{"report_id":"3bf31930-0ab5-4cdb-9c2e-d7cb0d772026","version":6,"status":"done","tags":[],"date":"2025-10-09T12:00:14Z","url":{"schema":"http","addr":"krmzi.org/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"172.67.128.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"krmzi.org/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"title":"موقع قرمزي"},"submit":{"url":{"schema":"http","addr":"krmzi.org/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"172.67.128.174","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-13T12:00:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"krmzi.org","ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-09","domain_rank":0,"first_seen":"2025-10-09T12:00:15.719129Z","last_seen":"2025-10-09T12:00:15.719129Z","alert_count":45,"request_count":23,"received_data":2015363,"sent_data":11100,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Distributor","description":"Distributor is a WordPress plugin that helps distribute and reuse content across your websites.","website":"https://distributorplugin.com","common_platform_enumeration":"","icon":"distributor.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Redux Framework:4.5.7","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-10-05T22:17:33.15614Z","alert_count":0,"request_count":1,"received_data":86564,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":1,"received_data":424829,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":3,"received_data":12279,"sent_data":1385,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":2,"received_data":50810,"sent_data":1060,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"krmzi.org/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a54dac89837e232e6fe5b45deaca72d","sha1":"984ea1eb819791519e5b2a575d512733fe53b09e","sha256":"bcc5eed49ff526796032f4e608a96db79acbd76407715e04eaf63534b654d8d2","sha512":"67e5388f0261fcebbd5e2aba1f494ca5aecdb613257089aad57901b6c99f5d0087631f366ffd9d9441bdc5d75c5e2b62b54322416d30e651b333e7dddd164d4e","ssdeep":"","tlshash":"1b61b99e3775348b32b604d26a3f4e07fb7258361a88d034cab9e7541cb1463d37ae4a","size":3406,"data":"","first_seen":"2025-10-09T12:00:19.44888Z","last_seen":"2025-10-29T19:37:11.262326Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/assets/bootstrap/js/bootstrap.min.js?ver=2.0","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa4447550b446ac73a77aa6c7582476d","sha1":"44fb7da919b5c169af65fbba84114c6b8233f704","sha256":"81106ddb86f999330c3dd90e9f7315f7341ca70e74f1b129e98ce66767c7a825","sha512":"06dac937d85031a2217f420e88306218e85305bcd940abde94de4557b7a5148bc672ec6502fdac2f8c8bfc5bbc7fe881bb601399986e745d86dc141bdcd8fe80","ssdeep":"768:p8LJD27UwlNAMlbWqXYR+jS1s8ep0smQirXf8u8GfpZZSQ:2Y7NBS1W8v8UpZMQ","tlshash":"f8f29546b270316107efb1e5415f020e72396a6ee90690bc78a5daf63db9c48317bf39","size":35282,"data":"","first_seen":"2023-03-10T19:54:32Z","last_seen":"2026-03-28T21:57:45.242742Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T02:23:44.781794Z","times_seen":261115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EHG5W0E1YG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff0d0c20d5d3596d8ca0316d51a13ac4","sha1":"1f7c3ad60470a6744e8b9963a386043f0086bdec","sha256":"db1e524d99cb1a1cde54fc6a0693952c203feddea3b37809a771f698b716a4f5","sha512":"91b02bbc093f3d004a7d0474a3bb4213e0178d97d0cb4cd7c28b73daa2825ae36a14287575068b7e8f00924b03b03645c13e9d18ab76bdefe0276322441a0cdd","ssdeep":"6144:zBkwep26tv0njCnzGwXV4rvoB6bEGBQ5w0yN+Xy:FoYEsnjYGdo3zy","tlshash":"c09419de73d674225396f478503f018ba57b28a2b44cc89af189cde42e74a9a4137f7c","size":424225,"data":"","first_seen":"2025-10-09T12:00:19.432198Z","last_seen":"2025-10-09T12:00:19.432198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T02:06:41.211038Z","times_seen":195746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef6049ba2fc358089b4e5abff910f005","sha1":"540e1b7159a857309c81ca274e330d5af4bb7c62","sha256":"7939c1a4e8ebd45953c01d0781285349a452c98b1b3e310ad2081e217dba3930","sha512":"42efc6c03678590f6a3af778c1cd0db3716fee665788e634dec84fb6978abe24677423a122fd7d5817399f6d111e88f580140699131a0330682ef0640485a264","ssdeep":"","tlshash":"aea022a3c283030c032088c82202ac0bc30a302f0c8b880bcf0e088c03a3020a0c03c8","size":77,"data":"","first_seen":"2025-10-09T12:00:19.450096Z","last_seen":"2025-10-29T19:37:11.263891Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/assets/js/core.js?ver=1758375748","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f86437350c0b517585fd825d8bc9ea8","sha1":"67e4b66593508475852ebc97f0de9616ae7c78f7","sha256":"1776242949e07353ea4b92e65363cc432eaa5761b35e72678b2a9891443c1c05","sha512":"3465f26ef06a2207cd3aef78024bfab098cbaa825878debedc4f60bc44e8fd0e10607e76a335f76b2cfceb8f90e7323b5449a9c4c3b9bf90518bc379905425cd","ssdeep":"192:+m/MC9YdKWFbuhvP5bQpkx84G3KcKsKDKQ5NO3gya:+qKBIya","tlshash":"29d18617709700ba003f3995617b0582bd7fe63bf54aca03be5cc5ac0f90a25b5d6a6e","size":6311,"data":"","first_seen":"2025-10-09T12:00:19.441687Z","last_seen":"2026-01-03T19:22:00.398722Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b06c053059a8f47fae9e02f460c7203c","sha1":"3005e06981bd632fb093423c9242c6fa863948df","sha256":"e577d4ba3f47f2da1a56ed9280f408c3c707cd544b03dcb91fc437a651e506b0","sha512":"05bef8175d1579ba968bf77641527ce33c3b36c6025aef8ea7db4bd5f49d8f17fb5430d804d3ee3c5895802b084436907576889cb0b8e393783c0e5f7afb373e","ssdeep":"","tlshash":"fbc02b8c210b1cf181f72700cf3ffa00b4423224d8d079324c0d63844e30e27d798850","size":153,"data":"","first_seen":"2025-10-09T12:00:19.451299Z","last_seen":"2026-01-03T19:22:00.468858Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Aynadaki-Yabanci-uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Aynadaki-Yabanci-uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Oct 