{"report_id":"3cfba6fa-7899-421e-a7ff-4030b156c85f","version":6,"status":"done","tags":[],"date":"2026-01-05T12:28:44Z","url":{"schema":"http","addr":"wangsa888.org","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":0,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wangsa888.org/","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"title":"WANGSA888 : WANGSA 888 Game RPG Online Cerita Terbaik","dom":{"size":192347,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42728)","md5":"d00ecac18c8959b62f59d95a4bc1971e","sha1":"02bc623ef97f5d829d813b883da7527efe479381","sha256":"c70ab0c0f76a0468725ad0026bd2a4bd594abe1778e989734b2ecd59d3ec39f5","sha512":"657307e1402e277ff8510c054d161afa9a015a4a7249d4f970386dcfc0ae8791a730090761f34f6b59116373746bff60de6502f5cdc8ec15e8eee8046f412865","ssdeep":"768:ShsWk5F4g5A4WR2vEYV1HtyQl6EKIVMnUYvtRhFU5Jt+zuC7LEZFUxC0GLl6KAWJ:BZ5F4g5A4WR2vEQ63X6QQEXxJFi","tlshash":"c514c563684d025f6217c382b1e8f9bb9d55c90bc9315e49f9ae6bc8c740f42767a32c","dom_hash":"domhashc2de70dfeb61a0af307928dd8a5c1f4c","first_seen":"2026-01-05T12:28:56.216461Z","last_seen":"2026-01-05T12:28:56.216461Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wangsa888.org","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":0,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T12:28:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wangsa888.org","ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":156,"request_count":78,"received_data":2273359,"sent_data":37391,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2026-01-05T04:25:09.345605Z","alert_count":0,"request_count":5,"received_data":340718,"sent_data":2282,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"161b5c3f07ca9883b27348929f01fd6c","sha1":"0dc7aa7beb1ff2109bf3d8fa707cb1e5826db7b1","sha256":"14d64746e0d96d655afd7379ba088df4fcb48f73ae54c5cd1cd3a0dcb0961fe9","sha512":"119fdbca88688e5ab26343e471de5bfe118902ba7222dd95d4d80015abc191c21b35961dde56712f47bcee06c38a9993145111ba0968d211eded944e4b159f1b","ssdeep":"384:4o39KdedznnHLaxp6ulqaa5F4g5A4WR2vCk:539KMdTraD6ulDa5F4g5A4WR2vCk","tlshash":"bf42a460a60ba2ac530342f488f5b856757ccd4fb8504079f0604ededf8ae54bdbb96e","size":12361,"data":"","first_seen":"2025-10-21T21:58:19.30229Z","last_seen":"2026-01-06T15:18:48.76517Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd7fb3df248dfd53c3e4adc347f400d5","sha1":"722cc47fbcec7a209c9907d5f8d2f552fbfb52d7","sha256":"2a4b2b1d1c8a661df643651477272e5c17b475b898809655ec6e1069e85d5a54","sha512":"1af38cfa945c06aa9ea189b46b30099f1e6aa4cd99252b05696ce19158371d43f700b7864146fec5f8e38a9d7cc59cad7a321c1150bb8b8c640dc958f9d32265","ssdeep":"","tlshash":"9a71c6b831c6b4b75b963cd254275401ea39643b3407c878b168dfdf693a85224b6e3c","size":3802,"data":"","first_seen":"2025-10-22T01:17:18.358209Z","last_seen":"2026-06-20T08:10:00.903934Z","times_seen":507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"58e01820fae2f246afa7032998ce744d","sha1":"92b1d6a2cad22bae0ea2bb5889d8d659d85a76ae","sha256":"673423535df2409def19ba72ffb15f8718c43fe291c1b2f86759f57b36a3db75","sha512":"5feef48700d17d018dd9b155aed4cf1d0e2c932a1ed3ea415eb7f3d2caad396296230b199535d2a56fcc04e3c5a8e34c06e5c3cc7cdf6981725b2a79bfe2b573","ssdeep":"768:6XCsqZr5zK6LtckYUNDtRT+Tf0BURuSlnc5Ql0p43fHLX+L/4OGeXwYKAuLhW0Z9:MqtdMLOUESdcw3zJORJpItkDU","tlshash":"b713ebb53292a43747d648e694377012e32d2956300ac8e8f1aceecb7c77955b1b5e3c","size":41956,"data":"","first_seen":"2025-10-22T01:17:18.362777Z","last_seen":"2026-01-06T13:57:08.753269Z","times_seen":478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"493e3814e3423d51835474b9dd8736e9","sha1":"0b8547c90e22b93c24cf6fda90359bebb17ee741","sha256":"614283c105067ad2cfc2d384beb4b42ac1f6dbd000d6ed9a8f94360cc519f56e","sha512":"0f025c6306a9d8031c63a1001e0e14cc5c62bd6e48f17e4c2df9e4e0e494dff23d85f35a3f816541e5eaf883f931835539223009b878b2f5719d5a5c75e7f9a5","ssdeep":"3072:YHF2lahpWCJEMtfIWdWwY6nehjr7TAwOHkJISg3:G2lahpWCJEMtfjdxnehjr7TAzHkJe","tlshash":"0f24c5a53296b03247e554f5d4770102e3296998340a806cf8bceecb7cb9d86b1b6f7d","size":228272,"data":"","first_seen":"2025-10-21T21:58:19.290827Z","last_seen":"2026-01-06T16:22:02.160599Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/dana.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/dana.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:22 GMT\r\netag: \"952-661ac8f4-cae28;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2386\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"0ac7748e31189f27ac5971efcd30a7eb","sha1":"dd29489b4fcd79567d7c278c3eaf6388a76c77a8","sha256":"5c92696fd590f184864bf00db29cb20da1b443dfc93f8377f14461f35b09f547","sha512":"b62c34f57eefae9fd1754964e314dfc792c7466baef2b08c7331889b47a222f0d981f8a03de2db56fa97083e90bed1d011cd9c655fffe7e5f0d84ea82057a3a6","ssdeep":"","tlshash":"2b410ac9f512bd2166587c825dcb81378531808448f1f922989ef04dbe782eabd3cde3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.586796Z","times_seen":1934,"resource_available":false,"data":null}},"time_used":2292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-telegram.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-telegram.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"be77-661ac8f4-cadfe;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 48759\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2133 x 2133, 8-bit/color RGBA, non-interlaced","md5":"e842e22c1de9eb77437b73f8558ac71f","sha1":"e70468210bce759444d491275719626e47402036","sha256":"03a85c43f49837f98a108421f6b06a378af67cbd5577a863cee66692fa45e141","sha512":"6f34f4065d53a656fe16034bf82d05b3d44602b5201fd792bbd28f5125e43121d93037478917173d4e94b42b522fd623147eca1b9e2581ebfed048a50bcfe02d","ssdeep":"768:1M+gwJhxCG03eEwrHSuKCRcugioi6zZVnZpbyxVGw/LzWngiUNEq9AJR:1hAGGL0RcuxoiCcguXRi4hUR","tlshash":"5a23bf399cdf1b66c9cd307a64b90e83fa7653a0c48c7e1853bc85756ab52383841ea5","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.529718Z","times_seen":258,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Daily%20Wins/Power%20of%20Thor%20Megaways.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Power%20of%20Thor%20Megaways.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"352b-661ac8f4-cae40;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13611\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13611,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"7c4baaab845322f1442aa1915d560dca","sha1":"3b5c1a6a71bda9d697dd73983bfc53104db8fd8a","sha256":"d10061715b007ffb80ea25f54895e800979cc23296ef6138718fa945858a6b33","sha512":"b2d81c7b281a78e2c64684b901c6a6888741d90430666e67148ad5afecdf42b4816d074c267d4c426c019426bbedd07651de0009e1929d003b29bdf7cd849a08","ssdeep":"384:WQKztbsLdQVwY3veVyARi9RO6ppfAb/C5xI6:WTdcdQVwkzRMu5O6","tlshash":"b552cf4ce51338818f9a769a01e91b435f5a0b0ce187e4fe8d8ac842d890df784269ea","first_seen":"2023-06-15T15:03:24Z","last_seen":"2026-08-04T09:30:01.630715Z","times_seen":797,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-gacor.svg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-gacor.svg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"1def-661ac8f4-cae0c;br\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5154\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7663,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9ac3698353188323aca1e72b0b415da","sha1":"c28c2c237808f3f960aa78f35880123679e14084","sha256":"f80d635418113fa7972b15027e670b2706ee2820163b62b2f27145f9073ac0b0","sha512":"7aa2bf1158e6546e9e8dd9784f7f67f95cab57d65d918b0598d781f26b5f973776929af9976112d7cf0d0bdb187dad6ea59bd15d126f0d7b2718dfe4802c8cc8","ssdeep":"192:1opYUslj6GuF9Tf9kLkAPEj18y2Ysi4My8O+:1oSlmNF9Tf99AEJaY348l","tlshash":"10f16c19a178ec2fdbf4817270a740546f1a5093f3b357c44ea203b38a0da55049aefc","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.548572Z","times_seen":2068,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-fishing.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-fishing.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"15bd-661ac8f4-cadfb;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5565\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"5174daadce70788f7e5e790de6704ced","sha1":"2403940fce4ced39c935bd52ad6059853ef7c6fb","sha256":"80f7d6a1a12e67ad9cf1c0b4375724db47ec24ccb45fa892555224a8ec87f595","sha512":"4a852407300378ca72207b5ea0ac89a0d75fc6ab77c86d196fbedd84056fda147169527a5de24e4e05766a83e828b18964d5452723044c6f497a446bfa99b786","ssdeep":"96:iZNYjQWqgJKm4eKHYdI0FFc3ztLM9PM1CpwdLkmY0EsOGcfEkKNtKjMVQqG7CKW1:uNGjJt4eVO03mINM1CWdLk10VnQlKnKg","tlshash":"a0b17ccaa31784a3ad43fd3649b787a951d2c8071503ea379ce2312b20054a8fe776b4","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.615503Z","times_seen":259,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/microgaming.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/microgaming.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"99fd-661ac8f4-cae11;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 39421\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced","md5":"c553716d56f7133dea04aa6c637d914a","sha1":"266c9f6f7a7f4510b31a2a6f1e237a5ab69fbf30","sha256":"5e8dabba1c832d5ad2c961cdac28466933fc04e0485120d6733fc28f6abb6fca","sha512":"47f8564d40006a86a0097e40917ce92f7c6835556e8f708acb7556ffbca858f4d53c65a9c57c83a5b790ef075c3d1dd766bf3777d66dddd7d7fd6cba35094e52","ssdeep":"768:uTY3U0Uy9aNXd4N5a+Ng880I01G7uuyM/l4waOVe7fMO1MPK:uTX0Uy9apqPNg8KqerXez9MPK","tlshash":"4d03cf6ecc53f84cc8cf4a75af1c1f50b26d41e8d2aca76942b844319fa22dea226191","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.600975Z","times_seen":961,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Hot%20Games/Wild%20Bandito.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Wild%20Bandito.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"946b-661ac8f4-cae3c;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 37995\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37995,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:51:02], baseline, precision 8, 200x200, components 3","md5":"cdaebe9c8be4086ddc5ee2d93c1a63bb","sha1":"ce8617450b7e8d7678d8bc303cd0e771b801f93b","sha256":"62bd30ab434a0ee6d0dbe6cf21099083c195681c70acc29b19407339ffcfe0dd","sha512":"7fc4234bc8ffd6777660755ee6bdec59e661b66c688a996df9453e585f036041b3f918ff3cfd28b42d8fba2dedb3d3d45d7eb9c0f9480fc1c87e7273e4d0ca85","ssdeep":"768:BYyF3s3x/O1Wn9oQwlP4Oq5aWNL/R8yjslJsZ9fEj:BR3s3x/O+9oQk4T9/Bs3sjEj","tlshash":"7503e13f433bae21f6d19a7c59dbe5b11363d712a3e61b10742d5a322770df0ae8a250","first_seen":"2023-10-19T09:39:50Z","last_seen":"2026-08-04T09:30:01.618328Z","times_seen":805,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/poker.