlfiKkF0B%2Be6tHhd714fFCsnvEru%2Btpmp5gyUO%2BGkwR0nervVilQ6IjSNo6dnrrAocGv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bcc3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":86273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1074 x 800, 8-bit colormap, non-interlaced","md5":"622383c1c5ebc62f21750dba042a1142","sha1":"88b851b84018faf7052bcdb5c3096dae7dc98df2","sha256":"90af35797f120a1251b7496c57096cea46b4a57a20f3a7c8601021fdb8674461","sha512":"09a6210d0d9c171071e3217e8e9b4897c77c65378f294e56b80a64edbdbecd6943d3b9b36c888e05d0108fbac89b8c8dd77fbc5d17f28ead8c1080abd66ec730","ssdeep":"1536:RNJyyeYfSXA6GCf1ttnTt6IFw2C/cr9bN6TYMb1p27w3pZU6Q8Mrn:vJyXfXkCf76DxctoTFi72pZU6hMrn","tlshash":"93831252464f4b69fedff00f101efe8a998c0e62d9a012364b73f57a0630f5e189d666","first_seen":"2023-05-02T14:19:00Z","last_seen":"2026-07-23T08:23:10.253032Z","times_seen":274,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/index_files/jquery.min.js.download","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /index_files/jquery.min.js.download HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 04 Sep 2025 16:13:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 86927\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWDfPkd9P67WkO6NWyFR4RO684UsRymAnAAJUF97IlBRGghkE4c1xmsmtGoORF%2Bh0ZOXdXlT8xtXbfhtTR0IVqWwrSr3XRUoqqMHRJB4ehB5BETnMIlxkqaJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafbbd83483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-08-15T15:10:20.333277Z","times_seen":142936,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/index_files/gift-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /index_files/gift-zone.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 05 Sep 2025 17:45:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 563\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 269\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuoVlkbAAgNTfXqjfIr7zWiBKta1DWc%2FLmfr3%2BfOe1k8vHY4QF14cVESIl%2F%2B%2BQ0evqZLx%2B4dhwVQA69r4akIIaX5BmSxDFtMRRajgG3ovxbaN2mxo3%2B8qfDQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafbbda3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1761,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"c7c190cb422e83497836ce3f61fdca7c","sha1":"4f4b6d1ce3335a030b32e87f24aa95ea374c0ef4","sha256":"96ce04d959f86c00cce2f118cb55f0d87fd5fb75e9fe34f0b9973b57c1393bb8","sha512":"3fea600accbe46e4c56ce8441032c3ff8495f007d62c4c10caa05389ecbe725b9cdc43eab548fd56e609b658a28f9833c27126dea1ba813cd34e32d49e503d05","ssdeep":"","tlshash":"8031906c61a3254229cf75ac97df4051311dd103eb05ba163c1c5088bfa9d3cf9a5d7b","first_seen":"2025-12-26T07:43:30.542292Z","last_seen":"2026-07-16T12:51:59.633673Z","times_seen":6,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/icon-facebook.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/icon-facebook.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:17:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2962\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FgtnZcs9sODlc0dSmRz%2F3ItvjiXzgYMCZVAcZz5sUg3%2BTSBW7C3p%2FLklTprxoOpPETinw085zJhrg1ZHen71EDVNBxUK9Zcs7fwM2C9uUzgLMfB18HTjN5D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bc13483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 4-bit colormap, non-interlaced","md5":"3a060aee536fa81819122333f6f83f35","sha1":"3267734a47be526dc3235d716e7d7c8a84300be8","sha256":"4a1673430f37a8693e3ca8008dec7d08b617b2c8e2832231f5269e1d717bd74e","sha512":"53f24e5e807e958aa952a566979e6e8c9878a5f24f5ce86a88858aad969f0339b8e80d845fdfbe89eed10436079124fd56ca6d89a0635b563afae84c13271bd8","ssdeep":"","tlshash":"1351ea769978f48adc7c173ca4b44b8308a52db8e03ca9d69489bd6a033e1cd7c037c1","first_seen":"2023-12-07T16:49:18Z","last_seen":"2026-07-25T15:40:05.767349Z","times_seen":189,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/close.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/close.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:23:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 439\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PuI1kUwHeAVoponSd2EYKMkCCLzYgzmKjkA5gL38GbdzrtgA6D5Im46Xjb%2BgIK34JjX2ke9TuCYI0Gg3bFlaDwklM2WhLnQohxmCL0v0HO4MSqYhNI5FUjPa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafabd33483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 45, 8-bit colormap, non-interlaced","md5":"815975de405870b94446a7af9b82c10a","sha1":"4ea59a907457691ba14f134f551a07bc041b7241","sha256":"d9b016e27e8a4af0800e87b4ea168955be7030b21cc06bdbd92ccbcc83f665a8","sha512":"d7fcad14d34353cb1835362745baedd38d73136820058b328bb546dc3c2ba592a13d984fd4696ae534b729fc9bc34c909f08dccb0f6d35c01e8cd7903949539c","ssdeep":"","tlshash":"30f0f8fde32a29b6fe1114b26439113df1609caa1d07de199823307019f93e1c294ac3","first_seen":"2025-04-08T10:46:38.43083Z","last_seen":"2026-08-10T19:30:56.5442Z","times_seen":110,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/google.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/google.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 896\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFiMoyBk1i8GB4Shj65QVnL2aRAei2gebW0NB4ys2X5dnzplwo7xi0ccZYzG%2B0mwFZB4M2lY3TJuqUi6%2Bb9feHJwGBUI2obZfG1xfGxHD0ziPi5cTYSAnFpG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf2b893483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4698,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"388fbad0457fe4b616022568b8fd39f1","sha1":"a39a21e79084b4cf81473b3cfd7721e3a5bea3b5","sha256":"2236f910f185301a767a6b68b4e93f1617ab222bb9a4f6d7008d9e18ca3ce086","sha512":"27acaf2cb5f820f93f0bd181888e77072e21ef875786211469ba5e180649a401afd90203e100c70e99e73372c7c30f581204c9f3969d3bd1d3cadba29bc2cd13","ssdeep":"96:la0TUzTUs6LCLlQMk619By6g2dpXKK3KKk1:/U3Us6LCLlQ16PBy619m","tlshash":"6aa17a5aea105005b032dfbdbba38656e95a0067db0380b87f8d67818fb156d4771fcd","first_seen":"2024-09-17T16:02:29Z","last_seen":"2026-08-14T21:00:40.231661Z","times_seen":235,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/zero-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/zero-zone.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 438\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyOENxsTs%2FWLTi3FIs7jn8CfWH2mAxxbdXtroNaCUS%2FQL2cp4Ar9hKsUKXZeC%2FehmrrMtcn5Tjr6Vw3YQ%2FZn2xWyGZOPJ7Q9Vjz0w26BcmpidlOjdEQTjLLn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8fb34c713483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1801,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (612)","md5":"c8bc208681bc7c344435baac40077bdb","sha1":"4f4dba62ca53df4bf110d80c8a4c8d9b49e6e007","sha256":"5d7bb44c4a0536797e65f861922c457cdc17dcf6d5609f0fa65346ede695b323","sha512":"e50c0c58cf9eaadfdc1e4d44da90daf4b31dbeccbef9354a5ec34f9d292b47dfbdb6a0a06c812f8461f87f71f7ce724a12754af8973563090deca6f09ab3cfd4","ssdeep":"","tlshash":"f0312b9877c98c4767ad2c23c5758884e6bda0e1c9997b83d258ffc91f81215bc2748f","first_seen":"2024-04-16T05:43:21Z","last_seen":"2026-07-25T15:40:05.751643Z","times_seen":26,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/twitter.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/twitter.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:18:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3405\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWP2%2BXwrPYbBBVaIpzv7Kh87J0U7ejKdSEcRAVxBYOs3A3MJY6nxknqOXrA2FJ5JXk1OBJMm%2FtZlPnL9Js3Ctp1KVBBv295HJIWmA5aQkoz%2BZ42dwII9%2Fkki\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafabd13483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"cf321985f609b4ca6ca281005001a0a0","sha1":"220f03be612ac92c47290d2818ab8a6f2d49ae9e","sha256":"bad8a34ca2a283e0a967ef3828bb64395b7c40cc88ac4f7cb176cca4e166660b","sha512":"344d01a2e0a7087bd77f438ca0cd8c1f2e339479799394e90b82deb8338fc90c779c0d469ab5afe265d8edab55dad4cd012c7ab7ca9099b990be2fd456031820","ssdeep":"","tlshash":"0c61198f24214232c811fbf94fe059ea9433bc119be5d465af41eb610cec69984aff30","first_seen":"2025-07-12T07:19:04.979756Z","last_seen":"2026-08-10T19:30:56.532809Z","times_seen":92,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/alert-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/alert-zone.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17361\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9O6MC9JONqNpoQ0%2BH%2Faj58U8r4Dk1RClPhQwhQrfexPM70YUMIGEcp2CxAUH7G39o1cHXOfMtGR2wvRv3MFGzRbGbM9lfFeL2RZF1d2S4CapkB7hF1u%2BC5N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fb34c703483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":120664,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (64301)","md5":"2d8819d4b15ffe076a804a074e0229da","sha1":"0e76d42421e78a58d71c99e233335f39b8b47645","sha256":"b49a2dab55008d7ba1277b3adbb0b5f590f9b3ee25e3e89a9d78696efd262dde","sha512":"feecb522cc035e71cb96f2f0dece6b8c9da287a66dbd57eb5ca0aa96a0cf5e76d5505be44b17cd5d5c29522416e251bdd72117688bf21cb659d023c02085c82e","ssdeep":"1536:7USf/fL0hmyr2qdXUfaHKVBl8l63rBvz/TjxU7phH7KwVABNClrvBorz9AT7nb/T:CyfbxWYLOz","tlshash":"13c399d85384c8bb1ece6d03ad38598695b3416ba68c3e4fd319fb4876b41dacb484f1","first_seen":"2023-03-07T01:06:45Z","last_seen":"2026-07-25T15:40:05.761094Z","times_seen":746,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/vip.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/vip.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:25:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21584\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5OrgZc5YpdsW3tXVJ40ll8mEobeu3EYhpJbalu0HTalXcY78f%2BYudDhAlMakER5JwFQ71yjbBinJcHN2FXCRmqk4AyNuLlcR1j814YqLE%2FN%2FZVtgeJ7kK8nl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafabd43483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 180, 8-bit colormap, non-interlaced","md5":"894d8e40fb1ec55bc12f99571a65b6a4","sha1":"5a1a16a1ba138083b10646f24acc9a4cb8261d0d","sha256":"f5a1c134138e7b54aa95d10277c00fae61a93a2352c39b542506803696e6bf7b","sha512":"372de36e98b69470e90ff12bd6cefb3046181a252b6c238eba4c3fd3927c563a65e081d6eb2f69f515ccd46aa5d67f9eebd32c8782fe838aeeb3ed6db8d42d1d","ssdeep":"384:bFDL6IlLt7h56eBTHvcGEvCIHGCvXjUmTGK0xQkILf98T7AO:bfAwPZEbBLTxdkI58TT","tlshash":"47a2d158d06800c5ef35e0e6a18b9c26d7905fe4fb706c1f6d9a62b5c1ff2a48e940ed","first_seen":"2025-07-27T06:58:26.704133Z","last_seen":"2026-08-10T19:30:56.518413Z","times_seen":67,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/box.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/box.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Dec 2025 15:57:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 627023\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9GceIl5nn9qakUTW2TYzbKTXe2aYfbltlRkji%2FQvhn%2FCt55GJh4j328kAcTsQVNzEHy1stev8HaCtq9tLljm8yHZ3fQEmDaY%2BrffEJakUzabq17e5S8XsJ5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb67cd03483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":627023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1416 x 1080, 8-bit colormap, non-interlaced","md5":"8973e0339af011f4c228eb3c3d395d20","sha1":"67c41b2164e5618dae95c9f87a5778a053d7f8c4","sha256":"5586a87955faa323cead9a4128d4e6205fa3f03195af5ae2ec2bac72daab700a","sha512":"79d22300302f27cd76d9b51b8cd69ca5afb6ccb16b53823b2726111bb4e6ce86193b28c75cf5edec305df413975a0054d8e3909d89f9448b3099a237e7462b5d","ssdeep":"12288:IlKnx17CvnVAMgkq+6FiPZFUvHe9IuSLowkJ8XBIpF5tHlhhgItEBkrJe:2gzCPVAMz6FinywOBdulhhgIWBk9e","tlshash":"08d43385d08f6cfffb86844c32d35d4894e3a7594a39923fc920abb1e92605f4f6d680","first_seen":"2026-03-14T04:58:49.842576Z","last_seen":"2026-03-17T08:18:00.475638Z","times_seen":3,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/twitter.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/twitter.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1206\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzrLPqsbxvnIFI%2B1%2Ff9wG2V2qkbhPeLe3fhe8ciHvsa9J08ltNUGC50K72chjwGZwXp3Lg38iwN9BVX%2FPoX9vn1TG7i7caLOmb4WnIiP6e4QF7I9r9drfA61\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf1b813483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d2560ff6e16ff905c85c2382395ef862","sha1":"cd866ee657c778555249eee7000fcc16dce41a61","sha256":"397de0c1f1fac655fa5e332f6bf4db075d766a8f30656b7d3cec7ba40d963f10","sha512":"362333cf69f46f7fc5491bc091b2179e8c0c24b6e0734a1ec3e38cf65bb309f0100e372c5b574bebd38e682308b953a7c552bb1aa471b37e8ef449c80a8bf1d1","ssdeep":"96:/acJ6M6X4zezulFW5O8KZfkli6AOYNHA8VoIoVP:ScYrOlFqO8KZMli6AOyAWov","tlshash":"2dd1fba79f221508f502a8f8ff66ab9a66094013534fcda7ba4c361ccfc619847b274c","first_seen":"2024-04-11T17:51:58Z","last_seen":"2026-07-25T15:40:05.704739Z","times_seen":35,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/link.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/link.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1451\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJsp2xZottzObfWbWs32If2VTtpqxwORD%2BwkL8v90zQc6WUL2vcaG5Fxbi5WvFKT1PwVxmdR68otTjtb%2FFi%2B5XMP0uYNvtvTFP2AYUHNgl9%2B7seSMrxLoGD0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf1b863483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7404,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1c1c2e64ab82faf2c79dd07b0e97fb83","sha1":"27ed8a4ed9aa95b39379ba37b88dee988c099637","sha256":"2ea4380fd054f5f8255510488e86e043ac39d1b7ffa11fe0dfd77a53ca15e41b","sha512":"6598bf1729fc44933d121b14ffc5328f97722b9c709fa17d226db1b09af27acce3519d63e3235e4334479c96fb191f5fee95e8eb15d8f3811fe7ee261fde036f","ssdeep":"192:FYDavE2B3LL4R8Y3LY1ewdVmYmi4x3NAJsEcntkJ43Vr8b:AGE2BbL4R8Y3LY1ewdVmYmi4x3NAJsEL","tlshash":"ece15625ee146088b026bde5f7f16f12ee1414a3970f817bf9f4b604cb9651c3ba2ac5","first_seen":"2024-06-23T00:01:58Z","last_seen":"2026-07-16T12:51:59.611186Z","times_seen":19,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/7.