2025 22:22:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 23 Sep 2025 20:23:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 89262\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 394629\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHw46%2BV54v4ZiOTkFkDeiW9e0%2FInyxYW61DLn8nGyWjxt8yNFHq%2FMm9sX5Zk9G17gTOr6u0vEp6fmNIWVNLmJQMgY6ChIn0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d42f3a56aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89262,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 671x1000, components 3","md5":"7ff41f36c45ac031776bbba89d53ae6f","sha1":"afaebc7ba79dc04a20bcd0b54fec2b92d5645ec9","sha256":"bee941dbf1d815f0edab50eaf272a2edb03ea4c2d1f58dd40ce523975686b26e","sha512":"cc5190e4a559526abf2c9d9ea3ca2681aec06860d95d18592734c17e0875e391f6b4d9ba904ddcc20d0b697c85e813079245be8313868d3b75e02e23b8a2d0fe","ssdeep":"1536:CRDGVBA/vzKxHaftguRbOYTgMDQ59KnKS6Ukx56EJN5qJ1sVmW3zWH9IpIyl0:CREBAXzO+guRbOYTgUA9+lkX6sG3sVmd","tlshash":"049301d8fd54c258d6e845efae9ee265931442fb60b4c25f39ec2cc1f7d823b149a890","first_seen":"2025-10-09T12:00:19.415201Z","last_seen":"2025-11-09T21:07:27.51021Z","times_seen":8,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/krmzi-icon-150x150.png","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/krmzi-icon-150x150.png HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nCookie: _ga_EHG5W0E1YG=GS2.1.s1760011190$o1$g0$t1760011190$j60$l0$h0; _ga=GA1.1.1889860847.1760011191\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 17:39:55 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Sep 2025 09:01:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3753\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 497995\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lewxb1KNUTiAmWv58vOSuJVZemCwKwSaVGteKPhTIvSWTzEoIZWR3OrG2unBUahbXTZCUUn0r7%2FI%2BnYwynF4RJJQVKxDPAM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d5ef5256aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3753,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"04ce25f62ca271d6bda34e5a22a5ca1d","sha1":"87854b5b059815143aa2404d74dab886bc9bb926","sha256":"5e4cb1fb3e0afde6c9abe916ad4809b1b125fb628cca26b4a668a1fc81a2cd3a","sha512":"c895f8b2e32a39ab59e0c91a389373414edce7dcc33638991d259633606c52bfe7e661781b84c099e4816a595bf1885f10f138fcbce686f155902fc028d73d2e","ssdeep":"","tlshash":"f671e9ead993a9c1dee8d619ecd89854998bc80d293c1c80285c24ff9e0d144b7f9ce2","first_seen":"2025-10-09T12:00:19.416742Z","last_seen":"2025-10-29T19:37:11.223428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Kiskanmak-Uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Kiskanmak-Uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 07:13:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 21:26:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 178214\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 103573\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1JQYy6v%2Fp%2FeiCYtWm2689FcmSji5EGloZcwr%2F84P5%2FeOWCu8sU61RCNNtFM9cXvm6UmgbDWEZjSEFWhzNmsz6wgs0eS%2F90%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d40f3656aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":178214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 604x900, components 3","md5":"565b6d1b1159677738f1e87df5ea69df","sha1":"b507ee8e60e29d8e5be62b10e527d40968b8c711","sha256":"fea6936c298845af54a6e96540e1bd962de500669a828b69d29284b468263884","sha512":"dfe3619482120e5891f1d141c824d4c7c08ea5e4fa4bb4b1348e975c0c0160a81b0ccb0df85412ff0e9aa09f0e40f272b862a784ef99a23a06912d1afcb03255","ssdeep":"3072:5Lj6iZ5J3wYDz0WJUqT8hdghZZ3yFbG8sqhSbh+W2qrzDYXG5E7RWjoeiyG:5/d9g8VJ5NhPyFbIL1+OLxiyG","tlshash":"d60412975ec45ae48b5a9c90cf79c5a79fc606fb01c3c31b96e63aaf3d8119a011c17c","first_seen":"2025-10-09T12:00:19.418031Z","last_seen":"2026-01-03T19:22:00.392168Z","times_seen":3,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Gozleri-Kara-Deniz-uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Gozleri-Kara-Deniz-uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Oct 2025 21:47:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 14:15:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 151586\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 569563\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3n2ZblXKplKcFfiX65gBAJs%2ByrX9dvmez%2BnzvOpXlQ29u%2By7bhwmaM0bC7ibpQPFpUwi%2BxcFxhn%2But5CRwHHeKA8nQImxmQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d40f3556aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":151586,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 604x900, components 3","md5":"bba512f7da3dcc0fbdd2d727d9546c8a","sha1":"23b902b3b7bd097e0a8980cc5fb3a1e944a3a830","sha256":"23538f4ce55bea9e979bff2fc6dc1e8ed9592acd86bc170ece15e2f17e501db6","sha512":"3979d07e8403a545cd7a9e610d756c2d04185e030d0d061fb5e00035a6b79313782d024228c7bb9a4bb9b214cd489c3d4e49512d137c3ed6774ce3481e58fef0","ssdeep":"3072:lkYX+gBf1Sw5G28sxiAjIDfZgAhhzV6jn/FbthEM:ljXIw5AMR47jRIn9XEM","tlshash":"f4e312b74b1ecce104a269275237e6461120c3b027b7acbf5b5ae306d6615a9b830fcd","first_seen":"2025-10-09T12:00:19.419276Z","last_seen":"2025-10-29T19:37:11.257888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/assets/fonts/esheeq.ttf?hk7yuf","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/themes/dark_vo/assets/fonts/esheeq.ttf?hk7yuf HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/wp-content/themes/dark_vo/style.css?ver=1759519216\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 17:39:54 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Tue, 09 Sep 2025 15:00:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4655\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 497995\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HksbwsWUTXWblhZ%2FnwWLaa%2BqQBiboU5jOUe2QmLNwnUtNRI2thojqVI1oQo90nsDq4we%2BNhx9IuT87i%2BNw8%2BIYnoYDsrR1k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bdb6d45f4156aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8292,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, esheeq     ","md5":"b75432b39209fa6119c2ab8e0c32ec0e","sha1":"6073b9414c746c700272dcfc40fd132c8cad6d3e","sha256":"f603a08b20a3c752af8d690c15859cf64fae7ed1e0b82472d38ffe9582f3297f","sha512":"dcfad5e35fbca15107819bce2e9a9124a79ce333c397ccdbfb2ae3e9d255c64c7b03d6eb1d26e893110515729c7036fae45528f1f15ca42877b9d325f6eadc16","ssdeep":"192:SuZmqPxfqeYzPxxQrqvxC12+ytkr2j93+N2mK:w0xyF9SfJyaIoN2L","tlshash":"2e02d642ab85df5fdd2bd23019a793119ffe9171d73ad38e58852c80a8145f98c2c68a","first_seen":"2023-11-14T23:34:33Z","last_seen":"2026-03-24T07:46:01.112409Z","times_seen":41,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/krmzi-icon-300x300.png","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/krmzi-icon-300x300.png HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nCookie: _ga_EHG5W0E1YG=GS2.1.s1760011190$o1$g0$t1760011190$j60$l0$h0; _ga=GA1.1.1889860847.1760011191\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 11:50:29 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Sep 2025 09:01:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8155\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 518961\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eMJBhrKAoUw0HzUutLo5U97SZKMJPp0QnKksIXT5b5MVRF63DPgiWoZ8EnR7mF%2FraucttmgWhLe6u64Skv2kE%2FHMLNJW%2FT8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d5ef5156aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"109e78e7a577743f946a416c3b480de0","sha1":"254dff261ac4bd4f2c6ed5f093737af79c8d79cb","sha256":"d12e89f067b33443ae524d83ad51e98eaedeca11b205b591da795408de2a4492","sha512":"88e102c0439ffb07b43eeaf77754c64477febb72f16de48e0a2c811cdfe7e1e6478d696dc9ae18f2530344805a7ebec44ef7a0f506bc49154d2746264fa4fc78","ssdeep":"192:DpS5kc96j0x5H8u/lo6+5w4wpyXViYwA3Dd:VS5kiHlX+TwaVDxDd","tlshash":"abf13a9626abe31447216f661b0deb0e587ba30f31c0e2c1cb0c6455d6647eb220f6ef","first_seen":"2025-10-09T12:00:19.422671Z","last_seen":"2025-10-29T19:37:11.228203Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/DC143C.png","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/DC143C.png HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 9918\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Oct 2025 21:25:17 GMT\r\nlast-modified: Tue, 09 Sep 2025 15:45:31 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 570872\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JbJSmsiYMC6D5jaqJCXhHiNsHRWyW3MMy%2FydIS4%2FHWUGJVIgfQq%2FPl4Sb7giLU3Ysb4%2FW2F%2BMCNUdeSmcDynfcgAzlzlh74%3D\"}]}\r\ncf-ray: 98bdb6d1b85956b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 299, 8-bit/color RGBA, non-interlaced","md5":"81402e3e917e06deb4dca4fa6df8ee6f","sha1":"729b81800a5f31d6c0d8ab463d917cf35d28da8a","sha256":"cc893a627fc685c740dad3b8bc654d08a9f11c0643db2c7138a952e7b2c6d70c","sha512":"68fabf7990d154b303796ceada1d5619b3e150f041332e7946b3b065ceb56891f1b6e86f8cf2f08aec8ff245def8d5b00954fcbb56ca91fcdb95724aff9d8bfa","ssdeep":"192:LSvJnBBo6ln90AHNI2d8XaYISlyIv/roDb116guDE:+RnBBlTCvRZv/EDb1/uDE","tlshash":"b922bf978b8c89fec5fad933179706227df324226f084c076e21551521a95c8fdbcda4","first_seen":"2025-10-09T12:00:19.423909Z","last_seen":"2026-01-13T23:52:46.508403Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.207.202","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js?ver=2 HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:01:21 GMT\r\nexpires: Fri, 02 Oct 2026 13:01:21 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 601109\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85578,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T02:23:44.781794Z","times_seen":261115,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":115,"dns":1,"connect":21,"send":0,"wait":22,"receive":22,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Sahipsizler-Uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Sahipsizler-Uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Oct 2025 21:47:06 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 12:29:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 183214\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 569563\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DM94CtfYYvtpJVCgo6Xv1zSQdGMNK2dXWWPo0kBQGcKwyeYOfvd2gVfTVh6k0%2Bgm7wLa%2FbX5V4V6fQ8qQTPCPzal9PC1r9g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d3ef3156aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183214,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 604x900, components 