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/poker.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"d04-661ac8f4-cae00;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3332\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"eca48e2ad6043a3361008e4ad9690c1d","sha1":"6e10583291bf968fa7687d7d34e0c7dca8fb980b","sha256":"5e0218c7d1a3d299cedaa841256a903f308b5dede8c058608cf11539daae1747","sha512":"193f65accf945a2084fa4e9c0ed551c1f022b554295b240c225236f9e792e1448272939b0112c5f3769b2e47d1e0ee97dbcf9259e847508d071da832c5ff53cf","ssdeep":"","tlshash":"e0615bd723fc8609ff0f9af09fe818d4639bd085f10111a0f1ebd824eaf062a6162c58","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.560413Z","times_seen":259,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/webfonts/digital_sans_ef_medium.woff","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:19.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /webfonts/digital_sans_ef_medium.woff HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://wangsa888.org\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"673.8\",amp_style_sanitizer;dur=\"390.7\",amp_tag_and_attribute_sanitizer;dur=\"219.4\",amp_optimizer;dur=\"33.5\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162179,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40935)","md5":"2fce31bddac17e4d7c6e0f2762b5f998","sha1":"7484051677f24361d289f170fe3d2b16f3bfbfa4","sha256":"02ee7512b253f990b31d4c1b9e898a7094df518341e080d76ff2d462902efc79","sha512":"03469ce23bbaf0b47edb8508575f845ebbe4d5687c7766fbe79155b133f4567238c5d6a841c3e8c524566b1e82fe646c70a5460d9ad8af262838aed906cb5a5d","ssdeep":"768:FhsW+u/UXyCl6lTzVMnUYvtRhFU5J7+zuC7LEZFUyj0rctEXVG6AM0wwSsyoUP9t:cZ6RqKQGEX1FL","tlshash":"3df3c563294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.233656Z","last_seen":"2026-01-05T12:28:56.233656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/cq9.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/cq9.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"ede-661ac8f4-cae13;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3806\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"bf1d52938982261ddcc79fb95c2a67f4","sha1":"f51ff53053d641f7cf4bde754fc958e48d682656","sha256":"c919e7e1680f99113b1a2d673dd57218002ba9ca1b020c51d5aa035778038ff7","sha512":"0d5e74d3d48092626a8c2cee6fea119b29efab3fdf5aebcfa3a61c26dc02cd7ccdbf9e7655cfef3b9effa0fb9497338516bd8e03a85680f100bc286aab7eae7f","ssdeep":"","tlshash":"85716b68e6422841968cf5d6a4a81c637d2f00400b90e930c4dfc46a3eb6ab14b9d6cf","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.532542Z","times_seen":2066,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/gopay.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/gopay.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"a06-661ac8f4-cae21;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2566\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"b8771de54536e9d754dc58a51d9da827","sha1":"5740b8950fb4137da7040b6e929fef6a371504d1","sha256":"450c5693b4a594e025753ada485c95646f6f9b95434887a2b9be52776aad1397","sha512":"6388ef540f6228b2423372814408aaa0bdc01ea66dc9dcaee162c9b0813677177fadac544b34ac7f6b3b472bfd186b9f1d6a86921e3f5794a6b2fa9fa8a06f9b","ssdeep":"","tlshash":"fd511a1dfd04bc43315de2671ce15526ca04acc0cde1da2bb65fc417aa746d04aaa9ef","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.602204Z","times_seen":1933,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/webfonts/fa-regular-400.eot#iefix","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /webfonts/fa-regular-400.eot HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wangsa888.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://wangsa888.org\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"928.1\",amp_style_sanitizer;dur=\"725.3\",amp_tag_and_attribute_sanitizer;dur=\"165.0\",amp_optimizer;dur=\"51.7\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15852\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162170,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40935)","md5":"8c0bf18f6f2b65d8adccfd478c88f7f7","sha1":"449886d24b78a5d34ef0ba2fb9f14ee3b3b6d7b7","sha256":"da98f8633c58156e86cef37eb42b9eb28e3718b7f09001420b1efc086eca1792","sha512":"6dd11341ee88ce8c4d9e86b25cea6a28a7c5e0c08e2ca31ce9d849e673f0e5e3b28320bab4eebc1478ea2a71328205374106f1b7c426fd7f4aa2cebf507cab90","ssdeep":"768:FhsW+u/UXyCl6lTzVMnUYvtRhFU5J7+zuC7LEZFUyO0rctEXVG6AM0wwSsyoUP9d:cZ6RqKQTEX1FH","tlshash":"19f3b563294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.241202Z","last_seen":"2026-01-05T12:28:56.241202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Popular%20Games/Mahjong%20Ways.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Popular%20Games/Mahjong%20Ways.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"8d55-661ac8f4-cae46;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36181\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36181,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:50:58], baseline, precision 8, 200x200, components 3","md5":"540e5241cdea133a269685d02ed68e9f","sha1":"d00610e7eb188d7443a4628be6f5abcdb7a05d44","sha256":"1b07c49de746084a404bf269f5a352d28732b5b2da9581505f96a591653cca33","sha512":"dd376d627e63a80e092c9d27012f7008ef54d86c41bb24be60d905514be37a19bd9428866c7a3318a382a523c8219afc74c038d429ca8bd9ec7326123cebdf70","ssdeep":"768:BYyPQcWCGuOxPOHorvnQDi+W12uZyST0WHWBpLEeKnokJii:BMyXiOHoii+W12uZmWHWBpLRKok5","tlshash":"59f2e115fa219c22efd0ccb859eec2ab6383579137e38db5f9ec980163508b44c4a64b","first_seen":"2023-08-28T19:14:53Z","last_seen":"2026-08-04T09:30:01.51938Z","times_seen":834,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-togel.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-togel.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"a49-661ac8f4-cadfa;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2633\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"25bb07af75efb78ab5052236d3e18c89","sha1":"f9f2789aa0589e9c357bcaac7004907f62a4d0c3","sha256":"47dc0f1628617c208bd66d70633cd3332cd49280e7a15f98ed43cb93dc68d59d","sha512":"12bce84fc45d057b822131d9d4a01b90c301cb3b1d22e8e05c26618b4440cd4212f7f866ef7da4352e61b9087cbac79b4f0a42b6297986cca364fe88e5fd936c","ssdeep":"","tlshash":"25514cf5077900fdcb730c06610e38dede47e808a982b7070ac9ee6db5bdab169005da","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.595099Z","times_seen":259,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/ovo.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/ovo.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:22 GMT\r\netag: \"90b-661ac8f4-cae30;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2315\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"c651afdf017b6e14b8ccf644fffb90e3","sha1":"cdefc9ffd4d0a101dd34fa8d0d72f31e20c203be","sha256":"860d314b9b8e36b5b22a81e02ea6d13290d85203ecb2e0ee3803ff5115ded872","sha512":"fc639ac833e9f4f15c6238d0c39ca5753acf20769db0a0a204a1554cfaf5fdb6bdcd75ad8f4fbb3643e9b11a9979548f9d4d6794eab648a875a202e86a293c59","ssdeep":"","tlshash":"d0412b46e6929d06079cfa9164e702bad6610f90e4f0e82b749ed40d0fe42fc6a6d5d3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.565721Z","times_seen":1934,"resource_available":false,"data":null}},"time_used":2290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wangsa888.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 63577\r\ndate: Mon, 05 Jan 2026 12:28:18 GMT\r\nexpires: Mon, 05 Jan 2026 12:28:18 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"86ad2a67437295a6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228272,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64621)","md5":"493e3814e3423d51835474b9dd8736e9","sha1":"0b8547c90e22b93c24cf6fda90359bebb17ee741","sha256":"614283c105067ad2cfc2d384beb4b42ac1f6dbd000d6ed9a8f94360cc519f56e","sha512":"0f025c6306a9d8031c63a1001e0e14cc5c62bd6e48f17e4c2df9e4e0e494dff23d85f35a3f816541e5eaf883f931835539223009b878b2f5719d5a5c75e7f9a5","ssdeep":"3072:YHF2lahpWCJEMtfIWdWwY6nehjr7TAwOHkJISg3:G2lahpWCJEMtfjdxnehjr7TAzHkJe","tlshash":"0f24c5a53296b03247e554f5d4770102e3296998340a806cf8bceecb7cb9d86b1b6f7d","first_seen":"2025-10-21T21:58:19.290827Z","last_seen":"2026-01-06T16:22:02.160599Z","times_seen":830,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":172,"dns":77,"connect":8,"send":0,"wait":30,"receive":31,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Hot%20Games/Lucky%20Neko.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Lucky%20Neko.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"8f0d-661ac8f4-cae37;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36621\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36621,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:50:58], baseline, precision 8, 200x200, components 3","md5":"66871e8d699d8104a2e5127c5e388d55","sha1":"2f0ced559bfeee0db7b781e1fe30ee45c048393a","sha256":"ff2f019ff72505b31c9c11b57226063a245ed9dffd7109aaffbdca0b9b9a4261","sha512":"323e8ac749e225552ceaf2c26be4155c73d4b425196b940cc2ebf5e519b43dc6e62d1a86f374861137f45c537c8f9c154c5f6e11ec7cf1cb187fcfffbea0e372","ssdeep":"768:BYyq49n3wUkaz4l3WGolyag1Ty8oW+gD+bkhS82vIYD:BOqgEk5Glyag2fgYkhS82vIo","tlshash":"06f2e1b97642cd21ef55bc70b2e69f8bb1417268d39302b5f89dda0a3f005b05ec7269","first_seen":"2023-10-19T09:39:50Z","last_seen":"2026-08-04T09:30:01.617588Z","times_seen":795,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-beranda.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-beranda.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"64c-661ac8f4-cadfc;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1612\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"d755bf297a8c52c28c4e5a3d6ab84475","sha1":"8d28408bf5a648aa044ec4c542312541ecda1609","sha256":"c596b1928c98b8c0cea80f446a26c8e3be38198e6e3bd5036860d0eda67354ed","sha512":"727fb6ae02ffa28e67d3804740fe5b7813d8939fb2b944eb95e116ee563abf7d90876878234636be8b6e1baa32a9d85cf7c94509a57ea36ecbcbac0b638aa38a","ssdeep":"","tlshash":"5331eab19a2ec44e5d516cb0c6380570f96278d5ce06c007fa109bf583cbd55e57f669","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.626068Z","times_seen":260,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/pragmatic.