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/7.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:19:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28775\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3YikQBjONEFIUNMTScPjBz1JZZo5uAJUu70gq%2F%2FFszGhbGuXV1CgUm3tnb8Tj1P9df%2Ftp5EwcD%2FIhppNdcTKOBDXrvtKg2X87dP9fiyzJcEY2Np3zu3IJpYB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf6ba83483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"65207b18c6593e213f489892a0f523de","sha1":"661e7a148e87e7f75b8b07bcec6756e1bb0b1f24","sha256":"93b45067a2a19c3d2f2e319348e3c0ace4e27efb4ebab09928596eccac78126a","sha512":"964aac9851faf14e51258df509624f0b939acac88091f2f1821abd03ee2041b6ccea1f2f9c259c84e5d2cb64404da0abb3dd9c26157270bcef3aa18088d49a35","ssdeep":"768:daEY7lgAITqgsIsrXfN2tZuPjr3VwPEnD:daEY7lgBTqFXfNeZu7RwsD","tlshash":"48d2f1c26757d506d49ed938e2bd6d1880651ea30432e0ad53cc75e0fe70f858e5bbc1","first_seen":"2024-04-16T05:43:22Z","last_seen":"2026-07-16T12:51:59.615153Z","times_seen":15,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/icon_2.jpg","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/icon_2.jpg HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 04 Sep 2025 16:18:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41568\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blIvc8C5XxKsxNr7JAHN%2FYj0Gw1ucuC5Em9f9oQqU37LN0a1GTkLOPBR4fiy2O8vbYluO3y5FBswbDVWMLJIOSaPuZLhQZbrrspTCIEW8jx%2FhbEUpOrXkvuR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bc43483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":41568,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 554x554, components 3","md5":"e460815c4b5fb5da7287303d61856a57","sha1":"0d02c20157cca40c3ef03b3ab9aac6045912321c","sha256":"d9d1699f5afeca01d35e22fbdfcdd3178713353150a16a51a54887e914388582","sha512":"4ebe9bb1412cef11d59fcc7aa132e0c7594e9b3371fd024459fa2594a7281ebdd44a53d95df513b83bc7b404877945e329ba6eeb65639f0ad6b39c3ce78b46d6","ssdeep":"768:NEEPzzXaDYJ3ZsiE8CQuw670iAML3stgqtqUEHaW6Zi3UN:GEr2DwZY8670TMQNEOog","tlshash":"d713f128c34c4333f31257e995cf4a9a2778ee76ab8e22e77c2168dd017a7784e51c94","first_seen":"2023-06-20T14:57:34Z","last_seen":"2026-07-25T15:40:05.769635Z","times_seen":139,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/link.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/link.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:18:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1368\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjkekwVqy0QNIvl6KsZm%2BhUR%2BI89mn%2BeV%2BxOy%2Fg0H69QPkIxOXksHraB5hwca5ubYoFdszsCPNSVNxkHOtBbiJuwywo9uaXYESjgvpij5UEVYOnw6AYflpeb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bce3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 74, 8-bit colormap, non-interlaced","md5":"6692988f8ad6689eeaca944f43174def","sha1":"4386fc3f1c16f0e1388f0d7ce1d0eac92f2d3541","sha256":"c469afee28a6c0a6821ab0e498ff3dcf317d7ae000d78d7bcdbef2856f401121","sha512":"a6e070273f08a58a7fd5fe38acdfe47e9a42e6a73a2683610f556615d5c5ed5f760bb3065cffa4e3738569fa6185e43ec0e7a2c6f0608f1ffeb5a54a3390cffd","ssdeep":"","tlshash":"ef21b84ffc3971f5d9359d219b3d140c5ebbb0ccd2a80bc1e32545697184eb22954666","first_seen":"2024-02-22T15:20:02Z","last_seen":"2026-07-25T15:40:05.758137Z","times_seen":43,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/5.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/5.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:19:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28567\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PVZle0Q%2F40bbLiIzd7VT2f4tQXp%2FYpF7HQ42wggViW8OkgmEj0xMvDj3048V5BPAgMIxnjiIGQrBedrbtWCnL8YDBhPPPKenUUil1g0JGdRGPY3MUBJlI8Mx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5ba43483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"8400677cd5f0737051e3352f4e063976","sha1":"af9b0d44dc97ab10d1973292c7abd477f97c948d","sha256":"c4a5004206b5367aeed89da55a533c1a200391fa66864f41cbdbecd6aca6a841","sha512":"e277209a6c05b7e22e15fbc0fdb6a4034a7653be3dd9316f781e1cafec27876304881fe6d9c441c94291b8b497e73b6979a1ca41aa26c70dae7ffbbe89112a93","ssdeep":"768:jdeqESb5JjbDxLiIcuaihqhQerIKxuOe0V0Ks5xSA4cHbaJFq8qR:jdeqX94JQhK/ed8M7a/qRR","tlshash":"39d2f1b7b7976a48d2ec17bd9ef1a0c4f0afcf5d30f9124896042b2e5d280ca0d56952","first_seen":"2024-04-08T19:55:17Z","last_seen":"2026-07-16T12:51:59.593629Z","times_seen":18,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/ndas.jpg","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/ndas.jpg HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Dec 2025 13:43:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109936\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0fGrfGjQcWvudguMihr39317eiwPaKIb4U8XA2cGUDWmcj6NMkbLIhxs0tvY0wg15Mu3HpUVI3RQinglsfHv2TaXu0XppZELuWD52jztLJO0MSQB3bMVh%2F0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b963483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":109936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x718, components 3","md5":"ef30b45b9a18aa518b9e2274be3e5426","sha1":"b20b154e1b33a957e4dedece5d08dcebd60aaa65","sha256":"2b5640474002e85959fdb49e03b50cdf9d17502d83f9dfd82e5062c16340a1a1","sha512":"5fd572bf1b11893a7f9ae792ac97ee54875555f8edf2f990450f1ea1bbec150d6913d992f25106a9bafb2ed8c99e213edad6a115022527b95b2a4d14661611a2","ssdeep":"3072:TuonWL1DTNVIxRCfNq5t0X/+CbhVqr3ARaw0f6s48yH4n1R:CL1DTNVIxRQNqaGOsrQg48yH4n1R","tlshash":"ddb302ae5093acc0c41629b54aa423fad3b16d77a863f23f036ead975043ed2d6c8085","first_seen":"2026-03-14T04:58:49.865518Z","last_seen":"2026-03-17T08:18:00.480536Z","times_seen":3,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/main.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/main.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 161535\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyZ0TCXhPLp%2FMM%2Frhxzfk8mBVzKdbvLB%2BKe1dScwJC4EZwO6VVPY%2B8edTp3ilM62taAFBE8%2B0dvu99cI7on7ToavAEzCj9TWgMZHhu9JVbysdmzdYzXiSfgW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf1b833483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":359457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9e86604af3d78cbc05aebd979386ec0b","sha1":"257b051f34988af153027496bae217a63e433fe3","sha256":"16ce972639eb7a325a53c30c32beb4338b12cc0b82c26913e95974e2508259b1","sha512":"776f6dc8735305f60be5865a629c1809bc3526b73df17945ee4334238f063ae637b3b5f9648530fa61dc4fa823f17a565945a5b348d41b69150d64bb82c353c0","ssdeep":"6144:LgqfEBlmM3LOesj9nC5N9fZ/rFZsUEmr7y:LgLBAEOMZ/bsUXq","tlshash":"06746cb56d8d6a9eb93b8e2fdb42183e6e1aa0fdb70140cf8c9d37e4c311154591acb4","first_seen":"2024-04-16T05:43:23Z","last_seen":"2026-08-10T19:30:56.553025Z","times_seen":152,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/popup.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/popup.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1877\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cTyOTlJnhmWfZcOF1ePl7%2BbRwZ874lCU6%2B1rS4SEtqmE1JuBMrhYwWTYOPQ6VUsJVqw5Pyv8W7gpahqdwiRqyHuvmvuGBOPgKNC75HE52rW3NWMC%2F8qtT7Xf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf2b8c3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14234,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6f96d2834b4e11e729eed26f5c1a3655","sha1":"6472e637a0ca81323595bbe3114ce76327e1293e","sha256":"f8ed48ba83c7a58771e84154dcb43bf8e6041bba7c7ef12fc93713e3def6e849","sha512":"c879c587c9de4572c304fc2f43f79ee7f3611f0a28a5d5de366c9abc8d83149407dd29af3e6551ad027e92a4f3c2d526bb1b20248af85f92e7bb5ecd83ede5f8","ssdeep":"384:K5CN8N4szPVocPk54PfPiTPUPKlPuGPuhPq2PUP8GH1NeDPJfGtfui+bfCRqcf72:+gszPVocPk54PfPiTPUPKlPuGPuhPq2h","tlshash":"d952df07262e1809e12fa8e6f852ff57e20d7e83d25b41a6b6d1540dd4ca6320b77b4f","first_seen":"2025-07-27T06:58:26.706817Z","last_seen":"2026-07-25T15:40:05.72226Z","times_seen":13,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/uc/5.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/uc/5.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 07:56:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36136\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Dqi39Q4umU5Zf4dzW%2Fvdw0WHw7n34IWvCOjwuT0R08VEDRL0CMIGdjtIncjDciHxYKH3BtRv5f3pJIopBS46OvV64BBvCO8ak14XS2h9Zz9HG7%2BEsMkX2Hf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bbf3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"03ebac0dec0883d498e3c0bcc27ac16a","sha1":"126f02b8ca44623543d569db76da0354454602fc","sha256":"65a81ecb55947b6e4a9404cfed148868e107d80a6782b2db574211692cc16f35","sha512":"3b1dd9940183776b8a7793278561042b1241836188a1a2ff7cfb955261a81458e6cb7328d70265e65eb5da77e757b9950850f27afe53d947692115c9caa28448","ssdeep":"768:cLu+GRR7GEabiyBskrux+XPcLvZHO5mB5QYdRExyDEyVNV:Ku+47YiHkCu0LvZHucQYrEK3V","tlshash":"b1f2f256f2074d7a82062f2b327bfb59edd65101025e9478e1ea275f8693d236ff0205","first_seen":"2025-12-26T07:43:30.458742Z","last_seen":"2026-07-23T22:44:16.943754Z","times_seen":21,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/icon_fb.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/icon_fb.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:18:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3109\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaDw%2Fg22N%2BYjlo0xwqg5F4qqf1Fv5XeW5mqCMUcmBbJnhUbbftcQ0dX0wq1t%2FJX2TnWvXQSmzovQHaxMdzL8F4Yh06lL%2BCa9oZW8SilXUUJ01fiRRpti26xH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bc73483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 4-bit colormap, non-interlaced","md5":"bedc806e16cbe3dbb90de1790adce6da","sha1":"8e2efd0afe04a0d6b39c5f22ae8597a4704a5777","sha256":"63e21af008d3e310fa4e9e8f14cd9585b31d0ecb359abdd4cd1a237c930a0856","sha512":"592830b21d8d97e3909db55cb4f4505fafc69bb012e9b0bc784f1a76e654d7ddec0d83f029b89397773dbef768d5c1574b48bdf9f58d052741ac658d766c7cce","ssdeep":"","tlshash":"c0515dd2c71f05f734068217962e84846d9504f799c37ec0f1babb61de1849258bf47b","first_seen":"2023-11-28T23:00:27Z","last_seen":"2026-07-25T15:40:05.746466Z","times_seen":148,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 08:17:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18778\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64cac444-495a\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 112348\r\nexpires: Sun, 07 Mar 2027 08:17:26 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhIZZJRmXj9%2Be1GV28izmBidAweKmyX2vJiXZrTjqt4qNkFDOpSmf4Ur4l9eVhZuDcoQPRkeQtFYjxBuSQ9dxrF2xdHPO1cyVbvIWylFowypHYg%3D\"}]}\r\ncf-ray: 9dda8faf9eed120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-15T15:15:48.928743Z","times_seen":46933,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":4,"send":0,"wait":11,"receive":3,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/1.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/1.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 19:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28789\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ltx0f5eUDu8%2FvVa48G7AQUzTuYswI4FkDCGtW3LR84JwUomMyfhtUXDR459RTZcxCD8f0md%2FoC49aiKZm6OW1HI%2B4ASGS86P%2BHHawj1%2BCkZY8gDcaTjW%2BnnJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b9f3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":28789,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"fd0f1dacd9ec467fea3e1bab3e51bcc5","sha1":"cab9d3d964686a00e5dcf8379e8cd53e0e4566b1","sha256":"cb50c47d97403fd0b9c29d4cbd65f161b8079f63b205a92a6d2976a3440ea49f","sha512":"1c7f9a2d9290c1972e5ec013caf6f6abeab27b45674522c38c85d5ea89c32aae3b339c5849a540fb8c2562d590cf3d97f359a04aa1eda47eb46f8649a8f82f86","ssdeep":"768:SmqTJVf2bVoYFY/6YKf0enhLEdLqaUJHtW:adVsVoZK8uhQ4aU+","tlshash":"d1d2e1bbeba9da00d910273208b744aef5df6ff0fe5d3a5a61b934180c456583c09e5e","first_seen":"2024-04-16T05:43:22Z","last_seen":"2026-07-16T12:51:59.64655Z","times_seen":16,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/namfoot.jpg","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/namfoot.jpg HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Dec 2025 13:31:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 60472\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvjxq%2BlgTKuaHpGqCsclxcylD3e0ROgqNkn0FcdQkW55GLsXUbbiR5oHxfm6nR1ka57uLsm2o84fJB7PDUB1Ct0sVuwWLmpy%2Fl9v5UqSL41xFDVTNTfGMqUt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bc03483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":60472,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 797x1280, components 3","md5":"51399ef65f5ae59165defac00357f18d","sha1":"6c1e29f86f770905d71abfb1f9ae2ff040fbfe84","sha256":"34884f9cf2409c1035dacffa763ca802a3a90bbc8a15df288d4ce1565836f1ea","sha512":"fabb2f6a3c1213518bc4c36bb16a9b804d54df40b122066f3a0d99a32911df5b4009dc967bff0cfcb9d63b4992e89644e04d72c1ff2ae3009fffa9303fbcd4b3","ssdeep":"1536:X6q2xM4r7txslHRs+fEmwlRq3N6+3msRr0IGlYT:1mM4rhx2y6EmwO2sRroY","tlshash":"2b43e01a1f60a603ef80757e05296b6f404c872a6fd61dbe4d6067fd12ebba012ec1f0","first_seen":"2026-03-14T04:58:49.878791Z","last_seen":"2026-03-17T08:18:00.48729Z","times_seen":3,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/jquery.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/jquery.