{"report_id":"418de8ac-94db-4cbe-b2c3-5ae4c7672bdf","version":6,"status":"done","tags":["pdf"],"date":"2026-04-14T14:36:19Z","url":{"schema":"https","addr":"connects-ksa.com","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"connects-ksa.com/","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"title":"CONNECT-KSAكونكت ستور","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"13ea372c7f35544a240ab90d852725a4","sha1":"6fdc639f7bf12d3e841d9fc6aaab24e1da1b772d","sha256":"19c2c864fac101642cd80d63b361e8da586bf65301c55ab1c850617a6d79e422","sha512":"99e55404b14c48aa49ee57146ffcdf6fa809dd35a433856820439763faf4b0f4f9c96fbdc07344d2e8f12eb8534a05ade59ac6c1f084237615c23f23a2f3d36c","ssdeep":"","tlshash":"2fe026ea1c76c83464e0028a20f6e29c1a3061a0ba11e60442d9dc7a9e20fe78ce2a48","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-04-14T14:36:39.465107Z","last_seen":"2026-04-14T14:36:39.465107Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"connects-ksa.com","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T14:36:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"connects-ksa.com","ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":126,"request_count":126,"received_data":9813070,"sent_data":147653,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Odoo","description":"Odoo is business management software which includes CRM, ecommerce, billing, accounting, manufacturing, warehouse, project management, and inventory management.","website":"https://odoo.com","common_platform_enumeration":"cpe:2.3:a:odoo:odoo:*:*:*:*:*:*:*:*","icon":"Odoo.svg","categories":["CMS"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Slick:1.8.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Less","description":"","website":"https://lesscss.org","common_platform_enumeration":"","icon":"Less.png","categories":["Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PostgreSQL","description":"PostgreSQL, also known as Postgres, is a free and open-source relational database management system emphasizing extensibility and SQL compliance.","website":"https://www.postgresql.org/","common_platform_enumeration":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","icon":"PostgreSQL.png","categories":["Databases"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-12T22:35:46.689898Z","alert_count":0,"request_count":2,"received_data":69714,"sent_data":961,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-12T23:11:18.280453Z","alert_count":0,"request_count":1,"received_data":70232,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"c285e481e54192c49c5a3c52cb34be75","sha1":"17d580f668bf486bf33be030f0b7f39b94599e63","sha256":"bb80a9686f4eea58d02418bc493a968c831c939a14131709703357de8b4abf94","sha512":"d1b25805ca4ca1ee7245784cc708720e92a89f8928d9fbf5dfccdbc6141443264e8ee6b0b24245f9f039258dfb865f2dd0f5d0357065a01d4e4650a5e8af5ffb","magic":"PDF document, version 1.7","size":16375,"url":{"schema":"https","addr":"connects-ksa.com/assets/images/12fQ%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%AA%D8%B3%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%B6%D8%B1%D9%8A%D8%A8%D8%A9%20%D9%85%D8%A4%D8%B3%D8%B3%D8%A9%20%D8%AA%D8%A8%D8%A7%D8%B1%D9%83%20%D8%A7%D9%84%D8%B0%D9%83%D9%8A%D8%A9%20(2)%20(1)%20(2)%20(2).pdf","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}},{"md5":"475ba25c636d8e090818203197526c2c","sha1":"abc47ef3bade3b50fb9c0e0801095161337d5e56","sha256":"d850bd1dcbd82a069693d49d0f1c721be87608e00f47b4096ea913a6b9354da6","sha512":"3cb1ad73c568892fe855532c12277e313df1c7c63fadfb88e55a95ec7aa5ed1705c8509b9eba4ebc97aeb1bd86c90d872062d48673a88b3d124a5b9cea08fd7f","magic":"PDF