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/pragmatic.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"f70-661ac8f4-cae10;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3952\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"2b7c9803856443d10c0ec7ba404448c3","sha1":"02dd3b31dd3934519bbf7f06335e556c66d3b3b9","sha256":"63aca758fa264a3c3ef204bac37c08e30dd8d06a308bd77194884a343a086dbb","sha512":"ca1492e4fc6743741ae13ced3558bc2d4d136021ccb39d425d0ce73f42ae27fb9715960c740b98ae643c7068f022262c349c231cebda78c2991d050250a0a6ba","ssdeep":"","tlshash":"c1815c29f2c05f059194996258fd293791f25e50d5a08e3e8bebc47408282fa897ccff","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.619741Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/tri.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/tri.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:22 GMT\r\netag: \"844-661ac8f4-cae2e;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2116\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"a9332787c6c2381c0a4a5d6211e61883","sha1":"8b7837da9a9f5ac5a05479d256620f6c106e8235","sha256":"86a466018abf53f7175f4909de0826d5a8d405082ac2355b55d7d196fd47d2dd","sha512":"b7493b3a7b53cca8e2f63e5d6788d26b3b8c5af4adedc51d9db25fdfcff9a84d44af024762596b98e0ebd79278bf1d653cfa1e70b5eee6cf2c2ac3b1622b8f1b","ssdeep":"","tlshash":"2941e998d5631c41578ae98b28e14b278a0249c0d5b0c55771bbc04f87341fda8ae4db","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.628638Z","times_seen":1907,"resource_available":false,"data":null}},"time_used":2300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Popular%20Games/Gem%20Saviour%20Conquest.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Popular%20Games/Gem%20Saviour%20Conquest.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"8609-661ac8f4-cae47;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34313\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:50:56], baseline, precision 8, 200x200, components 3","md5":"71b340a6582cd6572fbd740351d64752","sha1":"705d9a5521ca685be0579e856963cd27aa71dcbf","sha256":"ce9809485b50a33b290c7714993955d4659bb6a99fcaf2412b935d1c305be716","sha512":"232ddd7bbecf41ad9dc5a5c4767bf9142ea8454471572aba4fff069a0f994f31418a785f86ecab6198272495067391737edbb35873c126648e178cc51ecdc77d","ssdeep":"768:BYyJinTDpSYGacHkNe+G0SzKJb/BlfAXjv9:BFIEYGdEStzAZ54","tlshash":"51f2d1718627ee52f7d6e97496f3dab66131a2464782f1b3384c69a33740d7d0dce180","first_seen":"2023-11-01T07:44:49Z","last_seen":"2026-08-04T09:30:01.62415Z","times_seen":772,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Hot%20Games/Fortune%20Tiger.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Fortune%20Tiger.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"3918-661ac8f4-cae39;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14616\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14616,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"9e8d4155d97acde9934130823474a3a1","sha1":"806e4333d093f4c1f95d2183f6a334a5e07993c5","sha256":"090d0d06a07e6bcb16e627ab4108bc7431e1de273faca628c300154b39937600","sha512":"be2babc3dac132dcda6fbfdefb52540cb160ca22f7c231d9220102f47b3171cbbc65e9969f27610b5e9350904fa1fcf91ef5a4f0d53fb839841a248a46fc68a2","ssdeep":"384:WFhRJSrO6BHc20xf7QY+8VQMe7Yqfc6ZL:WPRkKb209H+8VQMCYqzN","tlshash":"0362d09b9a51f969dbd6c9d6aaac231fc5036654ae60e4ff5410c9c4ac30cf8600e2b7","first_seen":"2023-11-01T07:44:49Z","last_seen":"2026-08-04T09:30:01.547674Z","times_seen":787,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-slots.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-slots.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"8ea-661ac8f4-cadf9;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2282\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"9ab98be1631f70d0769bd520f863220e","sha1":"2830c9597d707b8f00f0412844305730c5da0f80","sha256":"4898b883fc2dde9f979439de5a32aace0c8a31199e7959339292e03bce604e84","sha512":"0b3abe4fa8f3c31ce7279cae91b31353cbbdd2b26063c0b09883e943cfa898a2d93755a40a2a9f8e5d69b7d0b034c9ef3e8ca7e7db30b64ae8fcc403893be84d","ssdeep":"","tlshash":"8c415c54c63196475334593a0dc4406eeea0adcf0327c89d34d5f413083f2e15b1a2df","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.568046Z","times_seen":260,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-livechat-gray.svg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-livechat-gray.svg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"32d-661ac8f4-cae01;br\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 462\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0af3bfd49ffc5ae11ba860786cda75d","sha1":"c598e7d6678d0fc928d2c6eaeff83f0b5311daff","sha256":"d1e72ffd39a829fe41c1a53795d8418fea166a070252308ea1098b0b7c2f74aa","sha512":"c65e0fcccaabf7def73e8618cfaed9eeecaf4a47698b732c3d185fc7397c9572d1375600545deddf2bd57aba69ef1049ff28142d2aeb861a3774ad0a0072f356","ssdeep":"","tlshash":"e8011ea8cb38cab0e14c1b004be8271335b10422daba9c0c43297d85e853e902005cae","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.549431Z","times_seen":1992,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/ttg.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/ttg.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"c56-661ac8f4-cae14;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3158\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"f177a8c24f7d00627f779b1544f26d7b","sha1":"1f88ae42b70427e917294beb790bda84321cd08c","sha256":"2c7aa701640a5b7503e3ace14124357537d5698ad832c1217a7c3290ccb64372","sha512":"dc8232386fc9dc22e3cebe562d6c708aa078294ea16f30b4d0d8bf1349e0fe743d9a8b3a7f287732f46e8eae0a60e2f2b4674298bcbf78b7fbbe20d4eb5d02b2","ssdeep":"","tlshash":"66511b52f65a6c4255eda08478f294338a3305120a54f0a5d67b484b8d8b3ea77cdaee","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.569933Z","times_seen":2058,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/webfonts/Lato-Regular.woff2","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /webfonts/Lato-Regular.woff2 HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wangsa888.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://wangsa888.org\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"850.4\",amp_style_sanitizer;dur=\"604.3\",amp_tag_and_attribute_sanitizer;dur=\"217.0\",amp_optimizer;dur=\"69.1\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15936\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":162170,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40935)","md5":"c60bf31af9145006857e7dda4facfb61","sha1":"dd7c7fc82414a5fd47a2f1957840c0404e76002f","sha256":"811ae71329e29ac781b774131e8af778f88b40ecc651546ea627dd381b43ebb2","sha512":"5c0f268d52d3010d52c0c702203ff97a5855ac9a7ab24cade34d60fac0ad9a91236f9ed7111d7bdfe04cb01ce79fa0223fd108d9713af9bd69baffecd2b00ce4","ssdeep":"768:FhsW+u/UXyCl6lTzVMnUYvtRhFU5J7+zuC7LEZFUyE0rctEXVG6AM0wwSsyoUP9d:cZ6RqKQ9EX1FH","tlshash":"3ef3b563294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.261654Z","last_seen":"2026-01-05T12:28:56.261654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/webfonts/fa-solid-900.eot#iefix","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /webfonts/fa-solid-900.eot HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wangsa888.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://wangsa888.org\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"1273.3\",amp_style_sanitizer;dur=\"801.0\",amp_tag_and_attribute_sanitizer;dur=\"433.7\",amp_optimizer;dur=\"63.4\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15936\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":162168,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40935)","md5":"09a0a3fa64266a123ea75be7abcf5543","sha1":"976e070e956fc796b51898f3b25439cff46461b3","sha256":"5c118802bffeefd39bd798924c359331cda7cf5080f1fb4c5ffeaaa2e8c94a61","sha512":"ddb7683826b0624469b673d6a195c6605f50e3d2660441c1e2d62ce2a2dbe33c4dcc0f302ae028aaefcc753f6e526c4772dae606c880dac2191b9f8321f98411","ssdeep":"768:FhsW+u/UXyCl6lTzVMnUYvtRhFU5J7+zuC7LEZFUyG0rctEXVG6AM0wwSsyoUP9d:cZ6RqKQHEX1FH","tlshash":"39f3b563294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.263312Z","last_seen":"2026-01-05T12:28:56.263312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-bind-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wangsa888.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13881\r\ndate: Mon, 05 Jan 2026 12:28:18 GMT\r\nexpires: Mon, 05 Jan 2026 12:28:18 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"576db7ed44e36d32\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41962,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41834)","md5":"58e01820fae2f246afa7032998ce744d","sha1":"92b1d6a2cad22bae0ea2bb5889d8d659d85a76ae","sha256":"673423535df2409def19ba72ffb15f8718c43fe291c1b2f86759f57b36a3db75","sha512":"5feef48700d17d018dd9b155aed4cf1d0e2c932a1ed3ea415eb7f3d2caad396296230b199535d2a56fcc04e3c5a8e34c06e5c3cc7cdf6981725b2a79bfe2b573","ssdeep":"768:6XCsqZr5zK6LtckYUNDtRT+Tf0BURuSlnc5Ql0p43fHLX+L/4OGeXwYKAuLhW0Z9:MqtdMLOUESdcw3zJORJpItkDU","tlshash":"b713ebb53292a43747d648e694377012e32d2956300ac8e8f1aceecb7c77955b1b5e3c","first_seen":"2025-10-22T01:17:18.362777Z","last_seen":"2026-01-06T13:57:08.753269Z","times_seen":478,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":161,"dns":76,"connect":12,"send":0,"wait":32,"receive":6,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Daily%20Wins/Aztec%20Gems.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Aztec%20Gems.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"2f6c-661ac8f4-cae3f;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12140\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"d5430d981259a0543e11deab7e627669","sha1":"a54fddaf8962dfb31027f79b618c5e6aaf4b1d16","sha256":"2e43afdc85f332c514a301ca09da50f19a8acba41618971c1c1ef9c8d627114f","sha512":"ebe3479fd65dda21055b9ceddf8277b79ced7139ca91c21329dd98226bfd8e5f8ae10a7ca13102b609c22837229e3db4841ea37bae874a4374d468ee4b5b96bd","ssdeep":"192:WfZ6y7yjxJYgcFkZQen+cX09gDCLm0c09IRYcQeFm041H0yPOZzTY6OUWAfEw6c:WMcg0k7X+gDyCRY1jLH0nZttExc","tlshash":"f042aedb238b6c80b7c9503476a2256015894572c785c3b5741d9318dca8ff59afeeec","first_seen":"2023-06-15T15:03:24Z","last_seen":"2026-08-04T09:30:01.621973Z","times_seen":785,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-loader-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:19.