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 397\r\ndate: Tue, 17 Mar 2026 08:17:26 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 270\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b06M2Li%2B80vh30qEl410aIEnIzjh6AD0ZUmbJ6PwVkOAROvXCTJtva3omapIOyzLkXCr61zB%2BaS7bbtBXFJUauW32s5tYnjjcXCrnndGyiM%2BBb8xv5grXu3P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf3b8f3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2253,"size_decoded":0,"mime_type":"text/javascript","magic":"exported SGML document, ASCII text, with very long lines (1757)","md5":"27335de838e10bf2a4b4d5999c517d76","sha1":"83b660b19244c170d715f4da30013cf57284682b","sha256":"e654612977b4226247e6dacd00df39e20942b906c9aed2fe405da0de47af6e91","sha512":"14e0b4ed1bc6031d7b6008c1c1735d3321d98c06b73e0a920386019806abbeb0f38033f56bc88bd633cc95090bebc1e40ad259e7b3965812942f8da988d5ca1d","ssdeep":"","tlshash":"1b41f8e897c8c89b6edc5c13ee19cdc620b6c576a3d8b2d7c31cfd8d056a252c81d85a","first_seen":"2023-03-07T01:03:42Z","last_seen":"2026-07-25T15:40:05.702629Z","times_seen":780,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 17 Mar 2026 08:17:27 GMT\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24899,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"dd59052c593dd4fd28220ef1c4ad1931","sha1":"dc1d41a2023de52c9a6c22813f4f3e4023fb18e9","sha256":"e1846912562de798b6a53af1f5fe9c464510701b176dacb7ec48fb8d20685771","sha512":"187d04ddbc2fca32f696fae47a69878f3eeba01bbbbb6404c9f7a6bc0c0acee7262676307f49f12d519aeca74f7dd239fb8d5b867f8411769abbf5b8cbbbee27","ssdeep":"768:3FsbbYSRv4wFMl22YfRiJhan6BBYERNeWwhQHHYORjUM+:LIHT/","tlshash":"e9b20ba10417440097834ce223cebf35fe1f62507042d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T02:02:37.810981Z","last_seen":"2026-08-10T19:30:56.490589Z","times_seen":184,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":305,"dns":12,"connect":13,"send":0,"wait":21,"receive":0,"ssl":343},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/google.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/google.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:17:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9268\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IU6nCNn7tahIk1VugxXcCBY1k%2B3mCJGayvIypC7FimjfoE6ViIQoARPBCs6YSDw9WA9J5j1yCPbzo%2FFqrP%2FhLXBDSCb7nyfmkDfEaC%2Bad9edEjeetHB0qiKT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafabd23483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9268,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 465, 8-bit colormap, non-interlaced","md5":"9fd2c79aa38ebc154913f849f854f059","sha1":"6b42a4bf21a8ad037f4df4dfb284a5675303a84a","sha256":"1c92dbfd03f5a35ec4c551da03831186ea678b8581612549329959e6453e5916","sha512":"38a58ba763c3fa75f38ca424154628c3dcbcdb7776bde116c00b630b5dec7f1db41a0821b522329a512520bc57f513b268a990b726703c4d1b86729ff9771939","ssdeep":"192:Ld1orL1SsWUXA5HXKOCWglVFbI+Dyz5D1qWCBm9i2n97rtNo8kJKySHYSS8j:x1oP8sWWAFXKgGVy+Dyd1qns829E8kEB","tlshash":"4912a05916881f178a0eb31c5803d5528b433674380b22693772249ca93b6ef4dbfbec","first_seen":"2025-02-11T13:44:57.719263Z","last_seen":"2026-08-10T19:30:56.560409Z","times_seen":167,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/media/spin.mp3","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /media/spin.mp3 HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: audio/mpeg\r\nlast-modified: Tue, 31 Oct 2023 17:59:02 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-length: 93347\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\ncontent-range: bytes 0-93346/93347\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlyR8DYBZ%2Bl7StPI6G91FO2mxOK4mw1dwTw1FI%2B0HEeZcV0HUWd4jEId6K%2BWKM5pJjH0Crw4nB%2FUcBBl0%2FMZeerPqaXr6f9v0fbppINdyJVTgAMU6OTx4jZh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb7bd0b3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93347,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"d79ba85640e089dabcc31377d3586363","sha1":"9e114f0f2ae0cad5b464a6d14f3f3e91193b204a","sha256":"c116089f76fcfac640d9077510d653c8efe84c308e3b163913b9193417bbc6a5","sha512":"c705d4975fdcfff9e321348d98c4c6f3dae813e72c2e85bb13cd0cea6fcaf0fa6d09c3da82e775346cc7a573725d6e48943e5738b1613fd865db050d8801d2eb","ssdeep":"1536:lcM+4b9R4E4KDFgHJioIzcndwD4vS5DGGCk3puhfl5E2vSLRv5K:lcM15MygQFUODbCkght5yK","tlshash":"3293f11a6bc15026f12a1f3d3b9fd9b6c4642d0d1c14ced6b5a89b92a2ff9da333c045","first_seen":"2023-04-05T03:57:11Z","last_seen":"2026-05-07T20:02:39.476814Z","times_seen":389,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/media/close.mp3","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /media/close.mp3 HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: audio/mpeg\r\nlast-modified: Sun, 02 Oct 2022 09:58:58 GMT\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-length: 12675\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-range: bytes 0-12674/12675\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ltrS5e1dWNxiti098sV7Kdm7nmTrGoO5BUixmKhbMhgtATrRfB%2FfGqcN2hnYyvLToJPm0h8%2F2codM1B%2F8pe1DjvLRUIOno%2BbCMMNmWOf8J%2BxfxNMxcrEa6n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb7bd0d3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12675,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"2056bdcfbd551273ee207f8c6ff9d257","sha1":"6fe68c9917d3409710aee4147ada311093d33ba6","sha256":"d7633fdf0d543880acc3fdaf578728d7becc1ff429ba054921d3313f73a5a4a7","sha512":"01a0022764f49e0c395d9f40fc73f123a424401e388d05373ab44ad33bd046d106881bd1f158b417030eabd8c9b52504d19155c225a1a632ef3c99ffbe771399","ssdeep":"192:kI/h/NAQ/Qa4cLtUDImzKBlSV9hME7Be85sqHARf9jt5EIJMcL:1/LcktUDBzOWX7Be85sGIr5EUMcL","tlshash":"0b429e012b05c12ff7292f7d301f86b8e0983a8f2a22cfe1a0179f94887f151672d954","first_seen":"2023-04-07T19:47:22Z","last_seen":"2026-08-10T19:30:56.496121Z","times_seen":779,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-17T08:17:26.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 08:17:26 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2Fa%2B147Os3Cf7JEJu0PMYQgEowfMZBfHXW2ebgqBFpJsoPQnz6TNaLyoiHoVQs0FxBNqYYhVcrXh%2BJpG47Eihiw1DxowVDTBhI1ahZ2XMTVJzuoSlZ5GZbHB\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dda8fac3d29eff0-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":106842,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (372), with CRLF line terminators","md5":"9d4bd88cb0d53cdc484b8f3a400803a3","sha1":"aa4b919665e23d7dd7865c266fb52b121bf7590f","sha256":"a832d39166c217c49a8b87442587dc88abbb85784d0adc129e016eef901901f6","sha512":"226b8fd8ea50acfda1979b024271d7b2079134d4ce7083fa7795e78339034cd4975096e0441ef04b7f486bdafa3e064ad9cb3d21ee61ea984731681ed0789a85","ssdeep":"3072:NSHoPYOjGInkhK/pAXLXnkrCL6poba0wwhDKo0WF:NSIVjGInkhK/pAXLXnkrCL6pcwwhDKo1","tlshash":"85a3b56195142c1ea12381f9f7b09b9afa544003d70b491ab2fcb79bfbd6e085e735c8","first_seen":"2026-03-14T04:58:49.837428Z","last_seen":"2026-03-17T08:18:00.495129Z","times_seen":3,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":212,"dns":181,"connect":8,"send":0,"wait":193,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/nam-spin.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/nam-spin.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Dec 2025 15:59:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1134611\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3M9unwoBXkkRbbc6M32zphYOAb8jG5J0cTrcTgH%2BRrI7SdmUJr5azB0HwnnbXw5aCV8RjiTjlN2dvnev2JuCaOahv0ckuLI%2F2FbkbiRgUukhXLg3s8%2F%2BjstT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf6bab3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1134611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2436 x 769, 8-bit/color RGBA, non-interlaced","md5":"ae13de084cec3b667bf84f27ccd8ffb9","sha1":"78e72769f40eda058de5171981cf51bd70ac0af1","sha256":"45a06290186afdcf8dba4926c8187615dfd97beefceddd0d4ef26b3d3659e1cd","sha512":"00b9ff270101911f242a7a90b36da0e84feddc546eeb2cf69e19933dbcccad74b9acd8e303f8526aaa8739da179bba110dadafbda6d2a515d47b0c279eb9684f","ssdeep":"24576:VE/YvGOmiMJq3iERyh+08cshYevI5pxGakcZ8p4rSncLUxmSuakACvc:OzOFiEMsBNSnVucSgU46n","tlshash":"1c252331d46288b56ebdc34dcd8f407b296ecc514a33e2a3d09bd1d71a88ac57c867e6","first_seen":"2026-03-14T04:58:49.881697Z","last_seen":"2026-03-17T08:18:00.495948Z","times_seen":3,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/link.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/link.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 914\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 268\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2BOvAs7LTBWoRy2Z1MoIZKMFFJBTyNN1NGbPSezi%2BvGJ7ckpJoVUwO%2F4q11Et0hNANbFzz8iJhEe2QNNAH5xR99IiQ5m51SiKBDYmOs6ZjUnvBH808%2FnM5zt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafcbe53483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5530,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2b825a548e96fc6e7b6c25b9fd0d0d49","sha1":"aaf3569c3596c744989a922839b1d57f0793d725","sha256":"5980a4ef9e11dc6d99e455e8bdc538ad9ee163a2ce0eea9d9569f664c6f339f5","sha512":"8a34b4885d84b372aa04698ffb76dfd1adb81dfab5deb4ab8d930bf0b954ba4b25d5fc17fbc561cbcae65cfdb43187e4b3faca50c781b4febbd30dfdb8f76884","ssdeep":"96:VnXEWiHRwiKLAN4LSz7btQAMrAELdlQLeN4Lq73hUIeJA2E+6r8:l0WiHRwiKsN4t3rrIaN4XlJpB6r8","tlshash":"abb187047a19185199779bb6b0bb9500eb2d072f09115f09f8bc28c86f70f16fb76d9e","first_seen":"2024-09-17T16:02:28Z","last_seen":"2026-07-25T15:40:05.765064Z","times_seen":28,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz-off.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz-off.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/css-zone/zero-zone.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Dec 2025 15:58:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 348755\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUXSTqTLi09pO1y5seDXXGUdXEWWh3daQ40J6QUROPppLANRoEuaw7ByWlFB0K7wXvHZMas3kCPICWNMP%2BgNtDQXlKIx83wV%2Ft8QGDWWnTZpMgs6w97ccIb6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb67cd13483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":348755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"154ae73bb4c38eee53839758ef9eca1c","sha1":"ac394122feacd080b32dbaa1c6b35e024d098de1","sha256":"398ff32993cf4a5bcc5c668aab129785283ce2f9e332aa282ea998a7334d3a90","sha512":"37416c5282686759f47ab9fbc0bcac7baf17dc470894eb0f7d038f82f0354bc7f088d7fab21a11fe27b816fa0bb8faf59bdc5b6ecdc1e71479d85b7b376fb993","ssdeep":"6144:IZmrJz0HZ7Rr6QIqxpthrKrL1rzalV5GF00Zaa13x15xQZfTfOoXU:XIXJp3un1aFGF00Zph1ofOUU","tlshash":"3274235e70e0e9f7c4dfa801223596126269f378f6246b53c0e35dacf4b892d0d778a9","first_seen":"2026-03-14T04:58:49.803281Z","last_seen":"2026-03-17T08:18:00.498592Z","times_seen":3,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/uc/1.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/uc/1.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 07:54:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23428\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QuH%2B7av6STdVa%2BWfV85IDuTzjMl9lAvHIFoAZPl4IOI1qpkS2bh9uTLvtxHKr7nRXdya1n9m%2FWtPKqFxTWqVggPOB92h30wbyKIu6jxJmKPIlPrOKv3gErf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bbb3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"f2b27a84499ee6f8e6352dd218b15637","sha1":"a405d0ac1c0eff0c9fcbad22ff7a5724bcf9703b","sha256":"166a2e6799f09a4a4c020302269847ce0c218916d1500114a50f5b2236ac12fd","sha512":"f016c4385326e5fbb43bfbc145116050f0d16c014dc48a63e6c9f32a757b21a1e5aa29704e86c0a3c3355ea8c09acd86d1e96305eebf85681bd1f2c0fb804468","ssdeep":"384:c0w4z1im+P/mzDEBRBXWSkXYESX49ZySTJgnnWxYwxrl2F+8r3f3t5NsC5HT3yzE:ci5aCm9eoESX49tTJgnnWuecF+8rf5sc","tlshash":"d7b2e19db11a040f84ec672b0bebd443847e4980a1c8aa912b3dc35fb6547683faf752","first_seen":"2025-12-26T07:43:30.553968Z","last_seen":"2026-07-23T22:44:16.941432Z","times_seen":11,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/slide-zone.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/slide-zone.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 370\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 269\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zq%2Bsncx7kfV5eBvft3LQyaGRjbXTCOmq4O1FQyxMJ64GO%2FtS%2FsKq%2FSRCgyPUfAhL9oHVaz3k2jtDOvovhKuVKyo5z7IVZkJJEnNPlgn909Tb1NjjANyOjT1d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafcbe03483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"302d3645f49bebefe33faa337fa16743","sha1":"a0fe38d2ce57acbc95b1f4d3f7b5b5baafc91d6c","sha256":"38d59929272413395dda18835ae26c39de2cbf43a95a6778cfba10199e594dcf","sha512":"3d6c7ddb8212d06e0edc6f47940aff20bdae80aa6ee27fadfe38d59058534ee6f0fa74f479ff07c30eb084343bcc4e10a6dd2798b795c4ffc8c3da26aea0b052","ssdeep":"","tlshash":"c0312b05a4181d2c9af666389f59cd02e8fa08118e09d680fce8a05f5fb0e1562ddef9","first_seen":"2024-04-16T05:43:21Z","last_seen":"2026-07-25T15:40:05.715724Z","times_seen":38,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://anniversaryclaim.dpdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-proxyver: 1.47\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 03/15/2026 23:52:32\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a60a776210bcddfa04433fa9de75300f\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\ncf-ray: 9dda8fafa9d0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-08-15T15:42:07.230478Z","times_seen":308942,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":2,"dns":19,"connect":6,"send":0,"wait":63,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/bawah/1.