3","md5":"7655a025263f33fb600544e3e3b1a539","sha1":"c58a37fe79c1c0c3d49e583b6ea25ad78db252bc","sha256":"d9bff3b2aa64c1df55b107cd0e7aee541a1929689f6dd017c84e9af51abbc4b0","sha512":"caf7a5f4285b907e9e87f9500c76c9431ac289867cf9e0ed0f872dad539aba2d29a47eb0ccb34485d95de4e951f095a0bee27a6281947f70e4e79d4b2b2605c9","ssdeep":"3072:qgbE5j2H8q5aUzTONLs94pLEgS4NHRTzYwRBMEozXzbIR8JTRUxP0WDuAauM3YyB:qgAWc+TnQE3aHRTzYwRyLjzbIOTRUxPq","tlshash":"e704120386f196bbc8a78f0928d1b0cb01ec5f20b591e43506f52d6d919ddbbd13a69f","first_seen":"2025-10-09T12:00:19.425718Z","last_seen":"2026-01-03T19:22:00.43246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Ben-Leman-uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Ben-Leman-uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Oct 2025 23:31:04 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 21 Sep 2025 19:06:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 202608\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 390525\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IR2%2BgiUHqo1iAeCAM8t3iHzkRGuZ5Rxixu5r0isv1mpyB5DlqYJcmZ7y9uawk66gUME1cV7QfMPqP1OuKM7E2qN70haqTow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d41f3856aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":202608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 671x1000, components 3","md5":"bb510a540d6f5f95147d3ee523c9e805","sha1":"3fb04d857e3617739a7c6c426411a6ca48157630","sha256":"47bb86f3499f24d2c3922d934f33343dc4afcf6493b8193a83a81285976233d8","sha512":"15991b52a7084eed913871d1d7137c0f5f2002c9ab127ab81e47d30824aec2bd06b3d9fc2810d5325981f75be847bd9c22071da165553a0e1d1562ff6a982b6e","ssdeep":"6144:bRAXyZGpssUdYWJHkzsDDj42S6yiOZYoyzR:bR4y4sskYEHVL4p6yRZW","tlshash":"091412dde418734390ebaa5d16f0e59e3d7a4024abca7696e5bdf7310383124fd091e8","first_seen":"2025-10-09T12:00:19.426801Z","last_seen":"2025-11-09T21:07:27.495574Z","times_seen":9,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Kizilcik-Serbeti-Uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Kizilcik-Serbeti-Uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 11 Oct 2025 19:00:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 10:39:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 127625\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 406771\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=varnMeQ6lfib0yUmKDqCZyJfNRXSyWeK7CGm5y0sWctwr9kbOBCseEZ3Uav%2F47AUHlfWig2ZaQpM6VqsdM0HlVaE0Ov21%2BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d42f3b56aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127625,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 604x900, components 3","md5":"622a4234bbc91e8f24ebae6952b32fa0","sha1":"d47e71832dbbe8ef8c64a943d562e7f47bd98aaa","sha256":"7f4b2e16e7e14b117a379dcaeaa0362c8be641f59da05669a6fb0a4939c7d6b1","sha512":"3edf84a6ee8cc77ab0f60f0b8ab3b7d8ca7469a3ea7b5150b9690d9f651701e35a5d303a57a23ae1573ac0d3bb92fc2225e78c0d5e964bb7421c306198db5104","ssdeep":"3072:VUn1WEQIimfW3zSf0nTG0FMXEYGh1vJi/GUsvDQEQl:Vq/ZW380ni0FZBh1vw/kv6","tlshash":"bec312141c6fcc26c87af9f8d95e4e9ab17d0410147a2af77636c50e663ffa312e6824","first_seen":"2025-10-09T12:00:19.427936Z","last_seen":"2026-03-23T23:07:30.9695Z","times_seen":5,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 17 Jun 2025 23:53:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4769\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 1389\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cgd3HOx358mY3rhmiocBTHVOQtOESTp5jdI6GDbWPOqkI0yYjcmONhxLPMI5t1%2FUy0jj6%2BMvtBCUsxQXw5cx06szKmKqrGE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bdb6d4bf4556aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T02:06:41.211038Z","times_seen":195746,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/assets/fonts/kirmizi-medium.woff2","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/themes/dark_vo/assets/fonts/kirmizi-medium.woff2 HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/wp-content/themes/dark_vo/style.css?ver=1759519216\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 17:39:55 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 09 Sep 2025 15:00:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63556\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 497995\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0nVaGXWrSjvK7rqCV4RAyYn5cLEMPe0pdgbHZ4IEnhbIoCjGTTHSaINgQ5LV2nKBDLv4elSLvl%2Fq5DEJrBAIJibkBm59X0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d47f4356aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":63556,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63556, version 1.0","md5":"2354050156d227ead01342d0e1bf9eef","sha1":"b3b0fa7974b8a2f084101e11f0ef81b37e494c59","sha256":"1edfe628891e13f05f8073a908df4e7a1e771557a0fca28e30309f4c42cc2f15","sha512":"8d74eed995a9ae1884aa43ae378f8449a16428500ac0c885ad2e4d37e4159a8bf1642d3caa40f4fdb030734bd1be17350348ad84652bbbc501e03dc2154db97d","ssdeep":"1536:efUPXyN7xKLydAMZ6xYUnczsh/aBXzl1ZGgHl0GXKtg:N/ykLymjYUczsh/Cl1ziTS","tlshash":"c653f1a356732481ad27a4330301cf5dfde7cd95f33ee23b1715648286828db9c6a696","first_seen":"2025-10-09T12:00:19.429658Z","last_seen":"2026-02-26T02:53:35.48116Z","times_seen":8,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/page/2/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /page/2/ HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nCookie: _ga_EHG5W0E1YG=GS2.1.s1760011190$o1$g0$t1760011190$j60$l0$h0; _ga=GA1.1.1889860847.1760011191\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nx-distributor: yes\r\nlink: \u003chttps://krmzi.