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-loader-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wangsa888.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 3917\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:44:12 GMT\r\nexpires: Sun, 03 Jan 2027 10:44:12 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179047\r\netag: \"eb352ed8ad0eca24\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12361,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12245)","md5":"161b5c3f07ca9883b27348929f01fd6c","sha1":"0dc7aa7beb1ff2109bf3d8fa707cb1e5826db7b1","sha256":"14d64746e0d96d655afd7379ba088df4fcb48f73ae54c5cd1cd3a0dcb0961fe9","sha512":"119fdbca88688e5ab26343e471de5bfe118902ba7222dd95d4d80015abc191c21b35961dde56712f47bcee06c38a9993145111ba0968d211eded944e4b159f1b","ssdeep":"384:4o39KdedznnHLaxp6ulqaa5F4g5A4WR2vCk:539KMdTraD6ulDa5F4g5A4WR2vCk","tlshash":"bf42a460a60ba2ac530342f488f5b856757ccd4fb8504079f0604ededf8ae54bdbb96e","first_seen":"2025-10-21T21:58:19.30229Z","last_seen":"2026-01-06T15:18:48.76517Z","times_seen":701,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/axis.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/axis.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:22 GMT\r\netag: \"775-661ac8f4-cae2f;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1909\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"8a33ceba37cba67565691bad0b376d11","sha1":"524d0127ba8fb90930c258d1f6dccc2e021596d4","sha256":"da7d51e54f2ec453b76dde1951be25a7e76d2cbd19ceb53b07bca4a09d950c94","sha512":"a3ecb95fc952a21271163c09059df357a3b3b0e94dfdd98f676b5edd4fcc20456e26f384b796acf63f6fe925919c8056b479a95833b1bd6962881993f1298d82","ssdeep":"","tlshash":"6641f9cbc0c3ac01f5aa951028f711229d1249449fd1e46ab9dfd81625b45f59d28dd7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.601605Z","times_seen":1922,"resource_available":false,"data":null}},"time_used":2293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/sabasports.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/sabasports.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"1269-661ac8f4-cae17;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4713\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"1f3020b661a06afe96a458859c3c7cff","sha1":"1a2bdc2e90543265d04d42670522c53105f5acbf","sha256":"ff82fe6d37d4c0a8714b16d18ce5d08f75968e686e1b71c30a783124f7dedc59","sha512":"2da36480856b22b46cc5b39f81ce86787b0ba260b9ebece4a715075c9bb48dbb90acd45b524ed317564f3f9060071ed0ff1ed454aa86a3ca935d018e015541eb","ssdeep":"96:aqQ+8/tARsjA+dRXr2zC0kyUh/jIDuseHh46WMy8HOM9TORnAy:aqz8/OejA+bXrO3ky0/jseCZMy8HOMmh","tlshash":"c1a17d0cf75eac09354268c230f9914399500df4c86a902af504ecdb2ab83f9ca9e5ef","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.542799Z","times_seen":2006,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/btpn.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/btpn.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"8c3-661ac8f4-cae2d;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2243\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2243,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"976c8fc9ca31651f1c1ac1a0bca5f8b5","sha1":"475e902161a298719789a4ef4d23c2a873c599ac","sha256":"45482f8a293b7acb55f6a149ecc4854bb2eec381edf7ea5e470a2d8941cf1afc","sha512":"8538e4af5b9d5df88cdae37c2ce17d76091b11697e908eb4ac3da485ba8805f0dc66fc49f29cf9736ec14758000e383734b7827cfb03c17108b28c5a14b0bcf6","ssdeep":"","tlshash":"6a41f788da018d0253cfc96b3ce544464d22a940c6e4e6b7538a80890dbe0fdaf6edcb","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.55028Z","times_seen":1891,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/webfonts/advanced_dot_digital7.eot","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /webfonts/advanced_dot_digital7.eot HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wangsa888.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://wangsa888.org\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"1063.5\",amp_style_sanitizer;dur=\"621.6\",amp_tag_and_attribute_sanitizer;dur=\"407.8\",amp_optimizer;dur=\"77.7\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15937\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]}],"data":{"size":162177,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40935)","md5":"c0c7f8e5960388890041ba6a80311f3e","sha1":"d3d0b28ccadd21d19a28e754da12d818b0d6913b","sha256":"fa544821a26f662614c8ee82f95c8b93e7659c406e5275fb02bdba3ddbdb545f","sha512":"909b13bfb002f9c642eba975a98fd63dbfd45e7f4702cdcb2445f93d372b741c51e6b8b1657621580dc3b7e3e819905bf250a516eb2b3a02e1a248722d0dd0df","ssdeep":"768:FhsW+u/UXyCl6lTzVMnUYvtRhFU5J7+zuC7LEZFUyB0rctEXVG6AM0wwSsyoUP9d:cZ6RqKQgEX1FH","tlshash":"aff3b563294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.270614Z","last_seen":"2026-01-05T12:28:56.270614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-casino.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-casino.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"1fab-661ac8f4-cae07;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 8107\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 130 x 129, 8-bit/color RGBA, non-interlaced","md5":"ca715bf20e0b22df3cae126be3efd562","sha1":"3f38b8aab3d494b41b6bda73fdecf0da3879ea93","sha256":"bc583cd8a0881183c667cdd633a982aba3ec1118f13809ecaf230c13392ab742","sha512":"bcc8b86db71c260d4eb79de3d0cbc71dab3033c1a218a19ede9d4bd78a8f68f5f7f6a0cdb34da833450ace87328089ba515d9e8a97740233eaedaf9613c70c25","ssdeep":"192:8knHimo4IBsSTm8sVK7EY/JDUvrBV5L1U6q04n:Pn4fK87L/JD0r1L1UM4n","tlshash":"25f19049f933384a0541f71ebee8836276721b8503d3a763eeed0e6359201d8e6ca192","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.592195Z","times_seen":259,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/spadegaming.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/spadegaming.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"c52-661ac8f4-cae1c;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3154\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3154,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"320cfbe4a80279d60708101c0b0e43f4","sha1":"944fff69fc23e6acf1abeada1854e9234805f5e4","sha256":"5737cdb9d5e20e199690ce65b1477bf50e6d76e6ff3af2ae1a3916eb52277f6b","sha512":"cd06cd28bcdbf5a094d9bd2650e182cead0348ae5e904529ade137b00e57261b3b48b4de5ec2801cf5f2ff3e820e2764b9b83d7e3e057e4b3a2ea42f13e83aef","ssdeep":"","tlshash":"99514d5ac712dd80508e8d0738e1e976e53574004b71a938bed98dde391c6e3cc68ee7","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.533661Z","times_seen":2066,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/idnlive.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/idnlive.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"9ea-661ac8f4-cae18;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2538\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"57238310e793f343a2749339be32a3ac","sha1":"95bb671a06008427ede2e08a5463dcca1562a644","sha256":"620a982845b3e7a490990f96b64c2c594bb4d418058873c2a3691e2d86b0cb07","sha512":"233da09c46f08c7b3c28d84317b19761490a6f28aebded877ac5941638cff99a7ec7ab61dcf2de28e71904a131a3333d1f4a8eee2e1f07fc80be9b90cf5a1ef4","ssdeep":"","tlshash":"4d512cce9a129a428aa9e54724e80011862b0a414860afdcf54bdc972d7617f416b7de","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.613067Z","times_seen":1931,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/maybank.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/maybank.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"b4f-661ac8f4-cae26;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2895\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"ca7aee98071b2d3880f94ca3dc8842d4","sha1":"eee1e7f874e610c4facdd9a8e3002b31a90af582","sha256":"77173f10f7b5dad589d402a81d207260826935ab02ae7cc52f7d9298f6a38eb1","sha512":"6a4850a3964c179cb5b567ed7e616330dd83581f2da688c8345274a25f93d195607f104da1cd8f6f10e3ecf1f3b5856fc33ec05d31ae454300ce89955a2aa583","ssdeep":"","tlshash":"43512aaceb10ac44936dd54019caa63eba334ac0cae9e1da314fcc045b911fce41f2c3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.545781Z","times_seen":1870,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Popular%20Games/Roma.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Popular%20Games/Roma.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"66da-661ac8f4-cae48;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26330\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26330,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 200x200, components 3","md5":"c9e032f7a27afec0ead5cdb273c4b4a3","sha1":"1d74ac19c6085d7129e554dba0e56f88b363db86","sha256":"b603fc6599e9c677b21158ba859949e135bc16afa97dcb05159264e18a24fdf5","sha512":"60ef2ba164b0797157d3944d57d2042e00a58a76af2bc1ad1635dc11f4b91e7ce9d11f93afd1d18f8d01d6275c7a68fed4ed4f22b554d0577d06e688de2c3f69","ssdeep":"768:Er/UDPp1Pl1pkd9Cg46W9NjdTSpvMEmgz7:EQjPlPkp46W4VmS7","tlshash":"6ec2e14dc5918f03ae823ed428ff06f72f88be6051be0599c5fe8e6209369f456a7150","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.528708Z","times_seen":770,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":630,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-new.svg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-new.svg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"7ca1-661ac8f4-cae03;br\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 23782\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524d091d4759569c313dd81aab7d521d","sha1":"95b068a7e8847a60803b33fd7b051292be42303a","sha256":"4609cea657d57c84eb55546dd797d3098185421efb86ef0cf25e3e8d1447655a","sha512":"3172c7104d69254d1c7b6e7c5ba7c82c6ae2a18312bc9531b8b0ee8756e3a554c94184f7a44bbb8cffb76795c2447111ae27500d426f0758d9bbee8355bfeca9","ssdeep":"768:1SiFxD6THNhWHpmolBwPP0KB2j75lcTrwyl/K:siD6TtheBGPpw7QA","tlshash":"f6e2e01fce8ea7ac8516426c303bfdea0dcc6e4d80487aedb9c1b5ab15a655140b2715","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-08-04T09:30:01.619062Z","times_seen":2374,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":642,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/pgsoft.