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/bawah/1.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 16:28:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43679\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OP8PAfcL2GaiXm2oq0oM58qKYjxBe0jJqOf6OLtARbxKCyRokgQ48I2O1vScSLn2X%2Fq8S3mAR3Bn0O4ndmRauiT3GCJ8bQXiyXHx4S2JxjA%2Bo9N8GJafOiJC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb53483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"53a7a4f45f7081ee1661708b448c47b4","sha1":"7058b3b4e275a60e09150dbdb1081e89de2a10d8","sha256":"314d645a55cb761932e62c04341cd76b4f16e91a4388640605b842ce0521930f","sha512":"9b78b9fd0d536aa67fae6f3d399f67b6d9c67574b5927e983636496c1a555f20c6701fe9ddaa7e6045ec4369644cae1b0bae2124bd623d6b174e597b1faffb03","ssdeep":"768:TVt8bObtyzfWZ7JLo2zr3cUzP0IwZJh3cIfyzhhL33MHKdS10DvmjO087iXIK3:paCbeWZ7JZzrXpwZJ+/3xs107oaVK3","tlshash":"ed13f1358b56ae2b08c49f7c83b64b82613d70735e7df27e1c4d0e8a66642e806bf45d","first_seen":"2025-03-04T20:15:17.255963Z","last_seen":"2026-08-09T15:32:30.471982Z","times_seen":45,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/bawah//4.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/bawah//4.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 19:14:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16103\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSAeTB8daJVhfmqMZfVNENA6CPRvuhRE7q0k4nB25297Wh0Q5TnssdqRyWKGAtyYdjR6%2FVyKRZ9u%2Fcx2UjCxEhxOl8WgMmHs%2Bt3Z1Xa4NCJaqeJF6ZlodXsG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb73483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"0dd192b3d2b7ba67e10cbefc1671490a","sha1":"460d3deb22fe8f9ac8e2aea7fef490975300116e","sha256":"7bdd05fd6f7ad3b2cf46b6e0c9b2a996065e9a478e52274c7e99e11941867ae6","sha512":"75db380594d79f28733cd0474f5efd8b205d9d1efd64c10ec663f57cfef6717b712dadac0770064c37cc16e0e016e803fa080789f5ea62cb9b237565acf6b150","ssdeep":"384:qhowNW50BLNAqOKO3DIZTZajYt9ZFJPWX0Lc+:qmKiqOrkZ8chviU","tlshash":"6e72e12ccee3c605be94894e015521ac8072c888cf42bf3e443a656e7b8f0567fa719b","first_seen":"2025-02-11T15:42:52.593348Z","last_seen":"2026-07-17T19:20:40.734429Z","times_seen":42,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/2/5.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/2/5.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 12:42:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 185144\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDDHM7xPLLWrNQZkWoZuNSa2FsvnD8TV8tM7nuRUel4B6ikyK39aV4dVa1gJN97L%2Fe4NOhV8GwyfoKr2FSakFO%2Fq%2FI6YOccb0Gp0XmQEVVpVBNpEWQc5fX1s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb33483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":185144,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"de94a14c12f31e6b7811eaa1ab85b14c","sha1":"3c54e053f0ec8e5a59241beb4d132ef2f4fa1378","sha256":"5af8988879a03e0ed13d0cd15905a9a717a8bfbea4b3aead4e347361e04b0d3f","sha512":"76b71a74a7e59bd7f628410654a0f573bd713abfc406bee62d19c2da6c749ec195b493a474a4c99d044dae5635e187b87002f916dc40c6be7e8924fc2b7bbc43","ssdeep":"3072:OPa6PrkOXSNsn0cMG4nzfUXetV3JWinaej7Mex/I+uVikdePzR34ojHX5b3uvuJ:Oy6PrJN0cMduiVZfnaejXx/I+SiFNtHF","tlshash":"6a0412ced90f8777c5ad1e31aaa4681c2168b8da8e779178133d76f1565d73b0887380","first_seen":"2026-03-14T04:58:49.859982Z","last_seen":"2026-03-17T08:18:00.504449Z","times_seen":3,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/2/6.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/2/6.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 12:45:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 74914\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8F7ReMlG9IjvaV%2FL%2Bp%2BC5WQAQdCKLueJxxfoe3VN1K60e%2FTcGCBfITbdk6c66%2BAb6Fkco9r884YsY77BtMfs4hFVSCwI3Q5uo3vC3FA5EaTVoC6jBqvBZjo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb43483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":74914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"0d00c40d56e593c2c071ccad9585db9c","sha1":"6374d3d4d36ec86b4b9daebd8f773de368dc5348","sha256":"35416fc6db661d562aafa1e8a99d9d26bdb27affcc72148cab69f99b58fcc88b","sha512":"341a15b1b01adbd2b07a2865fce388022f976a5e2e7d1cb0a9af2d3b7ce1815811d1df7c3ca2d72692ef92d281d97f0f5273cc3294619e0ab6e588f6137a0894","ssdeep":"1536:Ot09TjjoMrKDgvzzi+R0Wo4Ar9j/k+ZEhnvKne8lnY0WH6R:OteTjjtrKsiKoLr9bEAnnVPka","tlshash":"e47302bebc06d1ccde8aa1b7b457080e4774bc77b855502662103076e2fa236533bdb9","first_seen":"2026-03-14T04:58:49.829832Z","last_seen":"2026-03-17T08:18:00.505767Z","times_seen":3,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/bg-item.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/bg-item.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/css-zone/lenzz.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:23:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16196\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QAH9vvf9PVjtXy%2FH75o9KDXb9UWwaYfzB76Pxgt%2FD7A2Kbj4glYAeyfRwdG59k6N%2FGfEF7jsSqsppbnvYJy0gZ12nBPG2kr5rToGGP4gtHoujpKlnAmSPTpg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb67ccf3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16196,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1632x1632, components 3","md5":"2205c53ac628186449d92d682c4d1342","sha1":"9c195c6d26f1701be1aefd70c1beee253941fb40","sha256":"39aad5845a177d9d18f42eac4bb58209812d0fee0468055625db9571a5f0dfbb","sha512":"1eb3db7c6a23726208eefed532497ffc1a806a1e6c1f7bb0eab64c727ab26c59a8518b9f0ace5a4e7658d0e0d388599204dd4c649be1db1e16684135b82d6734","ssdeep":"384:UGTE5MroX6Jm/KFfmoJUP8GDjmHwP6Dt4KVQ:Un5yoX2AWJUjZSDtE","tlshash":"fa72bf373b8601cbc5949b798e6b17b77f729582e72788c9140c08e237932b6bdc9791","first_seen":"2024-04-05T07:59:37Z","last_seen":"2026-07-22T09:48:27.385343Z","times_seen":73,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/6.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/6.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:19:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28530\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HhRZ74IPrhC6RsLU4GLer2Qjn2pH5M0T3MFd6mzcwBcp2ZSMaWrZDdfFeg6WQutpZI7Nz9273M97DcUuT%2B%2BY8SJ2ob5CewYRuJ4gl2xVLg4Ne%2F60hVIcQueW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5ba53483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"e8dc4000d56a92ab9c9252b39ce36b7e","sha1":"bfd9117f7054d3fa8e9ede976c7183b1558c3068","sha256":"ae1876cf5840582bd66a52ead708dca7303635a380c563136cd6e9d9dac0820d","sha512":"2a612abd33ecf6aaad03d6d9631ab248d0e027f824762ba88f5af276975820632b95b9f395c2f6af5f364dd1edf986b997e9b56d1e7a92116577d55a279c2e7d","ssdeep":"768:84ceEGey4ScvFaR9YAF8RGuLkoEyeNSgntrqxQVR6501s3:84HEgLR+ZINz6z3","tlshash":"8dd2e11ce605468df900c57037d91672c29aceb7a7faa1165e8472196373c7abccd263","first_seen":"2024-04-16T05:43:22Z","last_seen":"2026-07-16T12:51:59.619432Z","times_seen":17,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/1/2.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/1/2.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Dec 2025 15:55:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43064\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FKm%2BLRsZjBsRz8AoLwrHh5EvLSHNtzj3fpdsBkxIf68ZVYfE58oQ8tEOZmMiB2Rxyqvyrw3O7vr0aseyzK7OIhRr4pP%2BLiT0%2Bfx973mwDA2NSdf18YygwOV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b9c3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"274e956543530f22ac9ad2503a8e1175","sha1":"e861c7e9c65bf9a5f85faab3af47daffd13fd59c","sha256":"7633c3e19d60957ea4b00f74d3b955138dd2f09c5d8155530935685dc734b364","sha512":"2a0a760d20fc3e9f03d6fb760fa4c0ac2df41d44b5806fd6c1c999026ad625e703b8e846fd1281e1adc7ecf4f507661e4c63097705f0bb817914be47ba843c1b","ssdeep":"768:uOSioCXsryfJYyOVAgLc8DhETH5K28WLVokQxLS+Hah9E5d9uf:uOSi5XsryfJfgwDHsjWpokq7eE5zuf","tlshash":"311301ded6f00b78e70a983e815de58a78b60bc759ee33b609f989d5531d608f092234","first_seen":"2026-03-14T04:58:49.819557Z","last_seen":"2026-04-02T03:29:17.47806Z","times_seen":4,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://anniversaryclaim.dpdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 38384\r\ncf-ray: 9dda8fb6a9bb1ecb-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03ed9-95f0\"\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 5080\r\nexpires: Sun, 07 Mar 2027 08:17:28 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=90UChNuVWgZVkwpx9QA4FH8qrlGUBXy4rxP1oNwrW35%2BFsmb6TTwsu2ZGgEg6ogGxgIhNzykr6%2FhrkeYdU9uwHwQs73ukUBHTWOqbOWEEqE8vRbyMRJ%2BOJxCh9R1ZSq9UraDn4aw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38384,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 38384, version 1.0","md5":"a4d31128b633bc0b1cc1f18a34fb3851","sha1":"6ee4c79372c3fd679706306ede47e4b03cf53d60","sha256":"e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c","sha512":"c129c0cb100feea6d00b739d1cde2a7362b2f45f38da3e4c949193f40e59abc9c387ada4bb230b00fd62e137409e18def7c1636e1cd463f8070106e8b7e21d48","ssdeep":"768:FQ+usUhhv0N8qSRCjPCyloYRNcIsTh38i8/3V93ut0f:FQlsUhtYLBl/nGpUvI0f","tlshash":"db03f163b5a6f248eb812d7523b052ae52cc22434f93e19df585d72cefc615e025f722","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-08-15T05:39:22.987334Z","times_seen":6219,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":25,"dns":1,"connect":0,"send":0,"wait":18,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fb91d4c3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25693,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T15:46:12.417024Z","times_seen":17904469,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/1/card.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/1/card.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 05:51:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 115921\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XupzqtFeQoAPfmzaVxzihT8yAdaZQLZTjzXokVpZ0BiDz%2BDmL5W3wMIaAWv%2B8f4w8z7yX1Op4HUTV1D6YBViAq4Pdl0Kg0DFyCUa9yPonnqIWyrUe0db2%2FUM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b973483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":115921,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"5e8e5c9b78a510419aec55579bc5c9c6","sha1":"039d364dc9b417066c8339b5e66e1f4cd045b9e4","sha256":"0188010a17dcbfde95ac4167bf0dfd6e9a45f3862502e9b8dc00b75d88c566a4","sha512":"c4112163f1248b4cbf5fa065e7b78886c323fb44f35d146f19c91602311858271bdfe901e576b5e70b1c7133fcbe0550b5cc64c9ae54686b5fccc363e4216c88","ssdeep":"1536:jvQLjQNa3iZ+HW2bMVhWABLWH5LAAv3+tOqm98ZwUKBI/1ppnreaBqwqYbUgw0zC:ELk8eDWXH3+0r9vBkDnrjQwRK0zhpm","tlshash":"85b312efe8ceae35ef38167418eb450b49b36dc68072dbcc661428b1dffd905a819191","first_seen":"2026-01-21T05:31:07.414279Z","last_seen":"2026-03-17T08:18:00.515408Z","times_seen":7,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/1/4.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/1/4.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Dec 2025 15:55:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 161981\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FOSDVKdDKjAZAV4QHy2VElmXrywxLBevOuC%2B0yAf%2FD2FT6aMXmAOc1yy5tJISRQSxs2en4fCMOk%2FG85JGumHMhUjxWLovItdGbQKxEQyIZjlFYvauL4%2Bjey\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5ba23483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"6b105413c4791b4aece2ce202f40f79e","sha1":"fbdf60646df85463caa64d0cfe084b7b36af7ff9","sha256":"1b1fd56d3edec6b8d33a81519c1fdfe6839a0e8a5f158249a451d95d0ba6fda0","sha512":"a84afcf57e12472d8ed75c58d64c97a1a83b29f701a979525f5ec97c355d0863fc88482b02ede924a534fdf1d9f492df497716afa300f2c328e9f9fe246c3cd9","ssdeep":"3072:CiN3uRyrqibaAXrR+GPUTYrKl4iQIgCtBcPZrZI7Z0Yrmo3YDu9hnYyY:CiN3AYaOrR+trqIb+PZry7Z0Yrmo7hnU","tlshash":"57f322e2e3e1aff528887136fc5167fb69a8443b480b4b35e588a07b55cd4b94b32d03","first_seen":"2026-03-14T04:58:49.866337Z","last_seen":"2026-04-02T03:29:17.431657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/logo.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:24:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 116914\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DvJxcNKp%2FU4VbFMVnxnFKbzRGy8%2BNIRoIEETc3NZnl8kYgsh7Zv01sErxtFcbJKzf2e2EUUCjNpKdmynB3ykmNzxHdswZ1hHMZsUEi8pQdA2rHeOf6WC9iBp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafabd03483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":116914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 282, 8-bit/color RGBA, non-interlaced","md5":"28830ea121d73fae13ec14755488f67e","sha1":"efdb30615f6769e21c52388a13de1d3a4e4b561d","sha256":"5809580051286a413883facd055acb59730c31e87a405c6beca5d5ea51260f62","sha512":"38340e77b103c3bc7262d4bbb2d9d34921efaa327f8e053cb5ed768f1464ba9568f926ac0ccc65c490f8676b969e72ebde04f4caa0932ca912369a31b9e34407","ssdeep":"3072:p3DKPT1CzNokP3iRwDuX5W3gczpn1WtNcGRU7:FeCzNoCy2uJWj1QCG67","tlshash":"90b312d74a2bc066efaf62bc74605bd6f25d01b08114e273176adf84e1fbd3965803a2","first_seen":"2025-07-27T06:58:26.712918Z","last_seen":"2026-08-10T19:30:56.538826Z","times_seen":74,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/button.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/button.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/css-zone/shop.