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKtCqqdoIqpWgzrut1oh%2Ff%2FkN2SzOGnOPL9QvNb0mPBuQ3ja63bLbaT4tZROneiQ9ZftXwsQVszMkh3OCPnO7gHtUcK2kJY%3D\"}]}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 98bdb6d61f5556aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Distributor","description":"Distributor is a WordPress plugin that helps distribute and reuse content across your websites.","website":"https://distributorplugin.com","common_platform_enumeration":"","icon":"distributor.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":33438,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"ba376a6ad8050d7e0ed259f576641b1f","sha1":"d6acc3624d473b613a9766696b7583ee0d9f1ebc","sha256":"009975bf57be0992edb19a258d7bead7ca5eab9699cf811416c14d190144b023","sha512":"c2704af55bc513171e4f821710d0147caa84f59f6d2deb32b362604bf02ad157d3e30ee8f2402f809827f031b8d1cb991defcb498dd91a0e6296078771c56cc3","ssdeep":"384:JRwLEQd3Y726vE0zefr3ZdqZUaAWkWnVKR7iTMmFbxQOcp:JqNP0oZdapzVNF+Ocp","tlshash":"63e2853391b84062275a86dd84957a0edb529507c946fb2233fc2aa84fd7df38ca307d","first_seen":"2025-10-09T12:00:19.430921Z","last_seen":"2025-10-09T12:00:19.430921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EHG5W0E1YG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:34:17 GMT","end":"Mon, 08 Dec 2025 08:34:16 GMT"},"fingerprint":{"sha1":"71:28:4D:CB:A8:43:CE:20:8D:C2:D0:1C:15:47:53:FB:EE:1F:E6:6C","sha256":"FD:F8:A3:C0:21:C0:03:15:43:2F:C7:36:8C:50:6A:39:57:B4:06:6A:0D:82:33:AB:55:A7:80:D2:E3:79:B8:11"}}},"request":{"raw":"GET /gtag/js?id=G-EHG5W0E1YG HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nexpires: Thu, 09 Oct 2025 11:59:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141150\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":424225,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"ff0d0c20d5d3596d8ca0316d51a13ac4","sha1":"1f7c3ad60470a6744e8b9963a386043f0086bdec","sha256":"db1e524d99cb1a1cde54fc6a0693952c203feddea3b37809a771f698b716a4f5","sha512":"91b02bbc093f3d004a7d0474a3bb4213e0178d97d0cb4cd7c28b73daa2825ae36a14287575068b7e8f00924b03b03645c13e9d18ab76bdefe0276322441a0cdd","ssdeep":"6144:zBkwep26tv0njCnzGwXV4rvoB6bEGBQ5w0yN+Xy:FoYEsnjYGdo3zy","tlshash":"c09419de73d674225396f478503f018ba57b28a2b44cc89af189cde42e74a9a4137f7c","first_seen":"2025-10-09T12:00:19.432198Z","last_seen":"2025-10-09T12:00:19.432198Z","times_seen":1,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":112,"dns":0,"connect":21,"send":0,"wait":46,"receive":61,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Almarai:wght@300;400;700;800\u0026subset=arabic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Almarai:wght@300;400;700;800\u0026subset=arabic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 09 Oct 2025 11:59:50 GMT\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4936,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"a355693ad8ec263aa4e138d2e81da5b3","sha1":"4236dcfa883b1de36c0a799c04cfbee96e7a8fff","sha256":"15458b696945521099ada7b2b73aeccc5216d1464aba81ad83c12ae03e9df691","sha512":"39fde53b3fa790385d54215682e279280c3f929f1b08b65b74f003ca0557a258d6f9e8bad61d2a381dbb980a112777bc5773392495c43aeeeeecfb04577ba23a","ssdeep":"96:COW+cA0Zl8DCK9cHwOW+dNrOL+pA0Zl8DCK9cHwOL+FNrOC+/A0Zl8DCK9cHwOCs:aOClM1zClt4RCloQyClJt","tlshash":"34a16ce44c1e41c47b472ec2638d6627de4ee19920c4882dd6fd6b8bdc97d27726078e","first_seen":"2025-09-17T09:23:00.508435Z","last_seen":"2026-03-03T03:48:13.961069Z","times_seen":16,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":198,"dns":1,"connect":20,"send":0,"wait":18,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/almarai/v19/tsstApxBaigK_hnnQ12Fow.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/almarai/v19/tsstApxBaigK_hnnQ12Fow.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://krmzi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17468\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 18:33:57 GMT\r\nexpires: Wed, 07 Oct 2026 18:33:57 GMT\r\ncache-control: public, max-age=31536000\r\nage: 149153\r\nlast-modified: Wed, 27 Aug 2025 19:20:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17468,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17468, version 1.0","md5":"967e63e5eb1f4d90caa096c7b9622847","sha1":"b15dc8cbfd223c4aa780bb90fe172d62c92fdccb","sha256":"6f289856f002502ea9cc6aa85c2fd509f8aa6c3a17b5adf08f2ccc148cfeea4f","sha512":"e91fd2248c1ba089c562e497f05749f534202d78f971ce44d9465bfbbd770a8c937eba1e8528cadfb234d2e12ce4dc238a0b907d23ea80832682787019e98910","ssdeep":"384:SUnmecaWNaECata3QeJGaEWPwg7XryVkOipZggHOfYX:SUnTKNbV03QeJ1P5D+VkPZggufYX","tlshash":"1872d00a12dcdc47af483f6a1e9d3df5c7101a5b67cbdc21a301515ad66ac33c3c9a5a","first_seen":"2024-08-27T14:35:18Z","last_seen":"2026-04-04T01:41:54.577333Z","times_seen":1431,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":144,"dns":1,"connect":30,"send":0,"wait":55,"receive":8,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Medine-uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Medine-uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 12 Oct 2025 13:59:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 09:09:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 114887\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 338434\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eP4nkQ5%2F9IrcZ2ZYUEyT5j8%2FlkKB2lcOgqRamb0gkaz88BSWI2Jvu9meKd9mLuL%2BDZzJo8A6otMib4pk6rizC10rT5Qwh2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d41f3756aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114887,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 