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/pgsoft.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"11d5-661ac8f4-cae1b;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4565\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"07fdf68f6b80703be8dff396a5a89029","sha1":"20f259c2d1d5d61f611079cf2a0b9d15166208b4","sha256":"9c318ff5d70915d892c4f289c1e2e8c7008341feca61bb191df37cbfcb43a28d","sha512":"1e3dd3c89973d138ea3706b02b76f9e8c1450b01b01a9c6e51b055b445cfdcd154be5080004028b53a6ac3d7e629aa54ee74e12191081d287620e89cda2c96e1","ssdeep":"96:aqQ5GZ6y9rpNUfJRttoj7YA9IF9s/IPqeW+ygQdnvW:aq3p7YkkAqF9QIPi+y/e","tlshash":"1d915c4df002842536c6ea93c4d3f026a8d34dc1a5d5e72602ab881aaeb71a75d5dbe3","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.584809Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/sexygaming.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/sexygaming.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"14c1-661ac8f4-cae1a;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5313\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"c5aee88302f1236b8cc069d281a05905","sha1":"048d3123ca73c3f9f4e432378ea4cfcf467de417","sha256":"ab8a18edde422524883a5beb8842c4008f032de7f45601c2b37d7e40be19ac98","sha512":"7a18e0b8691f451f47dd0cd7a91052abddc353e332a9a19fd00dd2e01ea45a2565bf23eb170fd940e989f12adfb78a18cc8cb9ce9d8c136665eebf3e7611fa7a","ssdeep":"96:aqQqwG/92LyPMnYMuvdjEnGg4aD4Hn468sZTbZCzN6idRw:aqNrwyUYTdjCg468vdO","tlshash":"22b17d99eb1b58817e6aeca23cdb0bc385069082a415768b3ff784af1ca5155074f9ca","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.520745Z","times_seen":2044,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/bjb.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/bjb.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"af1-661ac8f4-cae20;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2801\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2801,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"0c352bba8c9f63f53360785ea6b0b89f","sha1":"b69681d8e5dc381c3c716a0eff800c194865ba29","sha256":"cd619749431bdcb7d09e5a62bc4cd4ed17119e8ae6fe783cfe2b4ceb43d95993","sha512":"bea94e91a2dbb8cd33273be1222ebea8bfe1db00febe2d055a436fc5f5a5ecbdb23d2a61ff6e377215684024a8d2fae9b254c1cdc88835b002639c40d0780863","ssdeep":"","tlshash":"0f517c0de5853e079418c6927dfe60221c228980c6c0ea57281fcc06bb701c94f7bcef","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.631503Z","times_seen":1712,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/telkomsel.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/telkomsel.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:22 GMT\r\netag: \"aa8-661ac8f4-cae2c;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2728\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:22 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"ccfef8b817b38862ea38cd51ad5eda48","sha1":"7bc6d8db79a495b725ad203aa9228e9178b8ac0b","sha256":"1efc5dce3145bdeabd5c9549aa768207802f3d94f85af872e74e936dc6c6e32d","sha512":"dcb90a21a291fb3d2bafb121ecadd54cae3dbc1972a5058f943c9e3335fe40efd0684adce586a469094a3e9bbeb73f89942c2da48a363ff6e9ea8351cf168002","ssdeep":"","tlshash":"ab510ac8f9856811b2556d9728f86037ce095880cdf0e09669d7f122687c1fdddadcf6","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.585654Z","times_seen":1932,"resource_available":false,"data":null}},"time_used":2293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T12:28:18.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://wangsa888.org/wp-json/wp/v2/pages/20\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://wangsa888.org/\u003e; rel=shortlink\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"336.8\",amp_style_sanitizer;dur=\"227.0\",amp_tag_and_attribute_sanitizer;dur=\"88.8\",amp_optimizer;dur=\"29.3\"\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 18448\r\ndate: Mon, 05 Jan 2026 12:28:18 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":168905,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42681)","md5":"6b2464a9bc5f14769338b6fb223c46f5","sha1":"ff401ec635f0699e015bb68fb95923108ce47d36","sha256":"5975489ef323a4e89f4db06229c03022d10887bc79e7db1cdbde9259e3756329","sha512":"f14ec9b776c4dab7352b42f6029dacbe7a7761e7ee99c21565142f78a8dff80583e1c853aaf68fbfd63e256c571664bd712865c4ca9cbb63ce94447be91a764b","ssdeep":"768:FhsWIYu/UXyCl6EKIVMnUYvtRhFU5Jt+zuC7LEZFUxC30rctEXxNJG6AM0wwSsyv:cpq63X6QuEXx/Fn","tlshash":"8ef3d663294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.284284Z","last_seen":"2026-01-05T12:28:56.284284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":850,"timings":{"blocked":338,"dns":148,"connect":86,"send":0,"wait":87,"receive":87,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-sports.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-sports.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"1268-661ac8f4-cae0b;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4712\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"f54c4f5d863086ed502da28dc867b77f","sha1":"13ee6f843f4d922ce2ce2cf375916d5ff7e64801","sha256":"2c1714b3161b4ea258d60848d9c497bf74589f179a414374922410a852ff9d81","sha512":"e02b4d06e28319b08b45ca8baf99c0d4d2a71eb5ef2c5f93e98a05812e2c6221d78964540db51ee9b51e3566df29ec16b7947a2d58177ca667796706cebba2b0","ssdeep":"96:i6d15R0FtrPn8gwnslXCPpNfY26QijlSzMF+FN+RowKwTxDDRUG9lj7nT7No8:T5RC0gO+SRtY2vijlD+FN+NKwtDDbTT7","tlshash":"64a19e1b988095cd9a6375354239abcc254fa4d0d3b441feb9c46e47a158b4eef4f488","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.539398Z","times_seen":259,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/uploads/2024/04/cropped-Mabar-Favicon-32x32.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:19.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/cropped-Mabar-Favicon-32x32.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"3d6-661ac761-ca8fb;;;\"\r\nlast-modified: Sat, 13 Apr 2024 17:56:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 982\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"9b9c72327d515f3e407ac62a4807fe9b","sha1":"8c002b424e7047effa56886a4d6e8ba4e637aaaf","sha256":"b57bed03820455c7366038133ea0245bd300c8fec0a9ce7d742f9d30a7bb5c66","sha512":"a2acc05925e340782854f03ca5c38f2437f9eb5392416cee551172f7c8f5e0aca7f391d9f2ee3b2d8b58b91a04a67ffe89e3d23b1cda7e0ce56b6c9dee0a60e3","ssdeep":"","tlshash":"b11163a7a35ae0cbde011c7829ea43b27b510db2d80bcb556a3ce8025a15dec1d250c0","first_seen":"2024-10-27T19:07:30.036431Z","last_seen":"2026-08-04T09:30:01.606507Z","times_seen":89,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/mandiri.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/mandiri.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"98a-661ac8f4-cae23;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2442\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"e81bd4992f0fe10cad81a83263d92ef7","sha1":"08b015eb1504581d3b9c858fd6770047b3698f70","sha256":"6b00a56d5961243a4cf2e0c59cfae414a8b3b528c7778eb3fae99e52a64913f9","sha512":"f9654ae9fb05790b84233d161227d0838eddb5225e3ea730dbdf67f15c1b2762cd06217e51faafb769c3f1fc38dbced9cb982f015cd6f5fb7a8037cfc4e329b8","ssdeep":"","tlshash":"b4510b8bc1d78d4147e5ca9131f2505f0d5246a0d7f5d029f98fd051a6f82f92a148d7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.522059Z","times_seen":1891,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/linkaja.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/linkaja.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"9a3-661ac8f4-cae22;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2467\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"aa19546f0fa57ec054f592623dde7e62","sha1":"19fa186480ac2121f2647bfa6446c6a9a88f3fdd","sha256":"800b3f95f81e845bc3bc92ecf7880f2c7f57a15e0dc3f855bfd3e591b783c7ec","sha512":"13c85136e6887167c1be424dc4b18b1f4773a67c4495e3f83884c6bc1fb143d02c9b0609940661a6e1f26f953f581e1fa128437b0a314bc00533fd9549065af7","ssdeep":"","tlshash":"7b512b14fd116c42829ceca544dbd2a289175b44dad8e47bb4ffd01209f12b98b311c7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.629685Z","times_seen":1926,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/jackpot.gif","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/jackpot.gif HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"b1ae-661ac8f4-cae1d;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 45486\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45486,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1266 x 172","md5":"b2d8c3099673ac1e9aa4cf3b57c64230","sha1":"bcec1a6c12a6ecf39c91f89e269356237f42982e","sha256":"d7d46deb0cd9f645c52188780ccb80c54f6e6497d9bb18543559f0961e7826f1","sha512":"133ab4150ba0860dc6ba9656c0498bdd29d293921938f06f2cbdf2004cbfb45dc7fd9d5465c261f39199468c1e8caaa9a35940903318b450229309fe70e6db29","ssdeep":"768:ihcROxXr36MylqmvubkjH2MjkYbJTo/9qqabqqa9NbkkDf7FQdrA:i8OxXkQYaMIY4wJqqSNbpF2A","tlshash":"1313f287996489d235acf27557a7e209a80f1449c6300954c79bbe3cef7c21eaf93533","first_seen":"2024-05-25T09:50:18Z","last_seen":"2026-08-04T09:30:01.52438Z","times_seen":92,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/slider/slider.webp","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/slider/slider.webp HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"16a80-661ac8f4-cae0e;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/webp\r\ncontent-length: 92800\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92800,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x613, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87cc54e159101f0ad9cfde84ed3a5305","sha1":"8b8ce3d2629cf6ae4fcca9caac39607f2f1cfdfc","sha256":"17e16dc8678a3ef020ca39afea76dd2c50cdaf3d016d8dd52de049c02a821ad6","sha512":"83e5c71cab9f5805121135aabddc5587c5ee7f53979fcf2512bb1633a97bbaf7d840f482df9e6247fff581dbe348d876d10019630c8578a96d1666c58b4f08be","ssdeep":"1536:ZRfRewY+aXIv2u+2q9I3jSj9V+gcxkmvSd+tvmBS7mYvi12N2ZKt4qG4Qdr3zL:nJewjLv2uoGjSj9Zc6mKcuU61vlq/QNn","tlshash":"2b9312a376b109370efe4529ae8c7bc8ab0469f766e324615b230d3197db2520cb4db5","first_seen":"2024-10-27T19:07:29.968095Z","last_seen":"2026-08-04T09:30:01.573414Z","times_seen":74,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-whatsapp.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-whatsapp.