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:23:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 397\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XWI4RK1ysPjI0aRPirMAUgdKt%2F6F9PgrmIvlrI5LYO0OmnfBJJmzr78BTzUBwSjbHlGOGkdjFDhInLt9mpAirSpBc1y84qAV%2FPP%2BXuDRq7Fo94%2F33cb8C49A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb66ccc3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":397,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 158, 4-bit colormap, non-interlaced","md5":"66049c2321d909dc24d8706028a99bdb","sha1":"e54f2256a75984562250910b07f57ef71c781d01","sha256":"347688b4fd60c488e0daaa4e422174e9f2ab365caa18cb29426b073f2ab3e6c0","sha512":"471ec16259887193092dc11cb9c72f03ba7338bbc4648e52effb2ebae0468ed756fbda4febe3035993a3c56fb2b6c0e1eb1d12e63fce84086f46484cfe34a405","ssdeep":"","tlshash":"96e0c0e1d1124ab9cc852b7e222e7c18828b830c954145a79a2b94781d6514d91a92c2","first_seen":"2024-01-04T04:19:51Z","last_seen":"2026-07-25T15:40:05.744588Z","times_seen":23,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/slidernotif.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/slidernotif.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLEqOV3thleHTS8zkvhgqj%2BRmzL53kVbHxD194mBDfZPNr8vdc9lBzHkK%2BHTeaXoDR5UXZDBd0PLYdUi1QcHAFqNCT%2F5yX2znlD5bS6G9IWuX0fwRS%2BLhJzP\"}]}\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fb7bd0a3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-15T15:46:34.245649Z","times_seen":149694,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/lenzz.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/lenzz.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Sep 2025 17:18:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 945\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=txvV8345kfExGAAmCTdySbiA8axYQEk4fiGkZf8YeK0YFZfKEIc0b8AUFdDmhWP50T%2FJniU7y9UCIFQnj%2BOKkXcoRZEbZlo1wij3oYs5c9KyelagQ%2Bp2YWiM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf1b843483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4025,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"6c449674e6d59c3f62eb8732608e0f98","sha1":"c8520c3573d39d205eaf169fd21519b394f73ef4","sha256":"440d56a98cdf9f70a3e75916e05818d405ee4e8767d2908821a920a12618e189","sha512":"668904b5ce9a10d3c7774aab42ed7cbe8e6faf836f8d0cdc7e59eecb92d6c349f37d2a16d48692dbbb1f0a89593a93ab82e9134df4606289018cac37111014b8","ssdeep":"","tlshash":"3a81e354d65d948df205a4f9fbb22b69ef1804a2c74f82f9f0b07508d9c56142e723c9","first_seen":"2025-12-26T07:43:30.547341Z","last_seen":"2026-07-16T12:51:59.625597Z","times_seen":5,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/2/1.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/2/1.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 12:36:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94525\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CzDgSSn7iCrTujsSlyDXKSeH56E6VNZ13vLl0p%2FEwHSoRdUY8LOeyEPuWjATCczDMkv7%2FnYjvun7mY%2FAKlk2D5H8p460mFcSoADRirngp4b0l1A%2BvHzAcIE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bae3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":94525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"455f3d537b14277666e65fffc726118c","sha1":"19a418dda7ce1bc71777bc4fbdae5f30bbc22bfe","sha256":"4d8e86a5714f4f373fc40f4281af95f03b9de1b0d120a015827919d1837b4d9d","sha512":"cf2fb3764172441b0c1e7401943330c9ff8669aabcf20130c0d38cf20c14e181616dd62ec25fed564671c6af957236aaadd397733a0fa29834c15c158482ab86","ssdeep":"1536:noMYcxurbFvzPTvinOP208fTVzVe61bRFjf9iyqnOL4sPerku8pKrRJiKlhqWvWF:QcxWF7P7inOu08LrB5L4sPQkjKrvRQsu","tlshash":"7a9302899d643e66ec56b2b0414bb1830877ae0b825734cf315d359a21d0fd94bdbf4e","first_seen":"2026-03-14T04:58:49.817704Z","last_seen":"2026-03-17T08:18:00.523246Z","times_seen":3,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/2/31.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/2/31.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 12:39:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 127887\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNMTs6vGqcq%2B0XXWp%2B%2BKMVxmyZ2adzscPqQi07tfjhhH77o94C5Ja6kYyGJysIgLHhXcSyyNDtfBtxSB4mJ%2B%2BEsZh7MLOkgQBQlcT%2F9b6X1WGYvdbgQplrzF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb03483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":127887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1080, 8-bit colormap, non-interlaced","md5":"1a0f021808f74c830e9294bf9ce50140","sha1":"dfc53cf30d5ecee8afa3fa7f49903024cac54377","sha256":"a53ab15bb076c68975cf2346edcbe24172892a46a60e4a54cb9dce206cc30342","sha512":"2752a8f0ac4cc064c62e6495a949431a538cb867d12be8c915c1b9148c8401a1b101991aa99453a989a4456c678d7de408d91eb0f9ba26570b7a1de1a8bd02da","ssdeep":"3072:bqXcBhVIELSn532LG7raUkwS60GXClUipUHjCd4:WsBIELM5GL0eRGX1b","tlshash":"25c312ccbdfbe24efa5f81bc84f6e30d672b2ab791da410e47626ca904091e3611131d","first_seen":"2026-03-14T04:58:49.825698Z","last_seen":"2026-03-17T08:18:00.523876Z","times_seen":3,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/2/4.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/2/4.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 12:40:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70337\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtLQftHH6FI%2FITEZYbe9uKR4OZrgX3KfHolG30ccWK9AgkRo1ApheHNBnZe9Yt0gt5JoOEW12FxsgbtYjOKT2DChnr0p4NoVLWm6ijq9AHVeRzwMgAyN92Cq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb13483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":70337,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"160534eb42bd28971f70c56b2fc14c4b","sha1":"da0ae4a7245886329bd7b4c53ee66780e0b0dc11","sha256":"a12f3f98d3e155cc84745c7ded25f552b3214b82c4e9b0ed0783dbe1b33551f7","sha512":"476c5afcef723a04e5a450cdb840f57a0d1b4767080deb89dcf3f171745e5d4ee654078d3778953708755acbcea4951da06417478902ce2daf040f77c7f87c5d","ssdeep":"1536:5Fx15eU9cDVsd+l0z/KJUlTgDkxsdkO4T9Cagqlvnf79qdW:5v1sGNCHECCB/","tlshash":"4263029906553819c44c31bf73b26c8b47a72186f6d2d52b4609acc96c37e4b4dcdf6c","first_seen":"2026-02-24T02:31:27.390398Z","last_seen":"2026-03-17T08:18:00.524537Z","times_seen":4,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/alert.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/alert.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:17:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 884\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xkh37mWbdH0IMMSzRe5k6RAbIZLQlyXw8KIc%2BHLIxjltevuotHSNH9evdLk0H3wKQdrClwGTtEk2Q6ypSI3ly7Jn8PIBwwRi53KolsLsAJ%2Bl4Kfz70J79cqx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bc63483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit colormap, non-interlaced","md5":"91401cde482e650953a39b2d3657a564","sha1":"e67b51d82e2ea3b8dc49ae2dbbc35b2fd380b7d2","sha256":"c239b86b0c64c09b91a35492861c717b7134e33b5e7ebb856adf9711e8856f8c","sha512":"c9a91567ac0fdfacbd9ca8ab1d0969643583e696084cd972c373c3c211450aeb161ea4db88e7bd077fd984c468c46bc660c379b09a75cc2de479e99be6f7a674","ssdeep":"","tlshash":"b81181860fc0a929df25abbe012a80fe19418c3dbe1294350a9019ab5e0d2130f6484c","first_seen":"2023-12-07T16:49:18Z","last_seen":"2026-08-06T17:22:28.707393Z","times_seen":144,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/lazcode.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/lazcode.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2047\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 267\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=71HoAm8ynngLXx8fvwkkDmOA8irz%2FuSk7%2FByzhwrbz0AANvKnc1StJtJWPUNyi%2FBNKiN0D10C0bOxEq5wdfadBjxJdJeOZ5jWCDH%2FugIRac%2FwLjnRUMupmH7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafbbdb3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15256,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a79f8a0ffa1374253d7bda820ed25aa0","sha1":"4044e8f5f29daf7a31ab23058ef4ca8fb16b623a","sha256":"cb97ee7e9120b9d8ca8e403068ef9298174382509b3f305cd8881c950eb41546","sha512":"96ff5064df8cf68acebdab630e8891a703671895686ed630156cf976e355ddd0aff997ef480c8ba36a46e6bfbb439af4b04e79fc8815fb1c3ab10701b81064a6","ssdeep":"384:L4iNHi5JYF3gxqHdPsYbYwTHNeIdkxPXfsTHdpmm+fVI:LVNCdI","tlshash":"b362c148b29a1d452e33a4b5117b10043bac981b1906ce0cf86c69dc6f65f7eee76a4e","first_seen":"2025-07-27T06:58:26.741756Z","last_seen":"2026-07-25T15:40:05.717937Z","times_seen":12,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/zero-zone.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/zero-zone.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Sep 2025 17:47:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1002\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90Dt5qIH9fVILwiOMm0cA%2B5F4h49i447NyTpgfaJOU9bVHO1kg8b1MPqApVDs5m8OUXvH%2BSteb7EfzQxDf9A0TtbPrrrnkXg88W8G4zkGoCWLIReGxhK1r5%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8fb50ca13483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5664,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"43e0bc35344d7daa2849edd506e7b9a1","sha1":"f9280ba7d2f22162f32eb28c6acd1f2fe5be4257","sha256":"6e90aea17c31494349058efd7b54f8ac5c3ab5a5cf93dd1a034413e8f242da16","sha512":"b017d337a2e696c20440b264f616fc9deae47ab51566aeea16a43cdd3c76449fa72c6062a10783a69271a72b15776eba5c86e20610ccb7f7c30fb68cefa88f4d","ssdeep":"96:17IlCPPznC8M9IUnFFsgCBVwZEjRBB0RvBMjRBB5RvBQZ9ejRBBzRvB1jRBBCRvs:10CPPrC8MmUFFspfB0RB4fB5RBwmfBz9","tlshash":"0ac145b4f865208eb333ff24b7f06e942c4ca177aa5f4e5ef558796dc2854e82c62190","first_seen":"2025-12-26T07:43:30.466014Z","last_seen":"2026-07-16T12:51:59.628562Z","times_seen":5,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.4.2/css/all.css","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.64.147.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /releases/v6.4.2/css/all.css HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://anniversaryclaim.dpdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\ncontent-type: text/plain\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9dda8fafdd248deb-OSL\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"b280f989a0da0e8260a2087d68882738","sha1":"00e82f44a5ea302878ec1ecef4d5d139833b63fd","sha256":"9bef8efa1e386da72f16fdaf2b5e34315ab4886fabf9c9319f54b25cc89d8b72","sha512":"daa3a26ca6cc57c86ec1d87eb17952b8b9932ad2fd597890fa85baac0ed2f4d0e8385873c1fc90e079ddfc7cd064933061faf4c3024023f57918575b9a948232","ssdeep":"","tlshash":"d1c0806f837551a04c1995611b0154b57f1134dc79609f4d7033055f1345d856d3da64","first_seen":"2026-03-14T04:58:49.851515Z","last_seen":"2026-08-13T20:45:49.671639Z","times_seen":265,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":21,"dns":72,"connect":1,"send":0,"wait":20,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/uc.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/uc.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 12:24:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10893\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2G1kdyg33dGAHtO2j07PAr52oagNDlUJjPDkcJkRgkrykpT5v1Z0721o36neXTM90S%2F0g25GHh%2FEUBO11F6t%2F%2BmQG3Y3asSUZKZhlyGehkznuY9qmtRxAQQK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b993483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"bc30c95b931dd2f7f2121d95c4d3b39d","sha1":"7db7521aa4d3045a9dba019fc1bcea8c5edcf569","sha256":"e44ee2766003a814afcf630316894f783e253d754056fb17b5ce32dd733ec875","sha512":"633b366ac3a11cee0a532913786e32173819b475c60106716009b2fcc5a4419448d432d68d77ffdbe9f8c2cc56676ba7565ea28ee6f2c7d9423c9b5365ff8b51","ssdeep":"192:6oYnzIGvdVV7KhOBODn0GO2NdDKxoks5cEbIdZ+DKavMybTTxNh2r:nQIGvVKhD0GQ+k40Gu2fZ2r","tlshash":"d622af810641166f5ad3325b5e1f14f8efed9a9a017a91cb14c3d1cfaf9038b81b2741","first_seen":"2023-06-09T21:40:39Z","last_seen":"2026-07-23T22:44:16.914837Z","times_seen":151,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/2/2.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/2/2.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 09 Dec 2025 12:37:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43267\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1PsNkCrVlkw%2FpybWq48H7mBsnBGTG1Q%2B8JTZpGY20QmvAb4CkyPzOPqalgrPjv4Zx4YuUKZ5f6ITCXVvRD8mmUX%2FZlJNXbx2Y2uqNzcT%2BMaAS5XHs7uNBTML\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb23483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":43267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"e2238ff7534b7599e6b9996d1e93aa7f","sha1":"387a52faa6c526dfc6ecb2576fd4b69b7603367f","sha256":"d9e3f9f7d69d4d21d0e112ac59d58a3e0a45fc2d4b699ebb6f4983c6ff06bbe2","sha512":"73d52a59269473836a55d2fa181243d7a79e37c133adbb97936501a57a13598e769c9a594de09111432b637b04e976c44e1a1c05cc7142a60197da955565b452","ssdeep":"768:l2pRFg29HjnOL7jLHIgjaYPMBGlyJcnyxIowreiHHkV98Vak2PcZaE:lIFgoOjLJuYP0GkJcyxIowreiHHM98ZD","tlshash":"a113f104107c0d63719e00affb53ff5526d69a6004e61dbe299baf2edf6722a720b407","first_seen":"2026-01-20T12:19:48.04258Z","last_seen":"2026-07-22T09:48:01.306004Z","times_seen":13,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/bawah/6.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/bawah/6.