document, version 1.7","size":388430,"url":{"schema":"https","addr":"connects-ksa.com/assets/images/12fQ%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%AA%D8%B3%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%B6%D8%B1%D9%8A%D8%A8%D8%A9%20%D9%85%D8%A4%D8%B3%D8%B3%D8%A9%20%D8%AA%D8%A8%D8%A7%D8%B1%D9%83%20%D8%A7%D9%84%D8%B0%D9%83%D9%8A%D8%A9%20(2)%20(1)%20(2)%20(2).pdf","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":[{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/12fQ%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%AA%D8%B3%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%B6%D8%B1%D9%8A%D8%A8%D8%A9%20%D9%85%D8%A4%D8%B3%D8%B3%D8%A9%20%D8%AA%D8%A8%D8%A7%D8%B1%D9%83%20%D8%A7%D9%84%D8%B0%D9%83%D9%8A%D8%A9%20(2)%20(1)%20(2)%20(2).pdf","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"475ba25c636d8e090818203197526c2c","sha1":"abc47ef3bade3b50fb9c0e0801095161337d5e56","sha256":"d850bd1dcbd82a069693d49d0f1c721be87608e00f47b4096ea913a6b9354da6","sha512":"3cb1ad73c568892fe855532c12277e313df1c7c63fadfb88e55a95ec7aa5ed1705c8509b9eba4ebc97aeb1bd86c90d872062d48673a88b3d124a5b9cea08fd7f","magic":"PDF document, version 1.7","size":388430,"meta":{"version":"1.7","author":"","title":"","subject":"","producer":"3.0.32 (5.1.19) ","creator":"PDFium","page_count":1},"extracted_urls":null,"alerts":{"urlquery":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}]}}],"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"connects-ksa.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02409c5211c041179f0aa75be6b28ef9","sha1":"b1124b7955b8668a3d5078cc6c8acf4943d7045b","sha256":"2200df8584771e204e001f4b3c1c219edf9175100b428cd0f7e6b714cba147ac","sha512":"7f062e67ac936f9bb19670df2226b2682a05a786e3af0b28e88e778e389ad475f17e5a7c09cf6533f641c76284e338cf37a1d7f549e992d3094f640a5b6e124e","ssdeep":"768:dlpHKaTAX017+k88wwH9wJ8iIie9UOUVoBajOT70k1kg3uHoME67F/B:zTw017+k88wwH9wJ8iIie9UOUVoBaw1O","tlshash":"fed2f8cabdea3218d35f50b8117370cbbaab1cc473845594d210e8fbb9a031571b6ed8","size":29341,"data":"","first_seen":"2026-04-14T14:20:11.780154Z","last_seen":"2026-04-14T15:29:44.129683Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/jquery-3.6.1.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e26506326a182c4175e54acda7ef15e","sha1":"01ee1a965e756292430031c46f258d6e2d3a961d","sha256":"df3941e6cdaec28533ad72b7053ec05f7172be88ecada345c42736bc2ffba4d2","sha512":"097eec0cea7b51302afa2d4560895ff54a36ef1e28b3e9067a84fbae0c2f63ee1d9a3a95d08b84fc1979855b239d03d08933a1017d4edabda3e5b8ec141beffc","ssdeep":"6144:WJshNVlG+TC1lFhTzeKpTcYmD2zK8U1Js3Px+WK+N7TFyygRWL/Ia5geNTIPfgy1:4jTcYmD4I4Px+WK+N7TFyjITiPflAqqi","tlshash":"5a54a3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","size":289812,"data":"","first_seen":"2023-03-07T13:47:10Z","last_seen":"2026-08-04T15:32:37.359296Z","times_seen":938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21295c8a237595e1be6231b6bab53f2d","sha1":"ff724359dedbd07878afc1019c6fe2209e3506f7","sha256":"8988c8d0b32655d949356b587709ccdd529b042f08726bbd1a6e3234495485ee","sha512":"2dbd1232d0c4d5d031e5ea2c4920c9e16a04c0870d06c69973e7610d9cc42a3ef3c4c165d439316a1d2b30df051f01ad53339cc162736246437c014f028f33a6","ssdeep":"96:I6XfKyfVSbHhDML0u3sqFvSmMR3yrR/Pg8R/+5KR/4lRLGk6zDm:33fVS8FvSN32P20eLGkaDm","tlshash":"1fd1ed