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"f59-661ac8f4-cae04;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3929\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3929,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"c896dfb21d6456e13ec54153798a5fc2","sha1":"e03285566ec925a5a78de845df6b13960bd426b4","sha256":"18163c223050212e748c558770e8d96315287ac103145d3c757022ec7944c2a9","sha512":"a0eb76590377238b788db6180e8bd00dfbe70edc5701a97665f3807321adafbb8acb70414731cecf5af256c6f074b32357215b4c346e7db717197836cc1b7410","ssdeep":"","tlshash":"34819eff489edae5efee197647b02da391d82988fd9b21e87d180587528407a4c02931","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.578623Z","times_seen":229,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/danamon.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/danamon.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"940-661ac8f4-cae33;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2368\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2368,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"3838d4b8102304883356ccf668653507","sha1":"65c93b99f83f22c41e339cfee892f80d6a0c1294","sha256":"73b1a331ae0d571fdfd8fd37b2d8b61d7bc40b7d5da1cfcedc36bcde48483f75","sha512":"edd8c2d85ed9345f153ba92047cc995fb15c720a6f7e7d8caee162e70c519d021abddf5abf988c5ba54c66702fa8fcb64397b9bac1c01223f555ca8052fd5099","ssdeep":"","tlshash":"b54108acd562d801964fad4030fbc33d8a614b409de1e10ae8adc16625a40ff6c5f0c7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.577174Z","times_seen":1885,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/xl.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/xl.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"99a-661ac8f4-cae32;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2458\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"84094baf12f6cd3d4d8cf7557478370f","sha1":"6adfff2597d1986ca93211709d92364b7f31994f","sha256":"d64a7c2b38bd2b08c842b2f714e402f0ee9ed9884171a6e1e95f57cd57ccf748","sha512":"dc262d4198e9b38b9cac4987ac803b9ec8e2466510793608869213a56110a44f696935d767fa4ddebd00873886715bb784ff039fe24fae0c166530cb14e90849","ssdeep":"","tlshash":"9751f80da68218158beb99c106ea40224f064f44ce84e0e7b44ed4665ab42ec6dad9d7","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.551169Z","times_seen":1929,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/shopeepay.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/shopeepay.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"a19-661ac8f4-cae24;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2585\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"410210f0e9a527ac10a6edce706a3e52","sha1":"41ac0fbaf4e303490de0da44bbcc2ddf0957d93a","sha256":"b546d30527e6237059995da8fa60d0ee5b99a8a1beaf0d9ca885323926d9dbf2","sha512":"7e6134ee07e54cd0800c5302d78a289b304b13641649ca46f4faad5df1966a49aa0202390cc06398a7c7a740fc84bf41b17b26a098d11b2d19424412241703e6","ssdeep":"","tlshash":"a3513acef606a90263dfed0834d79413c9036ec4d3f6e072d58ad44614a82f9a9e99d3","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.523217Z","times_seen":1922,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Daily%20Wins/Starlight%20Princess.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Starlight%20Princess.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"3997-661ac8f4-cae42;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14743\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"7c1218ff87b647bf07765c7fefaf7225","sha1":"a68efd7fcca23220e95ba69821767e70df60bd0e","sha256":"e8d03230cca4042abc8dcb206eac74de2411b5208f73bd10c37e9bc1e95b9931","sha512":"c940268ae7fa266d74d396f8ee46d2cf41c238a14b55a5ef331e23f63aa7c22fb2ce89a0767564776e10caece960fbfa109a4ab2e02477fe626efd7fc8bdf0ea","ssdeep":"192:WTZsOCnUhrK9slgWaApEw/KhxpAHt/+sEMAtwbgrpS82EuD5nNF9ctac1gdGvCcF:W6OHhKKzS8LVAycrpUEuVNQ12GC8JTD1","tlshash":"0762d004db47a5001f615de7609df21e6f96cc0248eaa875c4de54cfba21cf2dab88cd","first_seen":"2023-05-11T11:12:19Z","last_seen":"2026-08-04T09:30:01.575225Z","times_seen":850,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":549,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Daily%20Wins/Gates%20of%20Gatot%20Kaca.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Gates%20of%20Gatot%20Kaca.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"3a08-661ac8f4-cae3e;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14856\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14856,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"b6d941c49e93465afc57ee4abdd1899f","sha1":"f325aa4ac4e810c389665bf96931e46032e22766","sha256":"f30f08084ce92b0b1970d93f068845a6dc6c855f51d722cd4fdd842c2cdd3c76","sha512":"13cc45d9cad03a5ee2f33bad9071691964f0b5875983a895868f4e2afd854708678000e23641375c3771d95a24a2fedbf9735a48588ea3c664508e042019dcd4","ssdeep":"384:WIVEwXoukElguieoxkIrbtht/l8OmtMEki:WILoluieWPtz/mNtMM","tlshash":"4f62d00b3f226ed2f368607c6632432d5b5e4d70ae42817d1046ab0e97b0ef31a72156","first_seen":"2023-06-16T01:19:13Z","last_seen":"2026-08-04T09:30:01.58918Z","times_seen":771,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":569,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Popular%20Games/Gold%20Blitz.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Popular%20Games/Gold%20Blitz.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"3922-661ac8f4-cae49;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14626\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14626,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"4c7255718b06a51c8238ef68edaed5f0","sha1":"9b730c37ddeab014ee45199590c7a0727b3dd921","sha256":"ee073babb86b14964185344465e2e8d4c90c89d0b46333544612cbda093e7f94","sha512":"d9be52ef404761100967c4bbab3e7ba33c483a31653ab88c2a759261069be4d5f63c376c3b4ceb3041809901cb11f03795b0dd2faa7a8739cc4d00dcb1ac9a14","ssdeep":"384:W3wVwYxzWEfsJPs7z57sVPFnk4Pexm44b:W3wyYxzWgsJP+z5Yzk42xeb","tlshash":"a662cfdda63e8419ef3fdf0186f21a720783046425b9d8252db6d54fa2b0c33e4a12e7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.577902Z","times_seen":774,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/uploads/2024/04/cropped-Mabar-Favicon-192x192.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:19.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/cropped-Mabar-Favicon-192x192.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"1d1c-661ac761-ca901;;;\"\r\nlast-modified: Sat, 13 Apr 2024 17:56:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7452\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7452,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"0599920138dda9589f5ca903f48ca5a6","sha1":"5bb4a6064a6f0dd0effb86a543470a765a1f575c","sha256":"9d72adcc92497027110f638b7ef70fbd673f7c93afbf9a36d97fda57ccd16caa","sha512":"3ed720b78780a77501a6ba618e8e7ced8e5b01a8f3ef2f081bfb2a4150fa91e2888ccb58aedf7887398ed24564770f0cc22a4ccc65bf2aefcc4496f3e5d93b59","ssdeep":"96:MXK52FvGRzgP0THRYJFmKlmXjUZ7S8/IuZqTeD/pQg58lG9h04ApuwawUxThAaAc:MNcR80RYbDmo48XITelt8ML04oRULAa1","tlshash":"64f19dd416a4dfc2d4cc3dbae4e7afd33307e07228919265a9fbca6152ab4fc6247015","first_seen":"2024-10-27T19:07:29.997637Z","last_seen":"2026-08-04T09:30:01.597845Z","times_seen":88,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/habanero.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/habanero.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"b6c-661ac8f4-cae16;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2924\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2924,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"6fdcf2c4077e1a01c1387becb47eab76","sha1":"9e644b73bbfbd059798cb3f38a50afbb6d51c947","sha256":"063b0b0af325dd011bb3cd4f69e62c3ebb3e2a8033a9f255552a1ee6a47cc842","sha512":"0519f574e77eeb96f2b534b554d6e52300fdaa50c27711e3674e8b22400534ddf89a3a2e2d029b3e455f98423d4a1433964cfc05abb7ba29d32425256e1fa9b1","ssdeep":"","tlshash":"8c513e4cbb83da0ca18c7b521cf65106a71385869c81b8b4ed4fe40f4c70aeb5d5c9cb","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.600318Z","times_seen":2069,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/permata.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/permata.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"a3f-661ac8f4-cae2a;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2623\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"806f1354ac8e117d1752f9b2e317c551","sha1":"a989006a1c24fd9c5c5cc8eaf48be64a9eabcffe","sha256":"71eb5481c8ca4c22d6723f161b36d8a333ff30bdd2c90018b2b3cd2f5a5ce315","sha512":"b7633840558abf2a4145b874c4c00e4b57c3f9eb3043a0ec2d5b4b94b4ea426c8a6bb661808c86565090f03185aae964fc0584059d54beb12eead460f1a8766d","ssdeep":"","tlshash":"61512b01f9044c01e489ae8134e38569d83b5582e7f5f036b19ae8672b645ba4e7e9c7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.543766Z","times_seen":1894,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/bni.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/bni.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"968-661ac8f4-cae27;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2408\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"f974c6e54d22a2874c8bd0a5e0dd6280","sha1":"c155e13074e0908eebceaebed81db17d3e67f366","sha256":"1c0d8f733026c0d9d8ea471bee766e2398937de1b9c02d023c015757a425cea2","sha512":"2db584e2104003fc6ade26feaf40e73661cfa04128071ce9627865e57006b7514a025ffa7265a6d206aa53d44c39e9d7ff7bb2e8345dc31b9dafd6b26a9e924e","ssdeep":"","tlshash":"df410a4cb786a480e1cda69310ea4223c9154540ced6f56b541ee80b89681f8ddee5cf","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.564279Z","times_seen":1893,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/webfonts/fa-brands-400.eot#iefix","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /webfonts/fa-brands-400.eot HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wangsa888.