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 19:14:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25162\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPrP4zA6cFrlBLilEFkkenPu7tS5OeQhhiGg%2FnqcZ8Yv3%2B31xvlw7T09uGZIXTenVbGKInYH46mrGV9tGFg5BOGy%2B7y4AvpcRMzgLoNWtOffqYPO%2F1oaGGPx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb93483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit colormap, non-interlaced","md5":"a0e11a7d8eea7811f94578b389e327ff","sha1":"4bfcfe7df3495b2016ac023804f4072c90388afb","sha256":"fa96e5a6b527a55460b2855769eaad1cd9971fdccc74a7d0272309a4ba91a2fc","sha512":"f60e03ff640c17968e07122acd8f1f7ae3f6110671d4ca97acce500a62479c18fca9a4948bf35c32bb027e34f3c8baa53da33e62d84b4014abd618533d45f02c","ssdeep":"384:804Kfqa0jhHoTXn7vWeeAocay5rPERpx5tIg723IA2auivS2bfjDlAK/y:804la0jBorLWyrktIX3JZvSGl/y","tlshash":"3fb2e021dcfb9052cc6f28f4cc169ad706b39c5204264a73dae93b81dc5515fe50be9b","first_seen":"2024-04-16T05:43:22Z","last_seen":"2026-07-25T15:40:05.7496Z","times_seen":41,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/fonts/laza.woff2","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /fonts/laza.woff2 HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:28 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 16 Dec 2023 21:02:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22220\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAYaCOFrcizEldK8gTSCs8lj7zBfu%2FxHVsejU3ZgcrEgsltV%2Fza4vdyAwUF6eZIFV3Hb7vJWJxymvks3oxEOZEjy2IMK07y1WoYqVMLRzI%2FFPTUBRQc0srQk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb95d583483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22220, version 1.0","md5":"345579e8566a3dd6dc9feb5362fbe7e1","sha1":"df075dd0c26e72fd7df19948f07904c1eaa72ded","sha256":"1d0dfcc32b3be2bf3b3dbc371e9b7c5ce205f4bc6f7c8ce0226256cc7064c3e4","sha512":"948b48b697dc39d4c921ef8765053cb414edd47d12c69856191c5e28a580a1ebdb6020d2b8d5639d7ea89fa24fbdd73c16bc5e461b86f644420fffd3fe76b397","ssdeep":"384:1dPjUYc1ZQrSCantuGbZZHmv8m7Uh8OIXXS6pL/AzxeDxw+wBhQPyX/g2g8rYFGk:fJ0qrSCasGZZH9C+lIXppzAz0SLnPgCG","tlshash":"82a2d1a9a2a202d4dafe4405bde8f8b35cc2b43adfc687394a74f54dcc845d18534d5b","first_seen":"2023-05-01T09:29:40Z","last_seen":"2026-08-10T19:30:56.57815Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/sender.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/sender.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YRmSpxZDLGgohQhTxQPM6%2FyoRv%2F0Kpze3RzOOP6CY6F4J7pLs711G4QIk7AvF6KOxfYkHWJziObZrFwOXmLYxIzwr8Vg1Rk0cEqsmLEBKwVChpAIkdfnTfV\"}]}\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafcbdf3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-15T15:46:34.245649Z","times_seen":149694,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/fonts/DINMITTELSCHRIFTSTD.woff","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /fonts/DINMITTELSCHRIFTSTD.woff HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:28 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 15 Feb 2024 09:53:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24996\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ApzgyeLuOAZpYB%2F1v3qqSsOEy08%2BmufnDatcM0%2BU2yJ5kwsMS5bYhUiscbDXgo1HDeotDs%2FFAkkX%2FGsSbAKGH1MilLWVljUGsHS%2FU%2F6qdSGxg9%2FHxusmQEZc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb68cd43483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":24996,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24996, version 1.40","md5":"2018d35e708e07985693c6bc12a59861","sha1":"12faf69d54217b30d4458fffad689e758b8a91c6","sha256":"c2293fa86d99d0f1f06b2ac7f85ae0517e4a3bacfd9946de7b012f04aa2d831c","sha512":"5f80cb586d6a9c04f1f3e550283694d99fdb98bd37298dcddf94b1add4da93dfa315d123cf6527fd051a012fd38c0f9f642f707ce9f914c5a7075747be7fc42d","ssdeep":"384:HsmgD0cC1mO9aJlKA9BsPsjL+baPkl5kaa4t6+ECn9CWDBZ1hZXjhY4ev+Vmn:MmLmHJlxuPl/FT1DXjhE8mn","tlshash":"6db2e16940090d26c0722a71d3b293d8774053aee2d60eeb86790d6eddecd933c79eb5","first_seen":"2023-04-10T08:44:25Z","last_seen":"2026-08-10T19:30:56.49529Z","times_seen":552,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/animate.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/animate.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4458\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7sb1U%2Fm%2F499n%2B0QP2AL6F5gor0QfI1Byo5knwvwb24MhWzu6%2FIRr6st0or02ecigSJGkjmTyGqOws66uWjgjSCdIKfqkvWd9oNNE1vzdpMfwbUUw%2BpnpS5u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf1b823483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77906,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8eae1a9cfafdc593321d4d59ec4905ea","sha1":"232f5f3f4c3a0a56823e0e933f9c7fec3aa9cbcc","sha256":"e89c81987c5cbc157097eaa6657d6a594abf030cc89bb63f0d2154d8383e9fab","sha512":"d682093cb96420c3c2c9ee1e172a616c86b4e60db47a1fc3790c73ff9300d2ecbe740099e2d5ce0f9e3024019324ece3dec7b6ead865d519c12d8daae9cdccba","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLceS:oNuKuWg9unuLuJu9KIZQMcLceS","tlshash":"28732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-08-14T10:01:48.566404Z","times_seen":2777,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/uc/4.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/uc/4.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 07:55:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27888\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7vxh85l6gAG0Apufx2TFESzXhpEvBJfw7Ag7Abz7Z%2FmcOiXHV41Wu7ecXWYqyc7ZsbonqJhTkpmpNk%2Fy8oBkiHWZdiPlFasv%2BHRk1GeIQnviwOW0hHh1vNf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bbe3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27888,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"5a6a7af6989e13df45953ebeaf6158c8","sha1":"76e7e226d24ca5573a2330d0f916cbd25d5b3b92","sha256":"6ef76ac88d524d2d049afc44c022553b93797ac923c12be31478496b5d442e18","sha512":"28f87d42d54359a1a1617b13735ef1bd52496b85ff03a705417ef4562da9fef73563bad241e1cf00dc1fe0ae674b817d48b230acf0dae6fdc30c6e84d369c960","ssdeep":"768:cpFlJrZtDEJOXRNO+Y8neCNyqZMYHjoj8c+UkEyE6hV:yx/EJOXRNn5THcj86kjE6hV","tlshash":"4fc2e157a437cd0307842cf87e8bde4d3d1bd9fa61a8fc2c6d26cd0e96c820980b490a","first_seen":"2025-12-26T07:43:30.477879Z","last_seen":"2026-07-23T22:44:16.945928Z","times_seen":21,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/guide/e4eb1c730c28901ed581443a28f421d3.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/guide/e4eb1c730c28901ed581443a28f421d3.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:16:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15155\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Klln3TWeNq3KbZSZoT%2BxXkapWgoejLHQSRmPBO%2FC8j3DbTuQPe4qlf%2B5oV3m4PXDeIO8m%2B2b5oXr626LZyPxjMCKbGOF7Tm5ORdQkwbbyjrl0mpl8HulY%2FI4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafabd53483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15155,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x200, components 3","md5":"1d8f07e923089a0cad5350c38051cef6","sha1":"4c71589596032dee874dbf8b6ab2f78e5da1b760","sha256":"7a60f6c5091b0ea536ddef3575bdcd839666997fc7283986f70b4192a4c1e27b","sha512":"bcd51a646105c9f5b575f07c99cea2a791476fcb9ed34d872bb02f2b09b07530303ab31d21ffb10b7c7e0d730bca3ecc11f67916d41f022d65aaeb7f408b52b7","ssdeep":"384:EsmYD9wJZYE7l9+nbDK/zOHddHMpWfM2a2QRm:7DD9XLC/z+dHV02a2z","tlshash":"a762d06aab39d517f586033bc086b11c2bddd22a82c65e8bbe55dc086e4d3ddf03609d","first_seen":"2025-06-29T09:38:25.03329Z","last_seen":"2026-08-10T19:30:56.539597Z","times_seen":69,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/international-telephone-input.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/international-telephone-input.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 55419\r\ndate: Tue, 17 Mar 2026 08:17:26 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 271\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp4a6sLboFk%2B8BDF9cRBFeoYHcMF0r4vhqVMzzqcD6%2B8TaGGCKzJOd%2B7Kfh6GQWKmPcYE%2BSbiP90spfVzI0gXKMc30v%2BSJoNUm6dktsjQWGhD7dxiACpeABT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafbbd93483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":462811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1591)","md5":"5674ef5a95b8f48ba0a8405d056ba0ce","sha1":"9991445667304928434eb128a38ab05902c38391","sha256":"595f1377e816f8f8f50b3cc558c4cf3f4a83a20ac45675b3e558b6aed1d0d42a","sha512":"5a3a0916c466dab4209820c2270e23da544432c26af5d6c6baaea7ec1b5baac0cebbb764a1afb48aea2fe55d71ac9b32f1141e78d86ba6f4655d3c67cb7f60c6","ssdeep":"3072:CsJjxDkcrFNjeNkWGlXQlXaDiNQOdrZXCiu:C8xAcvyOxlXQlXuPFiu","tlshash":"5aa4f092d6216b16f750b63841a67d89298c59db8cbd7d8876ed9b8c0f2c0be4f7c10c","first_seen":"2023-10-14T05:17:14Z","last_seen":"2026-08-10T19:30:56.521328Z","times_seen":548,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/xgoogle.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/xgoogle.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 924\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 267\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nFYRRAfqD1nuRgPlblXbSEHwyG1SSJWAqAC8ORCV9GYzV9zqHDxbKkDqFCcHh%2FI5v%2BepBItAIdeTqGO8pwp%2FzV5i%2BoGIrIfoG5Hj%2BHRPEkO3S263uUU0tQb%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafcbe63483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5992,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bd8c6ee378a324898a89f79670d5c27d","sha1":"8236d6bbceae16da222b08ddbab82bcba33265d0","sha256":"7f82723c81221bd72b81a3426cdc2c64e4c4db0319e412c6be92e55aceec6304","sha512":"e1fe04643cfed9b1fa74fff2008d1677267b7b34b7ddf0267c5dc317ff9fa8f8a13f389e9325a1f84d65d104a367a422b9c206a70865635e36d36ed309badbb4","ssdeep":"96:biv6Ye48stLy4LjLFLlJX4MAP11lOZL6xgSIIBKut8LYLWLsLfBPS5YgP65t9h5J:mdZ8ste4vJGPicCwqnW","tlshash":"a6c12a0ab1291e9f9972d67621f64404bf7c182b45418f0cf9ac18c42fb1e49bab7dde","first_seen":"2025-07-27T06:58:26.661388Z","last_seen":"2026-07-25T15:40:05.727123Z","times_seen":12,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/Twitter-Hide-Password.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/Twitter-Hide-Password.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:17:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5125\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXq5CVFxaBG9eIDKQ0Qz9pJAFIHvTJ0Ts6orv8jTTLr22fDiKYy%2BuZ8YfwpEb8MOoSjHlL7K4zk%2FG3EajA6Nz7MAuKeluLqcE3oUPxzQ2xRTYepH8lbIdhQR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bc53483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 4-bit colormap, non-interlaced","md5":"1f17a0705cd18fed6993e14157d1cb18","sha1":"c929a6c0e66662e643ff156a215c0c5f4bf53e7d","sha256":"ca65585bd4d3e7426a6ff77410a75b2055a1e1578577d363d8241e15c42d4ab2","sha512":"2ee3d603ddb8bd7e0f1a8147addba58f44336b6ba847c4500eb0c8afa0c7f82ee84212bd2ea128df1ba6a63a9d71056d9499a2431201ee2b847fd1b7eaefdb7c","ssdeep":"96:C5EF5qmVskL5FhQs0tjB3lH0rB7UZZMMpoekc2kyVDDulijjwRcbKN:C5YZVRLhMplH06HGc21VDDulrcbKN","tlshash":"5bb19f9125bc54a2ddb44037a6fc1a93b9d63c0b427e15b6d90f36283954f0ed3a120e","first_seen":"2024-08-05T12:55:29Z","last_seen":"2026-07-25T15:40:05.724891Z","times_seen":75,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/slidernotif.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/slidernotif.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwxh9XK5jLVgN7I%2Bs5iL%2BZVOjP3FOoqg9By7Dr%2Bg%2BLgH0UBX%2FLr%2F1aaqTO6C2env9gx5ASGnJeu5m0uV%2BwQji3qqqtGGA%2BPDCJumLinZQ4L05FM577X4z3CF\"}]}\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafbbdc3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-15T15:46:34.245649Z","times_seen":149694,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://anniversaryclaim.dpdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 44797\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T15:46:34.240293Z","times_seen":262890,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":79,"dns":2,"connect":8,"send":0,"wait":8,"receive":9,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/sender.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/sender.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QAJBfb1m6J7eNzlOc23bK7tBF0X%2B2G7sU%2B5TTjBLnZzgn9dXkwMkShA9bVORuz%2Bzqu8TUDd9RRjzsrict9O%2BfL6odlbDMSJ5Tv8jGKublvc0oEEj08cqnL%2FX\"}]}\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fb81d1e3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-15T15:46:34.245649Z","times_seen":149694,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/tok.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/tok.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:25:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31320\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAk3z2DcMvrgUi1MkU%2BgvH72uoUew13rEw0YkJW3CIBKk%2Bacv092GvDKyfWqLjKndU%2BJpuZHs3kKFSnUkK1AYIHymm18ZKNnM3AvMtAaMxB36nG84li0kW5b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7baf3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":31320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 378, 8-bit colormap, non-interlaced","md5":"4889ae0efc8f4d9d32b13f57461eab42","sha1":"d7511bce55ebcd88d5058cdb272dacb455c54bd8","sha256":"704be0a2acbac74787f9f5f255f39050dc9614c0131dc94ad066055027758138","sha512":"152c0ff5291f7183e441c6108021270dab835d23a4c5027e552266fa5cd36f3a90d38e77f8b6ede4dbd0715ab8e674d87f2de374498a9a2c52d48731ed677106","ssdeep":"768:BpLRh5OAFPSuDCv8njIkj6oYE550XbP6x0fH:jds/vkIkjJLxuH","tlshash":"d6e2e03929a0b13296829b219dbd9c3dcc4c89647f47723b9a874f18c7c1487716baca","first_seen":"2024-02-11T03:22:21Z","last_seen":"2026-07-25T15:40:05.749051Z","times_seen":57,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/bawah/5.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/bawah/5.