06e5aa22a7033b20380f6f9208977750679709dd71789c7ec04f88e5e9af56f5","size":6442,"data":"","first_seen":"2026-04-14T14:36:39.554298Z","last_seen":"2026-04-14T14:36:39.554298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-10T17:58:40.786178Z","times_seen":111144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-10T17:58:40.780905Z","times_seen":110719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-08-10T17:58:40.779536Z","times_seen":81063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5a60733fbc1ec3b66db5c10d65c4c19","sha1":"286a996fdcf715b7da1277f2f6c61c5bf0549ea2","sha256":"614f58ec96f725f2c6a7914ee17c7171d8d11b84270a173e701b04da40d27e36","sha512":"58903c560851b6d83fcbc5ae30db6a4ebf03507f43cbe17a70100528084ffcfe596a77ad4932900ca35f3bd276e1f31600a8e2d37a63d247af6ef61d2d3cee38","ssdeep":"","tlshash":"b3d023e71875883051d4014a10b7d3e8257021547b11720081cdcc3f6e21ee344f5a58","size":217,"data":"","first_seen":"2026-04-14T14:36:39.555301Z","last_seen":"2026-04-14T14:36:39.555301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/js/bootstrap.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"565113dc4ee4110c542c2c5e3ca0e8a5","sha1":"46f7f7b8d5b48c3e276e34fde25008f95be9f6ac","sha256":"2c4265c7d6c4deff87bb159422d0d4c842f8cab5edef1a76774e7c31a7f18f62","sha512":"90ea152af7fca040d1c4a97d14b5da4f94697a189750f197238a7f9fcb8a34ff139a5d2fdf5567a4064d6e931500eadbf3618229e10136c94d9db38867cf5979","ssdeep":"1536:8dv64JKF0vIAsK/NfPlWyO+J+ppSQGUl7hsg/ohrw10/Mm7V0b+Q:8yI0ZpEQPYf/Mm7w+Q","tlshash":"08e352093efa2463456be46e4bab4156f225408b350ade987d5c0bcc1fe983051ffbe9","size":145677,"data":"","first_seen":"2023-03-10T10:42:20Z","last_seen":"2026-06-28T23:41:27.577603Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/ajax/libs/slick-carousel/1.8.1/slick.min.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-10T16:51:54.684667Z","times_seen":110941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4823585acc9a0f4c42fb115360bb958e","sha1":"cd1bf961753a8bc5fce719beacea9c8e806df701","sha256":"a0bf3078614b35e54a5b64c9d43c44f3edd454fb2282b91f4cb48c1f56e1a7c9","sha512":"514e6e9cde61e3528ecea26b2238aaef191f23f4bd586c98ed0b3c48422229667badf03e4424ae0b74b494ecfbd91d962be2dd8c6aec236bd76acd942e21fde6","ssdeep":"","tlshash":"921100b63a2a1534c5c5408b317ee7a93d3260217e02a044c36ccc385d18e9714efdbe","size":902,"data":"","first_seen":"2026-04-14T14:36:39.556201Z","last_seen":"2026-04-14T14:36:39.556201Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583003408793715683_black%20(23).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583003408793715683_black%20(23).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:45:40 GMT\r\netag: \"aa64-63f2a332c9500-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 43518\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Utbj%2BmRn6w590RYBibnb6ykt%2FTZ8tt5%2Bwy3jtkH0LRCfK9FUe0od3tJDmCTk5CV35poo9i6%2FXtL4y%2Fz5dlKyvyd6gfxPdU74QI6fIAylO%2FikDhzrlBJJOMHf4qTccdpo5Var\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e6d3a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a6ed62d166bb01749b6ef9c5ed0f9a9","sha1":"af04bc62e4c079e4df18ff1248db77f5168fe093","sha256":"5e711097441e629fcc4da4f193e78d73662ba342621c30ec47b4bcc12a3993bc","sha512":"372e9c31afbfb2c79002c3b1728e348127259e6b12fadb5895b2463f4dd2dbff7c6191598b3eddabb29e0d5a094191312ed3e6e0eae82ed261f89e8edbb0a8d7","ssdeep":"768:WGfap0LxAUbZ3851a2JOMfqN7cIBEpVudr7+kzvgBsQ+ruQxTZfgCm6wM3wvgq5r:WGhbJ8ra2JOMfqNo8YgXsaBNx9fgdnb","tlshash":"b813f25aa710c919f6e78972b3ee87de65ac6020f9c0e034dd271f84f0121d386a7de5","first_seen":"2026-04-11T04:40:33.576531Z","last_seen":"2026-04-20T13:14:14.908989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539065532148843946.