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://wangsa888.org\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"980.9\",amp_style_sanitizer;dur=\"705.1\",amp_tag_and_attribute_sanitizer;dur=\"230.8\",amp_optimizer;dur=\"45.9\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15936\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":162169,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40935)","md5":"4b41dbe3bb7b8ea8cc4150a15704ed19","sha1":"eb9c08dc1f2c24de2c4913d82e483823f9071363","sha256":"d3d90b1fa8ed0974f2c56723bf2adbdcf2a2e991e9d0e37b4a02416da1048e72","sha512":"421de9fd3e89f3e5ab837adec6f54a6d3ab436d31a1935ee9cea7a7ed72829fa862f48ce00a4753f71aed8c20f3dacc179d5254356afea65d2f6eda52e72dc70","ssdeep":"768:FhsW+u/UXyCl6lTzVMnUYvtRhFU5J7+zuC7LEZFUyu0rctEXVG6AM0wwSsyoUP9d:cZ6RqKQlEX1FH","tlshash":"e3f3b563294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.315997Z","last_seen":"2026-01-05T12:28:56.315997Z","times_seen":1,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Daily%20Wins/Sweet%20Bonanza.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Sweet%20Bonanza.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"374e-661ac8f4-cae43;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14158\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"c9669b43e7dd564b79c530890a4182b2","sha1":"bb0398471d2f566689e7695a58d104f4b8271aa0","sha256":"530c8e9067055058faecbcf6ea9b56dd6948fcb3adf56d31d71f8247d11d16ab","sha512":"19d09e3a3499b9b3ac937039e19ffda0c8c07536a1896ea48996995ef956d6ec64d1750c96591ec3d99580f8def7ef5cde02e2ed34e2301c4bb8bbb70b69c50b","ssdeep":"384:W64nVSBXyixIUD129gbfDjNKNAZc4J8isyjW/7/tyiH9:WT0BX/69EPNdZc6rfM7VyiH9","tlshash":"9a52bf18e957bb13cf401ee40fbd922f41424870ea15ac3cb2ce069a7995cf2187478e","first_seen":"2023-06-14T10:25:54Z","last_seen":"2026-08-04T09:30:01.625115Z","times_seen":821,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Popular%20Games/Koi%20Gate.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Popular%20Games/Koi%20Gate.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"94e3-661ac8f4-cae45;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38115\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38115,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:44:43], baseline, precision 8, 200x200, components 3","md5":"b6bdad4cfd8dc937a21656947fbcf9e0","sha1":"4cca04b10743b1327fcf87576ac69b6376eac02c","sha256":"b189e4557c803ad30a184bd9bdffa493b22b3d1edf7f801334cf846f21fa6576","sha512":"406bbe5c0244f078664cf28c1e3d8f98ed33feead15d8e3bc6ad1c58475ab98340cc91161c92820b0ee215796007e2df345b4a94824074252e6c79fc1082a7df","ssdeep":"768:BYyaFehe0FXvvQJmkqB8b2k9gADvxBBlzngPvjs7mj5guWVVElr:BWFeAIvsmF8bX9gExBj8Pvw7mjHSVElr","tlshash":"3e03e135d225fc52eea1e878a0f96b673796e368f2231533f44c88033ba54f1850ea46","first_seen":"2023-10-19T09:39:50Z","last_seen":"2026-08-04T09:30:01.546766Z","times_seen":772,"resource_available":false,"data":null}},"time_used":619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Hot%20Games/Rooster%20Rumble.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Rooster%20Rumble.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"3d4a-661ac8f4-cae3a;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15690\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15690,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"5e43e0a77b2fb0ad323d2451a12720cd","sha1":"2cacebfe6f62a24727a46f52f1f58ec345573c92","sha256":"6c382bd48464e937b1106be97eb08093ef901d579fac6258f19ba0d3ab2cb4cf","sha512":"046784eba95cf9470b78132e6bc2462d913d291df90598d7080a5ad503ed6b00fd43953285a2fdfd124c904d67abe840620567c525e9622f4b3f8e595acdca18","ssdeep":"384:W4A2OUMo82n2jZm3jB9b9vZY2JLV8ppWcsUI3E:W4A2HMoYjsjv9hH8ppWcsvE","tlshash":"9e62d15ea7820547eb1c6b30abfb24552b748861e5b988bf48bd213b6431cfb1f14047","first_seen":"2023-07-13T17:43:13Z","last_seen":"2026-08-04T09:30:01.590833Z","times_seen":833,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/ioncasino.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/ioncasino.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"c94-661ac8f4-cae15;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3220\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"f52b79a28e4fe23c2d7034200ec49243","sha1":"9e7090b05b1e04a59609aaa74023d254829c9b86","sha256":"2f413a04bfddefa9057a4a1c09ffebb389b048bff9a62717f64a292f2257d288","sha512":"a869da32caf575eed45a705779742b96901ea431bc4722131c930c0909359141abaf346ae6d43bf29a67235d8f8ff3f4c2d8a6eb86932aa52671175129dfa8fa","ssdeep":"","tlshash":"1b611a5e9e119c0d785ad94138f8a09bc632c144a870e905bad29d2bbd342fb9495cff","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.611727Z","times_seen":2044,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/panin.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/panin.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"9d5-661ac8f4-cae31;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2517\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"c73d8ac115c9d42d48b2a3184c198271","sha1":"d86449166ea1fa2d8581516a68f1d720ff16233f","sha256":"cf7cf632c75859639c5e47534b6760c9ac44013dcd5d7bfe4c045cca5414432a","sha512":"cf89a4ed50cc1a7cbdf02c6589df7e55b7c49eb3f31208d41e288fe46cee5de39379808280ccae7052fefe9a892cb1d78cbfc54576f0a2981b67e2a352a4e4fb","ssdeep":"","tlshash":"2f5109cbf842ad11a24e848624e741398f07c960a9e4fc71714ec42e1b386f6e96c9df","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.564975Z","times_seen":1882,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/jenius.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/jenius.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"a1a-661ac8f4-cae2b;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2586\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"a526cd682aa74c97bdb4e9062dd3bb47","sha1":"9a576b670aa5ff27c5377431444a5b6e6fad059a","sha256":"887520873e323d8af25fc9ca54158e474139b38d78f0ae1097ba0bd27c09084c","sha512":"bd14d5c0424148137d6093f709b8a22265701ebeae2345415449e022c52f28e3f01e1709c06df9becfbf8af1a28539c6d60ddb0d0b828a4d70762e408f24ba02","ssdeep":"","tlshash":"5f51e729d445af023a0ce44724fa817baa0785c0cfe2f12bd58fd5372d647d999991cb","first_seen":"2024-05-24T12:00:56Z","last_seen":"2026-08-04T09:30:01.557085Z","times_seen":1915,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Hot%20Games/Dreams%20of%20Macau.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Dreams%20of%20Macau.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"848f-661ac8f4-cae3b;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33935\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33935,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:50:55], baseline, precision 8, 200x200, components 3","md5":"3d218252b813a47945bce969481cec2a","sha1":"3199e0c2707cd99412db4ba96313b5dafd4febb4","sha256":"55d0b099a391cfa01804ad42e78e873b2ad0529945b4911cc6e51549e6fed246","sha512":"1145e85ced54c033e541b6c8a353353a0793e37b8fe406f7c2e96d718e704c46bbe0a21974258eaae08b549f96974c37c00a91c3202b8837cc8e7c2b9138e712","ssdeep":"768:BYyWjr/8FQL5TvRWnH7ViPfU0mx7EsZ0B0:BC/8FQFTvgbVS6x7J6y","tlshash":"78e2df676a6b8e09e7d2b3710dd1a78e9333e014e2a3162074adcd567bb1df9c81f404","first_seen":"2023-11-01T07:44:49Z","last_seen":"2026-08-04T09:30:01.614733Z","times_seen":770,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/logo.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/logo.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"70d4-661ac8f4-cae34;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 28884\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 49, 8-bit/color RGBA, non-interlaced","md5":"6acd3657df6f45918ea2bbb30618c652","sha1":"e4c08fdda33b3e94f22602c596497628a9712fff","sha256":"e0476074e70a8c3bbad63806e0575b0329dc0523a9c9a1865be966e6db1039f9","sha512":"95e8bee3b13ccb73b09aaa762787e52bdfae85c134bd85ef748b458821132693019574b721fa5aacf76776cb264c18ab333ce5ec2894fef8d030bc6c1aaed65a","ssdeep":"768:bPEFIJ8uumfEuO+9obd6cXR80zrkREoZm79:46cmfav6X0zgmZ","tlshash":"40d2e17d15c6ec7e96aceae32402576838f093b77576b0048f240573f80ea6cde479a0","first_seen":"2026-01-05T12:28:56.329073Z","last_seen":"2026-01-05T12:28:56.329073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":229,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/joker.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/joker.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"1173-661ac8f4-cae19;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 4467\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"d6046ada089141ed514a2c248ba348a9","sha1":"ac6af3ec4c8d0025c3498501f0b5ff169f50fdab","sha256":"a5894ebe20a0a276641ce8fe77f073ea3127a35e307937d00d46606a6d07e5e1","sha512":"9bec604475449cfffc72317d9ece25fb7ec460b1f463d288052c6a436d26848116b60832425da59d040aa1f43ed4964d575442480231030d8e797a89daa3a494","ssdeep":"96:aqQRGY0xUhfkh08d2luU5IqeesF93z/mc1MYtWum:aq+0xUS2U2lueny93z/mcyYtWum","tlshash":"fe918e58dd037e0e5d5e0a9230e85d9688bb8502deb4b81e78d7c2cb42f8166c85f6f7","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.570953Z","times_seen":2052,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/webfonts/digital_sans_ef_medium.woff2","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /webfonts/digital_sans_ef_medium.woff2 HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wangsa888.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: https://wangsa888.org\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://wangsa888.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"1031.1\",amp_style_sanitizer;dur=\"809.3\",amp_tag_and_attribute_sanitizer;dur=\"183.6\",amp_optimizer;dur=\"60.8\"\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: gzip\r\ncontent-length: 15853\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":162180,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40935)","md5":"230da6e59845666a431f19be65d622c7","sha1":"3f0656a2687432ea375ef899442fb9be8486c1b0","sha256":"4d9f16ed02a534288159629757cdc905967332f9e49f8ce10df613a4de1e644c","sha512":"2aaef1c368d4fe811031104e67a16e1b28de0f48331687642c590e5ab1bfb8278a0bcc2139de6e03aac7820ac651c189fe9afb66664d54d7aa81eca086b33ad5","ssdeep":"768:FhsW+u/UXyCl6lTzVMnUYvtRhFU5J7+zuC7LEZFUy70rctEXVG6AM0wwSsyoUP9d:cZ6RqKQ4EX1FH","tlshash":"a0f3c563294d016f6217c34271f8f5bb5d85d81bca325a49f9aebbd8c701e52363a32c","first_seen":"2026-01-05T12:28:56.333571Z","last_seen":"2026-01-05T12:28:56.333571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-anim-0.1.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wangsa888.