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 19:14:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53726\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jxRm9TZ6E7CBKQDSM5FlmgyQ0ogFOwwQ19wqMcq8c4Px6WjbHlUOHxZmZm0lUpcDuWgBsiTDlUmx2MJfkjMkGw9DzbzMTSQSj5S1lY2KfMB7y2BTO%2FIDh5bp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bba3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"20eef2be1e2356f89238e4bb158f8c53","sha1":"ac69d54bfe5c2ae7449d08b59baa83793a05c353","sha256":"306cbfbad098d44c0b5b229522414c6aae9131a4132a70b5b281dd46ce066536","sha512":"b14100685d301b4c851ba6efb74272ebb2343def5fd3aedf4db4266e2c31a9c4e6365ffa0a387e79c410449d269a4caf5baaad3057fffc3e553791f3febb8355","ssdeep":"1536:a+LbV2H35KO5K3jGQkyrpPcXWe54xUd2ZgJcXDk/TaY4m:a+QHpK+K3i0rpeCzZVXDk/TaYx","tlshash":"ff3302d86b9b09518ec719b8f3751b56c9b0b2458f401500720d5aefbfbaf740a3b291","first_seen":"2025-09-20T05:43:57.405653Z","last_seen":"2026-07-22T09:48:27.430267Z","times_seen":38,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/international-telephone-input.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/international-telephone-input.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Sep 2025 16:12:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2168\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iIyEIeNfZD%2BDL9KCv8HlE8z%2F6huZ0%2FTPrjUZexGINzzNkxTycR6YHJtDQb7L33aEzF9iaZSw7efa2RXkQq7FDH%2B2nUMN15WUvJI0upf261S1KHMOq2qbLS%2BE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf2b8d3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20032,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"631156c56e9b146c0450dacd7936a501","sha1":"25c764014596c5d5508e203967dd813facb8374c","sha256":"96871ae895184625a43089fe99a501ba47f217eb7935996e44450b16266f000c","sha512":"ec21141ee9bf99ac7ec077d9c77af571e78e77829753e49d4b6008291975f1f8f718c3f70aa1ee97a4ccc7221c3f4a25ab186b37ac39b0a8465d669f888ac0ed","ssdeep":"384:cpF7FoN2qusc2gW4C34PHEuwOJv4HDXnRb:qF7Fb8","tlshash":"0b923c79cfb23d59fa5fa1611a7c87425b3e7047e81e493cb29e3d991f820d024a3ad1","first_seen":"2024-02-01T16:16:17Z","last_seen":"2026-07-25T15:40:05.712396Z","times_seen":73,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/1/1.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/1/1.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 07 Dec 2025 15:55:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58082\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2FQ4AA7qq17YUIRQodHbid0r80Pa5pWz%2BBm8vDfvAwPWEgkkajs0u7%2BeXcTsGLfdIMmIY1f4Gjt3Q5AAm0whGg%2FeaeL4pAR9v5BTRglrW%2F2Yht1ixsgaojb6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5b9d3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"d3fea8f0300652f3e96148d43e37cf2e","sha1":"791ac55ae39d36e46b53462fa5bcec186cbce997","sha256":"8023509eac16152043537ea13e87944dd05f2c879a5e6aeced2c377179edfde7","sha512":"29b2ce1fa50d694c5a6b09d1efd0508087215ddb31678c8c2a1972c1d0d6c1461c7bc281f4f8d53e8e2ddaa5d6452133ce7bd645238e04e2d9f82b4ee3e73e9e","ssdeep":"1536:D23nfnne1grRY8/M649NOLYp73+8ji4zYeRp5BDTHL:C3fnne+/Yp99znfPHr","tlshash":"774301bfca9b1b4fe48a3eda58030589730d6691ebd4199762ce5039222cfe9f4051cb","first_seen":"2025-12-24T07:24:53.274318Z","last_seen":"2026-04-02T03:29:17.473011Z","times_seen":5,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/4.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/4.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 19:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28137\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FLtyqwPwTopW3obBuY7yGXfeSCCm%2F7KNEPo9XPSEgyDnByprhSi4DQckIBI%2BlgWXuewJnK0JfTs8WAtlHIEDg9g4fV1apGpxxaKGFEQwxdG4TYgtaaBV0Lq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5ba33483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"132eb9fe77262fe741f756ab3589133a","sha1":"6935b523028a26c2a938197c8ac0711b9c4de939","sha256":"7ed150c0c74a9988c79d9528d81900baef469d05bfd73644dfb091dbd259e254","sha512":"334a3b5ee4dac556be29e5090eb034b5ab33dbfae984d2ad205d3f0b311f3eb94c93df22b9e3286d30501d02cb3165557028157ac927f964548f5ae3070eb877","ssdeep":"768:XR44qAX7p7YhasxP5fl/SjSbDLRC7TiX1weahsFQkjVwQP:XRFy5U+o7TgQsFQkjVwC","tlshash":"3ec2e1861c6c8663ce1da8fcec14195a6637cd210ca4bd2a535bf033f13a7d8790b56e","first_seen":"2024-04-08T19:55:17Z","last_seen":"2026-07-16T12:51:59.63256Z","times_seen":18,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/seclink-close.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/seclink-close.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:25:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 867\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apY4BPBIVmnSwb9SnD69iAktyjh2BeXCPpzC70XQKmrBoUo%2Bg3mxGc06w2L7f6yVq3sZOrgUH1pVwhtMfsEEcU%2FbVX796zqTm4vW54OO%2FXR%2BmyAkmAIy915C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bc93483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 31, 8-bit/color RGBA, non-interlaced","md5":"75b8fc9fb0f1dce9c0e53d119e637af8","sha1":"c429caf6e1ed51a43421419c2a08d8ab8a654ae9","sha256":"be08cce2cf15dba627fec531ea422ca0bdc76de1c2b61d6de21e2920687d4678","sha512":"b7606f2c8bfbfddd06395853dd6f06d002833bcadedf161eca32ffac37cb2f7827264916a3d50d5fb0f634fdaf1eee41c8edfcc1219fba467fc4756236fed14e","ssdeep":"","tlshash":"c6119652ce2a67fdd1c05cf61174bd55d32827cf7f043e596823e2a1ad04816198a92e","first_seen":"2023-05-02T14:19:00Z","last_seen":"2026-07-25T15:40:05.720251Z","times_seen":368,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/index_files/css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /index_files/css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Sep 2025 16:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 62268\r\ndate: Tue, 17 Mar 2026 08:17:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2B%2BMF2R29OsIdEob0RYWLOO2OAVvs49CCcaywX4FMZ0lt2TKoPX4SOyL8pwpUSNzAvyefHmR9U%2F9grVZ4PlEhoYPs4sCButyZU73Jk79UfbSbhw94OSmEtak\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf0b7e3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":62268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1116)","md5":"755df17a408beddb747e36f27ae4dedc","sha1":"53daa61ef477c0badec68fa8942cb5ffce0c38b0","sha256":"a2db023c6c27693f044211498c952a94f002c75b80926bde95c24d5dbab187f4","sha512":"07fd18b3c67c79e4e0bb32e5b44e441ade2a0f2a0364d53100ab167255a848de75fd43aca2d80179eba6caf45313273a44e538d073f7d7d8546227fc2246fc04","ssdeep":"768:LsZeWBtGdkG0jD4CQ9/yEN4D3UyZ359UXuFbyn:LssWLGWDdQVyEN4DEi3sX8byn","tlshash":"1a5376955a7aec787f9308d9f7ed67218f8c106d350cc2f953fa4c25ac92119a20af4e","first_seen":"2023-04-05T04:21:27Z","last_seen":"2026-07-25T15:40:05.71136Z","times_seen":885,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/css-zone/shop.css","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /css-zone/shop.css HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 05 Sep 2025 17:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 849\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o1%2Bw%2BsuuGI34iBbmr61DcmTmrJN0zDRGZKmXkRYOAv9h7AUF7cCdXcy7OekD65gmRDFHOUf4Hhzx20TZ2X1KasLuxx1%2Fi922rt46Jq4IGKIDmwCHMGGW9PzN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9dda8faf2b873483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3276,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5caf18025502cced0264d6aefc0fbb1e","sha1":"432b265d4d2f4a0d0369448fd7f43a301d77d112","sha256":"e8dc5192576481a42b85c723765b3714174680cfb6a83bce79445b3120a4afd2","sha512":"1ddf3e4862693c6ab3624c2cd24439d9d31b21d4d2e184c843ab284234abfaf1d217ee5b1142d48e2b125ff2224b5e143159458a45bf70d93dae86c5cbcfbad0","ssdeep":"","tlshash":"ba6141669d180004e336e735bbb00f6df92104a7e60706abbbd8f514dba976c2722ec4","first_seen":"2025-12-26T07:43:30.452316Z","last_seen":"2026-07-16T12:51:59.612288Z","times_seen":5,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://anniversaryclaim.dpdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150020\r\ncf-ray: 9dda8fb95fc51ecb-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-24a04\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2277788\r\nexpires: Sun, 07 Mar 2027 08:17:28 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=94VEl21lwQM55AixntEZtmORgf6OpE9pbdGpktnqk%2BD9vh6%2BU4OU6s1xoBQ4TzeG4r0r1BD2AQBlWFzrJ2FmU3Vk0ZWvtlBkT8pVzRIhNc%2Bo0U90BZu6lRATHiEZc2w1A2LnttbH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-08-15T15:14:31.962518Z","times_seen":41139,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/2.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/2.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 19:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28446\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMEBVb5TxcSUR%2BHBqRaEAo4lwyzQIZ9Y0BHL9eYGTocP4nVyvInsnvR432jYXHAVIFdY9DJrwWLomeoQ7wUcREKwhcAJ1njOb7VxHk0uz7iLTGAuefnX8Cyv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5ba13483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"4445220ef3a7f49430ee5341c28b523f","sha1":"95b67b8ecefe66cd2e403c1345379fda57f28fdd","sha256":"4234b9f7409abadb119ac32b47e1f8eaba00b249108d48b2ba2ac09bfbec21c4","sha512":"76caeb2cc0a09150b57371017543aa8a9fe2a0f056d619f75b579e99e3434aa72760aa2ea9d8b774873c76deb6878cd53ed188da0503434d33dc1675eddf4b5e","ssdeep":"384:7et4YDC1xNXyhK3lQPDTD0NmOV40KHumDt4ne+jiODcC3ufeY6SLjtf/E/d0LPWn:CdaLD1QPwNmUsuN+C3uWYXtf8lGPxPru","tlshash":"b0d2f1213d926f18e99bcd73140ac19668589dd6feddc21800b2f62cf071869d6b6fbc","first_seen":"2024-04-08T19:55:17Z","last_seen":"2026-07-16T12:51:59.638233Z","times_seen":18,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/bawah/3.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/bawah/3.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 16:28:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11144\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22sRHBPwUqWNXLIHG00YIXAVsZHya4dhEbSVAauAhnypaxWluAtUDDPY6mVbe8iZ8A5j4gKN63iVOt4EAfFocvw1TwMCCY8NtcpLcopnpgKY2ulh0QVbyrQp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb83483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11144,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"700d0363165d9d53ad505737dbf55b2e","sha1":"fb544424702c675432ccdfd4555d2dcb99a704e8","sha256":"26f1db83b64889918957025f8a0b0bbe6895e3d99398673ca1c727dee9d83423","sha512":"6b645c76e9dda8678cec981772bb460823a7dae6faef44d903089921336d530fcdcd7c9d6f8c6edf2f0ddd6780262b3d332b8425def8e1474ffc85a66a5985ef","ssdeep":"192:TuXqDLKkNw7odJP7IMfmKfwH2A7ieotdxiNH19cOGX/tPeWoAKDlVsTiwsdy4:TiqDOkNwUdJ/IWALyxiNVynJ+jsJsdH","tlshash":"0232bf8b07c5b00cb2332d0145ec641c718f6f5ea864aba097ae3b37463b1d5fa2687c","first_seen":"2025-04-08T10:46:38.430025Z","last_seen":"2026-08-10T19:30:56.516275Z","times_seen":106,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://anniversaryclaim.dpdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20556\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:52 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:43 GMT\r\ncontent-type: font/woff2\r\nage: 44796\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20556, version 1.0","md5":"8feefe1e602c4b14ff414a77c3af2c2c","sha1":"e57daae78e76c8944e97edecfa656f8608e09db5","sha256":"2addf2d86d7a5778653b36d551e97a39da52855f82fac7461cfc1bd86d460aed","sha512":"893f9695ee887eed00246f24d4ec3e17ed64e2af4fab055f951795f50d34f3685aafcfbda943060a132c42169d2ef5c99d3db4fb901d57a09e712b4ff02afd92","ssdeep":"384:tpv6fcCujSd2+uNZ0omwRnNPqfWvx/CldKV8D2w9lQXL79Ci5q8S/USM2BHRpWp6:fxC0So4wRhx90K6ywQLIWS8S5By5AR","tlshash":"8792e056b288746a77e4e3ecc859ae6c65ed9b0f0c1b15b909322122f196c4734930f9","first_seen":"2026-02-19T22:35:21.90447Z","last_seen":"2026-08-15T15:50:34.352051Z","times_seen":32001,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":121,"dns":0,"connect":22,"send":0,"wait":10,"receive":1,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/lenzz25/3.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/lenzz25/3.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 08 Sep 2025 19:11:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27944\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0ek2jcLjEN5wKZlrF6boSWWkkJnG%2FxnMYOlJ9Fsg%2F%2FlXti1whXMiAR0pLNYpnpzuBdiUtpUnoLNJ49EUwmGH8Lx7MKP7iw9WE1vY1zUUJ1FOtQC8hUCdDZA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf5ba03483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27944,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit colormap, non-interlaced","md5":"5cc12fcf4632ed491e0c3b6580243596","sha1":"b6093cf6fcd2bbebe5cabaac6428c00a7c082926","sha256":"00593f34a602546dccdc4e44269d5f495ba6d2ccffeefb849c5ab24f1b9d418b","sha512":"aacdbaff936a86a8e8e369c9614115c5e0dd102a822594d0c9b67dd00a6a3e05336222a7bf1a83c50d22b41338215a83a864607fd4ed0e418534b426a5e953ad","ssdeep":"768:WLFwzE8FQE8QaFTYyw8EKTQSIewRpHSBh0cs7S:C6zRQVzFK8VTVIewRpHSBis","tlshash":"cfc2d0645fcb70c5ed8d9b759690159c8f206fc42063cc7d97a03d3b09f6b4ee12611a","first_seen":"2024-04-08T19:55:17Z","last_seen":"2026-07-16T12:51:59.587874Z","times_seen":18,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/king/bawah/2.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/king/bawah/2.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 16:28:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15294\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9Ixg%2FJrxpRVcXZWHWh8RP2%2BMODvQ38NG65LFuG1IXuwwKX5iHxLsexnB3u%2FlZ15dPLOjMJWWzQ%2BsTWKC3O%2FKMw%2F%2F5XOb5Oggq375B3TojYuiei8Ec3HQk2Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf7bb63483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 556 x 543, 8-bit colormap, non-interlaced","md5":"7cb34961c5da7be99d0b3cf3d2394892","sha1":"ba5a9b0c4c3d916b65c30fa1c560246e13ff122e","sha256":"5ec6dc9824138a6a66378b8c6de830e704fcf4a0b28911c1461395d8338f2e30","sha512":"4bff6da31015e023fe4a7eb55bcbd3c424f359bc12c6307240f018930bef5a96ce5b8ff9326b134c20f4d5cce047c098610c984f540f524d854babf3098f96dc","ssdeep":"384:lj8mHIdduiqZ48Td17WAirsD0N6if0wVUkU+OV:GmQduiqZ48Tv9iGifFVUkhS","tlshash":"fd62cf9bd9538e7380930f1843d9f738ae87a46c7a25d08afd06f85d109e6d06009fcb","first_seen":"2025-09-20T05:43:57.426849Z","last_seen":"2026-07-22T09:48:01.239919Z","times_seen":30,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/uc/2.