604x900, components 3","md5":"29f89bb817e2c921a36c9d25640c4837","sha1":"fd2a582f09bda46f6f505735ebfbe621d58fc829","sha256":"b7e2817a4abb0b21ba01aba5e320e288532201398dcd2632d1163fc56c4c6c07","sha512":"fb2566273d42a24ae1b93693e9a0a524787a5eaca24e972abb9180674f99982216a8224a42f739b6f28438b0057e067582ee82d371af5beb42af827a95d77ab4","ssdeep":"1536:BaWuuBVUKuIOQhJwZG1FBwMmTQu5qdEiIw0A68B+2RjvOmRQ/2dVM4t95+FA4VSD:hnXBuITX5Pm8dE1w6zma/attmFbSlB","tlshash":"6db312f7138a434b0b88e5a38530847edb2db46c63b3ba5dcd67cf6bc658856130a5d8","first_seen":"2025-10-09T12:00:19.434528Z","last_seen":"2026-01-03T19:22:00.406965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Carpinti-Uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Carpinti-Uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 09 Oct 2025 21:47:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 14:31:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 157310\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 569563\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPlONHMsq6hRyQeGmoi5nDODr6%2FLz2X46vPdQGkKaIwOLQMMWQ4VmuE7gVc4Nz2%2FZIWxSWaHGKUzXS2C8gyCCANgubFRYdI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d41f3956aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 604x900, components 3","md5":"01de5bbca95b83a7cc8df8e469a9859a","sha1":"c27d591933729d56e9449c7411f6e42c8bcab820","sha256":"1a361440051c94b57fa593aa79068bf9b9f8a62d23879c849ca6d14651e72ea1","sha512":"a41c327f25791881432200c82c4163a86440671af1270c56b69525981abac7d2013c753aaec53fd210a57a07e2a8a6219b1005f65db790f68f2a641875eb5972","ssdeep":"3072:ZUiBn/GP+gPOWzbxpUWskW/GE+mZpOz3MBfDnKKTAfZWUsyE+:uan/ItOT/93ZcwzfO3q+","tlshash":"d5f313287f282b4d8b16659074314fffa649ee9a01505262f762d2cfd470bef783ac05","first_seen":"2025-10-09T12:00:19.435601Z","last_seen":"2025-10-29T19:37:11.233286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/almarai/v19/tsstApxBaigK_hnnQ1iFo0C3.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/almarai/v19/tsstApxBaigK_hnnQ1iFo0C3.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://krmzi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 19:12:34 GMT\r\nexpires: Wed, 07 Oct 2026 19:12:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 146836\r\nlast-modified: Wed, 27 Aug 2025 19:20:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31672, version 1.0","md5":"4756b35de4e7e1f9e58fdda1cbb8d2c7","sha1":"1649000ecb767a1612ffd29a171882530ebdb648","sha256":"530903c9168cfc13d3ef363b71c042d5c887476c4454a91223309465ae89c87f","sha512":"0715794e4150ef8d011f8eb522dfa744c7850a2210399cc2401a73d3c8ec0253b63ca14598098bdce6b1a5f45e1ce160222ca5a3481bb31c4afdc688079adb4d","ssdeep":"768:ourS3UVP4cIQQQ1M9A1cwFJrPHPAydbtFbdn:ourRB4c/QQ1MAcCrPHPRtFbdn","tlshash":"abe2f14e16123640e337fa9952625b539cce356d8c9f4267f03f758989d4b6113de3a0","first_seen":"2024-09-01T11:45:20Z","last_seen":"2026-04-04T01:41:54.551834Z","times_seen":528,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":133,"dns":2,"connect":28,"send":0,"wait":29,"receive":29,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Ask-ve-Gozyasi-uzun.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Ask-ve-Gozyasi-uzun.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 10:17:46 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 21:03:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 118029\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 6123\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XrFHzy98wi1M58p8rqiK83%2BjgjPZgcTbOA3r%2Fp8J0A2Y446Fr9us036ti26PJBwmz732KbAvwLQIA7vyBAGEugZB%2FiItfOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d42f3c56aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":118029,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 604x900, components 3","md5":"5d02f0c954471739e2ab33cda8048628","sha1":"4222eca795358ae7b5a465b28b818a7752b2c932","sha256":"c872df5d80d77f76dfe39dfda1bb27266653091a0d9b0274bfc99941e773427a","sha512":"1eadf7c7c9ca1427717d3e43afe4ae200ba2e97f06bdd60806e9c24141de1c46ba85cd9118346d20b3fc1195679206b01942aecbd21845001205fdbe612da1f5","ssdeep":"3072:pVsl3FzqTqV4Ba7PgDhd2sRaBhEspBs/Yxou/mO/JlujJkZpXsoNuB:p+l3FIiF7YDr2sc6sp1xxH/Jllvs1","tlshash":"11b312b2becd12996123347983f00fdd61d8764ca68474f863b27e136fba50259e1c5e","first_seen":"2025-10-09T12:00:19.437453Z","last_seen":"2025-10-09T12:00:19.437453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-09T11:59:49.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 11:59:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-distributor: yes\r\nlink: \u003chttps://krmzi.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jiHQC6bNdiFJ3%2Bov%2BmJ78Zd5H6pIfR3%2B51buE45w1DCXDJClDbNmxzUmxRsX0ke8ExWeQ0OPN42%2B04ZGseMrwtdJGsx2QpU%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98bdb6d0af5056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Distributor","description":"Distributor is a WordPress plugin that helps distribute and reuse content across your websites.","website":"https://distributorplugin.com","common_platform_enumeration":"","icon":"distributor.svg","categories":["WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Redux