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539065532148843946.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:15:53 GMT\r\netag: \"6afc-63b2b310f9040\"\r\naccept-ranges: bytes\r\ncontent-length: 27388\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhVuSsXovSNn4T3qm6ZctHZWOK2k3x9qKg3wRGRVAvNmUGGaK%2FilVGUoOjUiTIt7SsM6pBzf1u5pMNjBuf70T33GEQ89Hz5UfVRxZ2kKaoZz6vMrC%2FNbl%2F12qpm2IObMIBYx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f0d7a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27388,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"84f2094d6b8f29b25ed0f47a427836eb","sha1":"d4780cfe49512a5392e868626274df890d3ea77a","sha256":"5c17e74dbe1b05d13160a22c827b16dcf9fc7b5dd2deea8aaf4fed23291936c4","sha512":"e87afdc91be900546363e127474cebcdf8daafe0350b4703db1abc0267299b234a3e48e9845aff3b12a9c72ac23a4613a1a38f668bd49543a4f9317238209a85","ssdeep":"768:1As+59TeuPfkSw2Dz3U4U53a0dDnsrxPEO:ATxnjPUx5KO0xcO","tlshash":"47c2c032011dab85cff32d78b3dbefe6ec22c2b499060bf2556a20500047a336986b58","first_seen":"2026-04-14T14:36:39.467201Z","last_seen":"2026-04-14T14:36:39.467201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539057992176062230.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539057992176062230.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:03:19 GMT\r\netag: \"21bf2-63b2b041e6fc0\"\r\naccept-ranges: bytes\r\ncontent-length: 138226\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qm5Saro3FDpyLIw6PHB%2FwZ5Tq4ANpQ2MEjdS7eJzSAtIlyIBWOBZbAe4N6k9HGNL0o4pFi5V6O%2FK6nWpetpzb0I0goNX3OStk2BgvUoGvvYOBGVidV5EQpdxUPVP3yWIZele\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f3d815693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"8f110ac9c524a1f3088ac6e6594b33ec","sha1":"e0b05480f0286424240f56ef1cf2a4a062726542","sha256":"a66d42f9ff7314ccd1e0f52e70803f62870380dfb181294270a997e9b543fc1c","sha512":"549d314c2702cc2bfa29fe02628505c09ce0556e9f5aad90121c24d8bd07188d727cc61911352f84e7a497f9c7c59bbb81a3411521a597a65ea88ace59304dd9","ssdeep":"3072:h72v6aVZaNX+WcO/USaRZGEax9+VwvYWl/R+:h26aVCjQo9+Wvtl/R+","tlshash":"97d3124c7cf7c85cdbaba05fc28899175be36cd289443536a2e0f17bbd280a76423d25","first_seen":"2026-04-14T14:36:39.468308Z","last_seen":"2026-04-14T14:36:39.468308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583020741289064353_4829426479_1%20copy%20(26).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583020741289064353_4829426479_1%20copy%20(26).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:14:34 GMT\r\netag: \"5726-63f2a9a875280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21795\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPDwdtn4cEk70dgK1SCfUw0vg2HJosjyEHU67%2FFjQdp5y1WWe54Gw9kMGqpRInhFmfIcJnm14uD5vOpzmg6p3YmOppYiPr12%2BoA4vtPbOw32jmHg7aMIk6fvVS1aANZryAX8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d415693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"196eac935212689aafcce39d4cdf61d3","sha1":"41bff94233811391f8ed20de9b37e791d1ffcedb","sha256":"73fee905c1e42abbb58fd0ba60c13781136973be89f66d1ba7453bd7d414a4a3","sha512":"2e813d163eaf83426b48276845d7dff246600e27c3ee37d397f2bb9c1e99752e5df57504baddb497cea7ad29c26e27608affe600cb86b737179b152d42c40aed","ssdeep":"384:J7f01huQTVJ9A2BowNIlO3chpMZ1AIqUdjnaF8EH9zPtINox19WW:1+3VJG2je4cWb1FnO80jtxn","tlshash":"85a2d153c87f7dce878df12ae6e077ae2e80c9f50da0764eda2d99405a419168a5b03c","first_seen":"2026-04-11T04:40:33.540752Z","last_seen":"2026-04-20T13:14:14.903774Z","times_seen":10,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17743385331764263112Pnf266NkeXd8lYDw3A0sbsPtIbV57su1l66Ca5Sm.