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 1671\r\ndate: Mon, 05 Jan 2026 12:28:18 GMT\r\nexpires: Mon, 05 Jan 2026 12:28:18 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"52d5b100c68fa94f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3688)","md5":"cd7fb3df248dfd53c3e4adc347f400d5","sha1":"722cc47fbcec7a209c9907d5f8d2f552fbfb52d7","sha256":"2a4b2b1d1c8a661df643651477272e5c17b475b898809655ec6e1069e85d5a54","sha512":"1af38cfa945c06aa9ea189b46b30099f1e6aa4cd99252b05696ce19158371d43f700b7864146fec5f8e38a9d7cc59cad7a321c1150bb8b8c640dc958f9d32265","ssdeep":"","tlshash":"9a71c6b831c6b4b75b963cd254275401ea39643b3407c878b168dfdf693a85224b6e3c","first_seen":"2025-10-22T01:17:18.358209Z","last_seen":"2026-06-20T08:10:00.903934Z","times_seen":507,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":156,"dns":75,"connect":21,"send":0,"wait":31,"receive":1,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-populer.svg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-populer.svg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"dff0-661ac8f4-cae09;br\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 43237\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8f5f25769046146ae42b17a41c0a16a","sha1":"80e7bba523210c58296f8de4a6fa6a22e913382f","sha256":"dafd7d97d8675bb8ea10eede4680abba88a04c54242a3333a291d66dc91c6e27","sha512":"fbc4ffe351d868e0bc7742724578a558932d9f17c423039657c3150f3adae2e0c5f2dcc3559e94e5d4349e24e8cab31e708cfd982b5ee5419455db9802ad9b87","ssdeep":"1536:JWAHKFFqtSQd1JZjfknvKi05k1QnwqR1FmRQv+qP:JWAyYtS21JVfWXLi1IQvNP","tlshash":"e743f1423f407f7c4976d289916cd15fec26a88f6580ab5f7ef38895b27e6080ca50ad","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.555807Z","times_seen":2075,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Hot%20Games/Treasures%20of%20Aztec.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Hot%20Games/Treasures%20of%20Aztec.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"8dbb-661ac8f4-cae38;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36283\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36283,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Macintosh), datetime=2021:10:21 18:51:02], baseline, precision 8, 200x200, components 3","md5":"5b52d1c6a105910c3561a861290b0d31","sha1":"08e6184833a6f5ffb9694a5e6d6b6f9911f6039a","sha256":"fe74b914911ce1a3606028aa46a68b776add2f48375710ad2c019ebb850aabe2","sha512":"4b516fda8690f9d1b07c9c6a1d9fd435b48d57d286e8f43137b857777b9f8fbdf9fa03c104697349d69b5ca178d71097b75b85a4714b71aaac3844314294ab78","ssdeep":"768:BYyOOjj1b1enHm9NWW4qmDAKUm0dTfyPEqmKzsoy:BCO/B13NWzzz70dT6Pzsoy","tlshash":"96f2d02bbf76ae00ebf5e93550d9a3f2f61663c4c32159a438de92223764ef00d8d185","first_seen":"2023-11-01T07:44:49Z","last_seen":"2026-08-04T09:30:01.576423Z","times_seen":794,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/icon/icon-livechat.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/icon/icon-livechat.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"87b-661ac8f4-cae06;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2171\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced","md5":"e27da6f4264ddb835d247220038653eb","sha1":"1275fc860ce6dddbd0f239f7be43042bd200aaa2","sha256":"4592cd13df35865d3bf3e7ac7f62283b48d95fe0d4d076201681441915a37518","sha512":"48addd187f4e78742e386b885c6524896394aeec0d1dafe820e509370b7b46faa1200b83ce42d3d797c9a862723b3dfd8a583697a2bf2b06830a844e0d46e655","ssdeep":"","tlshash":"3d413c6a9332a5dbe7bcbe73d8515311882f19306a7b2239a1d5f079302b4f148f21c1","first_seen":"2024-05-25T09:50:17Z","last_seen":"2026-08-04T09:30:01.60491Z","times_seen":242,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/provider/allbet.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/provider/allbet.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"183a-661ac8f4-cae12;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 6202\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced","md5":"65385a0b00807c78e9ee11e5e845f395","sha1":"856fc5558ff9ab52c6393ae0cbf830cae288d13f","sha256":"9339336ebd83063c8f03b0572ed4a5c91f3c12452145115387cb78d51980ac37","sha512":"452b8c645cbd6a457b2da98743b2de9e07b022e67f503f716946bf5bdeca3a5ab37b7ec759593679485d22ecee3747f48616324fcfec1e8ed569e7eeffc7dca7","ssdeep":"192:aq/ECTu1GWg09EuSqUrf6RxlO8not0Ww66P7g40Hv:aq/nu1GWRaORrLj9L0Hv","tlshash":"bad1af25ef83053188a9ecb095b226b7003fc7841d30d63579eadc995d319bae4fe5c9","first_seen":"2023-12-01T04:11:56Z","last_seen":"2026-08-04T09:30:01.541841Z","times_seen":2041,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/bca.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/bca.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"a25-661ac8f4-cae1f;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2597\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2597,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"7218454f8ed20e47c89c49f43dc865a8","sha1":"b3fe2c42a0ef40da7db91efd05fb16be761bbc7c","sha256":"a0effe9a2c5b748a827c592cff324be42a330b94f053bd596dbe4b45f2c18152","sha512":"843f06f1b1bfaad41cb112a544753066f22c40738164e790231f0e4bc10c1f1a0e9b804a15149a538779556a00dd303098ded75d9892e7c246219aecc694104e","ssdeep":"","tlshash":"2e51198ce8525d40b61ee1a03ac2057f92128dc0cfd1e90df8adc80e13353e497288d3","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.613963Z","times_seen":1891,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/bank/bri.png","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/bank/bri.png HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:20 GMT\r\netag: \"a54-661ac8f4-cae29;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2644\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 110 x 26, 8-bit/color RGBA, non-interlaced","md5":"33b1568e97e2d3eb1f0e1fc24c13844c","sha1":"e76fd8087d2b1c706db27e318e728dadbb7cd2d9","sha256":"da04be9d1425d3021cff275d345cc1528863d6f93b48068f7867145424211039","sha512":"730731d241b2dbb9b740b8a592327904f7474fc8038e11b500bca4ec2d240766ef62b97288497765c85fb605a9f70746bcae1a67ab6b75110f9071c3fc0da164","ssdeep":"","tlshash":"25512b9de5274d41a3cddc403874e165c9639dc0cbe1f4a3fb0ec58a5d226e494591d7","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.544781Z","times_seen":1894,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/ww.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:20.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012510081644000/ww.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wangsa888.org/\r\nOrigin: https://wangsa888.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13064\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:55:34 GMT\r\nexpires: Sun, 03 Jan 2027 10:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 178366\r\netag: \"a948170ec687adca\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46293,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46173)","md5":"bb74164f22ea60e157ef86271116bd8b","sha1":"38e7e2e1ff7e34aea9ad41908d09477810853ca9","sha256":"1c701a4e287dbc3f9bc31d85bdf6b98e18b6db061418666af1967d6d046d5165","sha512":"636e20f228d38a14b22c16da0122ed9d9570592927a4b57b599b3cb470a6cdef749cfd9f0100ab4b234b8e9204a2585f11e0d2705bd6dd45eaba2eac432c1f3b","ssdeep":"768:bCIFhhUOY4iB+GR7rpB67Wh/J1n3fUHpjkdeArGpPcsKdN4emH+uUrewgyb9Q:hWMOr7FfUdZepX3gOG","tlshash":"c7231bb433a6546f839284e5105a3009d67e2c6a300ad8fcf678eed73cb199795b6f34","first_seen":"2025-10-22T01:17:18.305074Z","last_seen":"2026-01-06T13:57:08.775321Z","times_seen":476,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Daily%20Wins/Gates%20of%20Olympus.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Daily%20Wins/Gates%20of%20Olympus.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"3821-661ac8f4-cae41;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14369\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14369,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"2a5270b2b2f24c3d1b996491a7226b24","sha1":"3d4eafbcb6b4d2ef4ad254e9175b38e414ef7bea","sha256":"55c23f1ac60f17d62b6b4792be068e222369eb47c82af2c9333eaaa35798e57d","sha512":"527ba9f3abe91148e227d89d6ee95a99e5b5b2065d2cf84e518da94334d9a563b3caac6e286934e788b9e3b8c6d3d87d77fe295e10f10829778e989d34c95257","ssdeep":"384:W86hX+IN+2mCKmrvPf33tiaVp8hZ92Ie/wK7R/rw:WbhOIY2mCxHvHp8N2Iex7Rc","tlshash":"0e52c006e91358502fc0c5f4b21914372e4d260e6cd2b87c3fe7995fab89ebd563c896","first_seen":"2023-05-11T11:12:18Z","last_seen":"2026-08-04T09:30:01.587987Z","times_seen":906,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wangsa888.org/wp-content/themes/mabar88/images/games/Popular%20Games/Fiery%20Sevens.jpg","fqdn":"wangsa888.org","domain":"wangsa888.org","tld":"org"},"ip":{"addr":"216.107.136.34","port":443,"asn":396356,"as":"LATITUDE-SH","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wangsa888.org/","date":"2026-01-05T12:28:18.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wangsa888.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 23:23:44 GMT","end":"Sat, 07 Feb 2026 23:23:43 GMT"},"fingerprint":{"sha1":"68:C8:5D:8A:56:9B:DA:CB:2A:87:AD:5B:42:51:36:95:E9:0B:93:80","sha256":"E8:BA:5B:50:03:33:E7:65:A2:08:8B:40:89:3E:9F:18:11:39:7F:3E:15:E7:BC:3F:69:5D:D0:DC:E9:66:4D:52"}}},"request":{"raw":"GET /wp-content/themes/mabar88/images/games/Popular%20Games/Fiery%20Sevens.jpg HTTP/1.1\r\nHost: wangsa888.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wangsa888.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 12:28:19 GMT\r\netag: \"6a1b-661ac8f4-cae4a;;;\"\r\nlast-modified: Sat, 13 Apr 2024 18:03:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27163\r\naccept-ranges: bytes\r\ndate: Mon, 05 Jan 2026 12:28:19 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27163,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, height=300, bps=146, orientation=upper-left, width=300], baseline, precision 8, 200x200, components 3","md5":"10e8279bf8c431e23989b966538d6240","sha1":"f02738b684b862addfe313d8b0443613f2c00363","sha256":"3e6b98125978d8987a5baf20fc7318504967be092124f2ce73c7a05239086c97","sha512":"4050d19660f0665ad1fb77671e3d370ba8d0058e3dd40fbb1df71e4c2d96efd686c86ce73df15d02a6ae84e34be1250d0196b892be446753703448c89b46face","ssdeep":"384:4lgo7WgeoVYUcREr+do9thnrrYRxszlTDZvBLDqa6im1MtJKzUqEt7Nb2q:c6ho5cW+dAh3YRxsHvBKijv77B","tlshash":"1cc2d026fc612c21dba255f2b961d6679603477c8983d9f778dd0a633f308f20e18da2","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-08-04T09:30:01.604321Z","times_seen":770,"resource_available":false,"data":null}},"time_used":747,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"wangsa888.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}