Framework:4.5.7","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":33271,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856)","md5":"cccdcf598f93785a7fce3f55211ebd42","sha1":"1cc4bbc7aa7916efa63524abdde11a9d08acf6d6","sha256":"f7ac586937f573e9c15386186e062f0e597fb35019b9eb577e897fc57113c178","sha512":"a23a74095ab55e64a6e8de9132fa3cabccadaa3ed4ccdd15dd029e3d2af4c1acb030f8147435bfb8db67fb640c54ae1045fd2f53dfafda28a9d5a2d97a2877c2","ssdeep":"384:JRBEUBY726vE0zefr3ZdqZUaAWkWKVK67iEyxRQOcX:J3P0oZdapzICuOcX","tlshash":"75e2963391b84062275a86dd8495761edb529507c946fb2233fc2aa84fd7df38ca307d","first_seen":"2025-10-09T12:00:19.438861Z","last_seen":"2025-10-09T12:00:19.438861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":296,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":292},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/assets/bootstrap/js/bootstrap.min.js?ver=2.0","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/themes/dark_vo/assets/bootstrap/js/bootstrap.min.js?ver=2.0 HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 8958\r\nlast-modified: Tue, 09 Sep 2025 15:00:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 4561\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2n5fenUouipHksffKWzMSOi36xBruVAhG%2BeZp%2BMyDE5NeS5b8szFvIXPSgGFy5PSo%2BzTyUwvla43yLoCo8hxOz%2Fj3WVZIQ%3D\"}]}\r\ncf-ray: 98bdb6d1b85c56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35282,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (35282), with no line terminators","md5":"fa4447550b446ac73a77aa6c7582476d","sha1":"44fb7da919b5c169af65fbba84114c6b8233f704","sha256":"81106ddb86f999330c3dd90e9f7315f7341ca70e74f1b129e98ce66767c7a825","sha512":"06dac937d85031a2217f420e88306218e85305bcd940abde94de4557b7a5148bc672ec6502fdac2f8c8bfc5bbc7fe881bb601399986e745d86dc141bdcd8fe80","ssdeep":"768:p8LJD27UwlNAMlbWqXYR+jS1s8ep0smQirXf8u8GfpZZSQ:2Y7NBS1W8v8UpZMQ","tlshash":"f8f29546b270316107efb1e5415f020e72396a6ee90690bc78a5daf63db9c48317bf39","first_seen":"2023-03-10T19:54:32Z","last_seen":"2026-03-28T21:57:45.242742Z","times_seen":170,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/assets/js/core.js?ver=1758375748","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/themes/dark_vo/assets/js/core.js?ver=1758375748 HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1522\r\nlast-modified: Sat, 20 Sep 2025 13:42:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 4561\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uc0fWsR4unbeUY82VHbwiZW4FKZz2eaHOHYeTspx2qJ9LwwCEKXeU1P%2FIGCc1iqnNep%2BM2aH3o%2Fk6aIhHuQ8PfpuEJoihFM%3D\"}]}\r\ncf-ray: 98bdb6d1b85e56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6311,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (762)","md5":"6f86437350c0b517585fd825d8bc9ea8","sha1":"67e4b66593508475852ebc97f0de9616ae7c78f7","sha256":"1776242949e07353ea4b92e65363cc432eaa5761b35e72678b2a9891443c1c05","sha512":"3465f26ef06a2207cd3aef78024bfab098cbaa825878debedc4f60bc44e8fd0e10607e76a335f76b2cfceb8f90e7323b5449a9c4c3b9bf90518bc379905425cd","ssdeep":"192:+m/MC9YdKWFbuhvP5bQpkx84G3KcKsKDKQ5NO3gya:+qKBIya","tlshash":"29d18617709700ba003f3995617b0582bd7fe63bf54aca03be5cc5ac0f90a25b5d6a6e","first_seen":"2025-10-09T12:00:19.441687Z","last_seen":"2026-01-03T19:22:00.398722Z","times_seen":4,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=El+Messiri:500,800\u0026subset=arabic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=El+Messiri:500,800\u0026subset=arabic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 09 Oct 2025 11:59:50 GMT\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2017,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"5aebfcf482bcb35fe80b8a2733b16384","sha1":"c2ca96248ba51d4c816d452aa5aa6694c283a38c","sha256":"287df6efeaa03158842800aabcba7ec7b9ef633e09868e3be65b82c920b33df9","sha512":"b8729333ef54959f3e2db25ce0b47c0727f2a7860c28c00bacb7bc1f8e286cf70a501787a43f0453f2c3e552a34e2f03886f1f8f29855390fb82000e83a9a363","ssdeep":"","tlshash":"4341a9e0081e8084bb471dc2a38dbd37ce4ea1982085857de6fc5b8bed6bc25326078c","first_seen":"2025-10-09T12:00:19.443047Z","last_seen":"2026-01-03T19:22:00.445217Z","times_seen":11,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":152,"dns":0,"connect":7,"send":0,"wait":22,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Mada:500,800\u0026subset=arabic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Mada:500,800\u0026subset=arabic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 09 Oct 2025 11:59:50 GMT\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3268,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"12a0f98a7dcdb7798d6510eaebcbaede","sha1":"56ebe583947e0774753d054cfc82c41a0d3a64ec","sha256":"c24252dde1ce06bc211428306272c452b517696ee28252610982fcb22dc10482","sha512":"9ffe910a8cdc9583ef8591925d7dd1570785cb69c37f35f10efcaec31c057e7d0672e49222c65f7afb3f79b2b3986eb3e9326c6680a089f01f8668264ebdd7f0","ssdeep":"","tlshash":"d4619bf40c1e51847b8719c1638db923de0ea1a56085886c9afd2b8facabc66736174c","first_seen":"2025-10-09T12:00:19.444239Z","last_seen":"2026-01-03T19:22:00.375475Z","times_seen":11,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":199,"dns":1,"connect":28,"send":0,"wait":18,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/assets/bootstrap/css/bootstrap.min.css","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/themes/dark_vo/assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/wp-content/themes/dark_vo/style.css?ver=1759519216\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 16 Oct 2025 00:50:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 09 Sep 2025 15:00:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17775\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 