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/uc/2.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 07:54:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23970\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krEoZMLBgFwNVHVkNH2x%2F8dX6kb6n47U9iDYF9KHdfsNC47CtbCMYn2zhrKHRpclVcVQ%2B9huvA5%2Bt0dkliKxDVa%2FxciwGdpNvlzs1kXmYb1%2BlAon5jZaHkOx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bbc3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"6e2a3de79805499c5613898689672f04","sha1":"39ace867c6505fe07eed2cd894a45daad3b5bd2e","sha256":"beed3e95beb0427b1d8762ef58482b61fdda2c228878896bc4e3824525e056c6","sha512":"3ee46168acdf11eef4fa6bcb490ecac84367e76f24d9b2d0118c7ddd35cc88b7f585bbaf2eb5c027d81cea6995249748b73318be4726af277f34932723625049","ssdeep":"384:c0wobtagb6b9VIRyO20h4CVWoGlsHbqN6kP69/SooO2y6mHRj+1:cs7aIEO2f5o9biZxO2y/RW","tlshash":"a1b2d17fb817fd2048685a8808ef76858ce7f7d9b0cd5348e3e4e159bab19a0094b06c","first_seen":"2025-12-26T07:43:30.557344Z","last_seen":"2026-07-23T22:44:16.926535Z","times_seen":21,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:16:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10414\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BiH%2FIwpu%2FQgjBbCxUZ1hWIbHE0F5mB8huaLVO7hg%2B3R5X7CgzyJ4t2hirAPWYGTvad3bz47sPabxEvfa%2BJFWUrs9Jr5ELOvdZLI3KHwnP%2F2k2bvRmcyoCyYF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafbbd63483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10414,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x200, components 3","md5":"a98bfeb18e1d2b24b35436706be2fa2f","sha1":"c589b79fc3ff1c1d4f3c79c465deef8544ff7bde","sha256":"0916bb845f2f8eb332936e20ca944843b092d413b4df3d96ae112c6a1b88ee32","sha512":"b40c2ef09a3d08c8b6a8efc2011dd047e4fda16bbfae350e3b52d170a96b52b347010a77c3d148075a5dd587e5171157008c5ace1641b030aaa03d1a05bbdf76","ssdeep":"192:wl6NiYUBdwIRCsqtydOzNmX4Kq39HOUlbTBrpsmtK+AdMA+/SLMTB9LOETNL4:Y6IYu4L0dV43t9TBrpBtK+AsiGL4","tlshash":"a822af43efda3b3ef12941bd514c1b250fe6aa630326053ba7391819f4310e79be1a5e","first_seen":"2025-06-29T09:38:25.027511Z","last_seen":"2026-08-10T19:30:56.526833Z","times_seen":68,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/point-card-bg.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/point-card-bg.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/css-zone/shop.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:28 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 07:12:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 364505\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBCMO9649BnKYGVuPoLyy%2F56Latbbnrxcft6g2IhL0dDujgNjcooeGQICsH5wLcr1Sd6X6cfMajYxyHUD3x9ZqpEvPmxF48ZmZY13geaRm5SXEkYCPdX1agF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fb66ccb3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":364505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1284 x 1510, 8-bit colormap, non-interlaced","md5":"5537ffe844e6cb3e7c6b10942c24d849","sha1":"ae3c873e7488d38547214ad53f72685307d4a4b0","sha256":"a27d41112213a3ad3070ec12922bb2ebf0a9b434425780be6bd6e45dbaafebf5","sha512":"f7819924dd47134090299e0bacbfb437b00b292e69c9c2a1444368597ad7eadfe7edf2f3eacdc34e317d1316645a8ca961c7bb5c374d0b017143efc303ed9bf7","ssdeep":"6144:jhikf49w+7vV4qa5jHafd58EQYOoJ5INMO37zfFUZN8gmJaas2VNZDJc/kfFIr0M:jYkf2aNHAd6EeoHINMw2ZNnmJaasuZ9A","tlshash":"ad7423f4432664e594868a6da9df2e40e9719b7834a3c622734cfd7f7732a7329c40c9","first_seen":"2026-03-14T04:58:49.860875Z","last_seen":"2026-03-17T08:18:00.566519Z","times_seen":3,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fb97d5d3483-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25693,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25693), with no line terminators","md5":"74cb42adfe3e14756966bc9c553935e5","sha1":"51ce1726c1a69db9d68b322f8c7de28c3786f4ab","sha256":"502465d110f1c86fe532ab1c5bbdcce4c2134e702db995dfbad72eb3ec0c5a10","sha512":"baaca22402db67b946274476b97ac27bbbc9e416729f4ab75127255a6c3f27ab6ada774818af786fd0575b84dea3df2744c38f4c1dc85309e2fa8520418fc93c","ssdeep":"768:Pj5FSV8HpbRzWuMeh4grgbeMkfGzPDA0UDslggD:b2iJlzW7nLyf4A0UNY","tlshash":"7fb2c9ce79e5b61ce7bab07310bb30cab5ae6c84349cba449210d8f4f470758556bf98","first_seen":"2026-03-17T08:18:00.567309Z","last_seen":"2026-03-17T08:25:28.009561Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/style-img/icon-twitter.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/style-img/icon-twitter.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 04 Sep 2025 16:18:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 800\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zT0gKHNh5o274V2Uickf9l%2Bc%2BeLrO26oJSs6eaL2XGV%2FmgVKkN9t9JgxjMz9YILi6e%2F%2BNK0py1BIZsTcTpmdwWClNALXlHwKps5NS2BUamOxCzwzfOYmXghO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf8bc23483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit colormap, non-interlaced","md5":"a652d6a1dc305c06c4be945ebd804fac","sha1":"9ab8f8de4b63ca424cf0e87f36fe9b8faf678c29","sha256":"e816b153bfc499a8328062512ea30fd29041ad98055466d713e4e52c9c9aada8","sha512":"bf8ea854958c56603f91706046646ec978d686e3f1aa0569ab837f6d9a1b4422029c336992e72f29382eb14aa39c63323b890b8dd37b0d951deceb1b3ee4d747","ssdeep":"","tlshash":"bf0141c74d6039a48efa5389c8a1e0407c90103c6014889e043a7aacd459344ab6eaa0","first_seen":"2023-12-07T16:49:18Z","last_seen":"2026-07-25T15:40:05.724393Z","times_seen":79,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/priv_laz.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/priv_laz.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 15 Feb 2024 09:55:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63387\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUco6U4W8ESNsO3vLU09Lerds2HmbehUc4MSb6x4YnHDFhO60EvAULJCqLE7imWIxsMtwgsvfXaTXjuSlOgeyMgPlZUH%2FqmEOScndruj%2BKDgbF9q0f0vvLME\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8fafabcf3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":63387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 54, 8-bit/color RGBA, non-interlaced","md5":"9c9b804ab29f89bbaf74631f98574278","sha1":"1ade26603615d5f820880201137c48f4bfa80a60","sha256":"a7204f9c6e9885587b2d096189b97f58c5b3bdda908df5bd355066723900dfef","sha512":"1c3453711eedbb2dc0727822e8006c7e789f918b73f02cd4b2c717b868dba20e33728a72587f9a56a68fbaea60f3aff507ecc8b5af91872b305cbed183a2de80","ssdeep":"1536:Y6lOcif13wJXKI2jJ0JOFWnsetSjo1oaFuXGFIaI:3lOc61gN12CO0NBj01h","tlshash":"ff530277862f34706a3f90722b8dd2a91dd7c622611d48d9bde5357a043f288ac52fcd","first_seen":"2024-02-07T03:32:16Z","last_seen":"2026-08-06T23:21:59.532852Z","times_seen":170,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://anniversaryclaim.dpdns.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Mar 2026 19:50:51 GMT\r\nexpires: Tue, 16 Mar 2027 19:50:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 44797\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-15T15:46:34.240293Z","times_seen":262890,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":87,"dns":1,"connect":9,"send":0,"wait":17,"receive":6,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/common/images/icon_logo.jpg","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:28.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /common/images/icon_logo.jpg HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-length: 406248\r\nlast-modified: Tue, 12 Nov 2024 03:01:40 GMT\r\netag: \"6732c514-632e8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=284\r\nexpires: Tue, 17 Mar 2026 08:22:12 GMT\r\ndate: Tue, 17 Mar 2026 08:17:28 GMT\r\nakamai-grn: 0.4f4d2417.1773735448.24961734\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":406248,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 1024x1024, components 3","md5":"f39468301eff4078e639c7d9e838898f","sha1":"2b2c8cda2d81199889e1e66371f71b027c5c286b","sha256":"4b08d577f3c332488af8d067948bd6515d4d0d491fd705ee23b7485cb0a64005","sha512":"e65a0fee87c4743c9317b0bf62dd7f86f9366155c64eb959b64d4425eada2d524634a96d358557e471f3e639428dfdecf44921bf0c6d6f6905ff439d5b2cf4e6","ssdeep":"6144:/+NqPRRWmq5yQGwQxNfvViwFuC1ijzeWUJ/5FnnvTSqKVVG9RJSKfW9/DxYTXNjl:dPRRWmk6EwuPaWUpvWpG9C2WcNh","tlshash":"c884234216dd3873d7e2e53ab490960c3ac9ee4f0e59072bb4dbaece5ce25d3485a052","first_seen":"2024-11-18T20:57:47.597476Z","last_seen":"2026-08-06T23:29:25.340735Z","times_seen":208,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":202,"connect":1,"send":0,"wait":16,"receive":14,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Teko\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:26.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Teko\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 17 Mar 2026 08:17:27 GMT\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1212,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9fe2fb5793fd54dbac9cee45aa7642c6","sha1":"ea10dc92f0769aeed2d32bcd627c520099dbe4ae","sha256":"5eed302fd6c44dc49d8f4cd585b35e0acc64fa4febbe3cfa64c968c60062e9ee","sha512":"570dac0f39f6b242a74edf75ab0be3dbb97ecf52814a6e248debdd19cb2fe738e9b372248159b13851fb0a9e73fc49c9afa5adf8db5a2711850746b693f9a1a9","ssdeep":"","tlshash":"b321ac9104575104db571cc913cebe32ef1e22946411d5348bfe18d8bcafe295351b5e","first_seen":"2025-09-20T05:43:57.496071Z","last_seen":"2026-08-14T20:33:44.390732Z","times_seen":132,"resource_available":false,"data":null}},"time_used":943,"timings":{"blocked":426,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":486},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/img/google.png","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /img/google.png HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 24 Mar 2026 08:17:27 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Aug 2024 20:58:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39228\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NU9uUXe7Qg4HYLrfJqKHMA2%2FWTOrsz5mJ6U77DDTUleiMtC4309L57UPZjBrS%2FVn6alb90c8m8n304pWrVs1uk26isNisQ4lRWYTYSpQ1QJErHukZBa%2BehLU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dda8faf9bcd3483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":39228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"afd0abffc72b29380e89f04333ecdaef","sha1":"b405d29a32a4d19469e950f1f78035a3d226c397","sha256":"6e3818c194ea71c587ba8dc8a167c65c60a7ec52d1df6cc4323e4ebcbb6be77d","sha512":"34a32b4ca3d75b1110bc9059f7c00509a7f9c910649ba7b2e1edfe01504241df407638474429e35d4425904497f6cd59a5df15a13b670ccb7f85a6f1a392aebe","ssdeep":"768:t5d2ipjbdowi7b+THAaQ3/3XSFMVyv21f//7o7uZSjJHZHvEoecYhub7vpA3PASI:tPvp/d/mbc7Q3/3XSl21nDoicHvWcBbh","tlshash":"5603f10ced784a78dadc483fed1a9d84c6ed46fd1004ae170638714a0ebfa5b36d3a41","first_seen":"2024-08-23T19:07:08Z","last_seen":"2026-08-09T15:33:06.198847Z","times_seen":110,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"anniversaryclaim.dpdns.org/js-zone/trueid.js","fqdn":"anniversaryclaim.dpdns.org","domain":"anniversaryclaim.dpdns.org","tld":"dpdns.org"},"ip":{"addr":"172.67.148.20","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://anniversaryclaim.dpdns.org/","date":"2026-03-17T08:17:27.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anniversaryclaim.dpdns.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 02:41:34 GMT","end":"Mon, 15 Jun 2026 02:41:33 GMT"},"fingerprint":{"sha1":"A8:10:0F:0A:9D:5A:C3:66:92:9E:7E:0F:E0:CB:FE:DA:16:E3:FE:F8","sha256":"3E:59:19:06:9C:21:E0:A6:55:5F:08:7F:B4:85:57:7B:1B:7C:BC:89:84:59:35:DA:AC:5B:E6:C4:68:6C:68:67"}}},"request":{"raw":"GET /js-zone/trueid.js HTTP/1.1\r\nHost: anniversaryclaim.dpdns.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anniversaryclaim.dpdns.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Sep 2025 16:14:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2213\r\ndate: Tue, 17 Mar 2026 08:17:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 268\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ges4%2F05OIAI5nPVJ4UcabXMZKdaaz4k%2Fr6oiRjRIXrHcRDiDq%2F8YkksxIqtI1GLMQ3%2B8xU9OAIrt0lob%2BqLvXwXSvYNaRqzAJnJIrqqvt7QHrPu06EWahj5R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9dda8fafdbe73483-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7536,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7536), with no line terminators","md5":"89938cb2cf130f637f6d1db74a32063d","sha1":"69cf8e41580b17e479342db0a432c785389ee362","sha256":"0d3b1851465665e900547641f7f9c620fa7bf970520acc08d9dbc1deb1e9a87e","sha512":"ed350af2a158172ff5dc3609423b2ce25275bf7542afdb7adf4b17458e61da0a1bafd7ce19163420b693c264c9b98a400659103527e78ffcd2e17844350e2c76","ssdeep":"192:eV1HJaqJAAARANUbiNmzC3j32fIYlR+ZTURQE5P5Kszgh85kebUP:eV1HJfWAARANUbiozC3j32fpRUU35F0F","tlshash":"9df16b013dc4acea634bda56fa15f2d5f32e48d0f3905e2fd114e84364e53a2a5835bd","first_seen":"2025-07-27T06:58:26.669766Z","last_seen":"2026-07-25T15:40:05.741928Z","times_seen":14,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-17","alert":"Sinkholed","trigger":"anniversaryclaim.dpdns.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}