40151\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jc37xr17W0WdMbKjZp19dwl4E71W6QXEq4RhDTRtFS%2FbTqoxR%2BH8AuuvlosjESCLvNKYzOIIDr9aAqN3l%2Bo6mVHQNffT2lg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98bdb6d20f1656aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65371)","md5":"58a49b3689d699cb72ffda7252d99fcb","sha1":"973e37a8502921d56bc02bb55321f45b072b6f71","sha256":"d31bef450ee67b64f9b70bfdf41fe4e00c65438705cc1fbb48ea6026d3a5d697","sha512":"156cd61afc94eee7a8db549b8680a7aba63025f0ec8cf11af46f9298b4474c37d88f4333604b871657ec5415909609827761ec8c729e41857dba5fd2e3ae177d","ssdeep":"768:pyzGxw4vyBQWlJxtQOIRFHlgmyITm8qAlSFKbv2ctBDIq50Qfu8psYvS1Fz:hw4aL9IRFHlgmK8pPb5qQfpC","tlshash":"01b3d8a0f21031ea7333c55a71d0ed872219a153e66b4eb7f22f25d84f856ca1673f1a","first_seen":"2023-04-06T15:08:09Z","last_seen":"2026-04-03T08:40:27.430544Z","times_seen":2332,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/uploads/2025/09/Eshref_k.jpg","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Eshref_k.jpg HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:26:27 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 09 Sep 2025 15:14:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 151321\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 45203\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwDJzPvAEPSx17kRut3AmFoJvtwAmCfIJK5b9J5N07OOLSpZAKoO27yRQSjEFcfVMe%2FvsN%2BtszjcJzQcKvDl2hij4t3XKKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98bdb6d3ff3256aa-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 671x1000, components 3","md5":"2c025c55b8c1f10fa164f0f12d1f6550","sha1":"33b4cc03d53dd451790e9b4208de6f5c365ba907","sha256":"f6a00196dbede6fcb65c4a44ae8a3abe912f627877e9454e34be2f458b749f90","sha512":"b22406463f6e5befdee68f206eec88df3f2c7fa46830a6bb6b88d48e228fbdc6681c364c62659fe858df901eb002f4c916afb9e1827b8d9837c77f134898cf59","ssdeep":"3072:pmA5ddP4/9c0XuyDj+Wf6MaFM03Pk5m4NBJWyI6l2/khYYe3:pmA5d2/rXuQj7Y/PimujM/W+","tlshash":"4ce312188453fb195b9c2570e2e72f451605985f5f14f33b8b5692323ab0eca8f8efa4","first_seen":"2025-10-09T12:00:19.445911Z","last_seen":"2026-01-03T19:22:00.387153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-includes/css/dist/block-library/style-rtl.min.css?ver=6.8.3","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style-rtl.min.css?ver=6.8.3 HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 14312\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 13:36:42 GMT\r\nlast-modified: Tue, 08 Jul 2025 11:02:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\nage: 80587\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FertQ2uYd9jrfcjTx64GCydDspTKuFu9MaHA2c8JMDwtwmDl3VSEMc8G75wr3lPvh84944%2FjxBr0N3gl6SA2xE9csqPrdVI%3D\"}]}\r\ncf-ray: 98bdb6d1b85556b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116125,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"54c9de0fe3fb411ac77c80177553c945","sha1":"c709822381b2ec257c32c710a0aa491cae71805e","sha256":"b72af2a99da29d8b24b03e515699082cd259309c94be19052cd125e548f44eac","sha512":"5ab5e4842e1173a7d36c4d69fbbaaf088a08b1c5a26d755853b9cb79bd5c64b8b5055017e9c48e44ca57c6c4e714b1bd9851d18a25f335d99b3dacb2ce0a5fa2","ssdeep":"3072:xGeJdDuQg5Mujx+qehvP0x2+dHftj03sq:hDuQg5Mujx+qehvP0x2+dHfF0B","tlshash":"34b3621417b4dcf935ffa73a5e4ee258a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-16T01:17:46.855772Z","last_seen":"2026-04-03T11:05:14.867765Z","times_seen":1205,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"krmzi.org/wp-content/themes/dark_vo/style.css?ver=1759519216","fqdn":"krmzi.org","domain":"krmzi.org","tld":"org"},"ip":{"addr":"104.21.2.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://krmzi.org/","date":"2025-10-09T11:59:50.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"krmzi.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 13:30:44 GMT","end":"Mon, 08 Dec 2025 14:27:50 GMT"},"fingerprint":{"sha1":"26:A3:94:22:CE:3F:91:43:AA:3D:DB:60:EA:A4:C5:58:EA:B3:CA:29","sha256":"2D:FF:82:9B:6E:37:31:8B:BD:FF:46:33:00:24:CF:A8:1C:EA:0F:B5:E9:AE:99:96:A9:42:E5:CD:95:D0:33:43"}}},"request":{"raw":"GET /wp-content/themes/dark_vo/style.css?ver=1759519216 HTTP/1.1\r\nHost: krmzi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://krmzi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 09 Oct 2025 11:59:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 11286\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 21:11:09 GMT\r\nlast-modified: Fri, 03 Oct 2025 19:20:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 485320\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrpzYAYZxH0mAn3z4QYliG7b3iOeoymeJVAI%2FJ5qE9S4xVu%2BmnC585SxPLbed%2B7FPvYICqS4QMekLAp9%2FExSu7Jmry0S5lk%3D\"}]}\r\ncf-ray: 98bdb6d1b85656b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":69636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"422329d89dbcb7da6602096eaf6efe7a","sha1":"6d9ebe0f2a0708cd15f787b7d41113ead2287470","sha256":"49ccc630b501eccda2a0f58bd27aae8405b8e78fe1e46fbb4de3438623de64c1","sha512":"d31d61f3f69cbd4b1b967e2752c0fa12ebf1c1a6bd41f18abeb91ff434910f516be94fbabf02e17229bd13bff7a64e68d13c0418a1ae261fd7e82031214da2a8","ssdeep":"1536:Vjy2yhc82NoAYPhCo6Jt5VxgTGm/HqB7CXOPmiBqHZ8AFauqZk4WA:Vjyhh6ozPhCoCt/xgx1+PmiB6rkK4T","tlshash":"f26333a69ab30d44b817d1a85fea57d533685003910fcc6dbf9cb25c9f8e5e484a2f8c","first_seen":"2025-10-09T12:00:19.447619Z","last_seen":"2026-01-03T19:22:00.396992Z","times_seen":3,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-09","alert":"Sinkholed","trigger":"krmzi.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}