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17743385331764263112Pnf266NkeXd8lYDw3A0sbsPtIbV57su1l66Ca5Sm.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:48:53 GMT\r\netag: \"95b8-64dc06204798a\"\r\naccept-ranges: bytes\r\ncontent-length: 38328\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70mu0lgoJZk%2BnmfkwygJxZQiH93%2FajfEtlLM6pSp9BoabQHSw9jMoqa0V%2B2nXTHFkk%2FTmGiiMSYfB%2FPL1vFAkIog0fSO13XimsgeGFWec4l%2F3w%2BLYYQeqCWqPBxZUxw2i9dq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9ec370982deb5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit/color RGB, non-interlaced","md5":"8d36f73c3569ba6dc874b39a9954775f","sha1":"afac51950a37c5dd17244078e38f1634e132669c","sha256":"84be06f741ee8a5f9e3496afe5e10706ad1ded0b9d1bb29fb1abd88cf0932db2","sha512":"fce2d4a4dd4e7c4cd05cc61b19650ef06f1cdffa8e582e1ca5820fc1778a56b794abce25206fb0201f712637ac2b78515c8c77e09ed2e022e270d2f27211ddc4","ssdeep":"768:6A6qD0//277xadoWfJpX6HFNF5KWNz/FR+v/SHvP0e1i8R43glEsqtMMU7Sx1/b1:iGxadoiyFNSW1L+kvP7I8RYttVLb1","tlshash":"6803f1d112b89ef3ea51bc3274aac25b16dd4d474743b6f05b02c4653170bd535be8a2","first_seen":"2026-04-14T14:36:39.470021Z","last_seen":"2026-04-14T14:36:39.470021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583000305504227272_black%20(21).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583000305504227272_black%20(21).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:40:30 GMT\r\netag: \"aa64-63f2a20b25b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 43518\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EL1p2p%2BhV7KBvdwQsnyzYxTQFT%2F8I6oaghsK3GPbKyNVUPiLEgBZJPQHCd8W1GousdxETbtzy4s%2BYurOQ%2Bv1BVnSvfJOdan1dULEhl1D6FxOe2Cgrd2VbPMbYW1PRNMWDlLg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d3e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a6ed62d166bb01749b6ef9c5ed0f9a9","sha1":"af04bc62e4c079e4df18ff1248db77f5168fe093","sha256":"5e711097441e629fcc4da4f193e78d73662ba342621c30ec47b4bcc12a3993bc","sha512":"372e9c31afbfb2c79002c3b1728e348127259e6b12fadb5895b2463f4dd2dbff7c6191598b3eddabb29e0d5a094191312ed3e6e0eae82ed261f89e8edbb0a8d7","ssdeep":"768:WGfap0LxAUbZ3851a2JOMfqN7cIBEpVudr7+kzvgBsQ+ruQxTZfgCm6wM3wvgq5r:WGhbJ8ra2JOMfqNo8YgXsaBNx9fgdnb","tlshash":"b813f25aa710c919f6e78972b3ee87de65ac6020f9c0e034dd271f84f0121d386a7de5","first_seen":"2026-04-11T04:40:33.576531Z","last_seen":"2026-04-20T13:14:14.908989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583016338489546900_4829426479_1%20copy%20(24).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583016338489546900_4829426479_1%20copy%20(24).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:07:13 GMT\r\netag: \"5726-63f2a803e3240-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21795\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhTveRcVDvr9a2TrLhMW9SXM78%2Bs1NcZuU7FbiTwsr6%2FxDJ27Muld%2FaIgklRY1J9%2BjunIQLc6Sw%2FuvNBJmtb%2F4W65dzxSsIWgGaXcvhMAWr6K1dFHyGqI6GPIzi%2BlW%2Bix3Ls\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e8d475693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"196eac935212689aafcce39d4cdf61d3","sha1":"41bff94233811391f8ed20de9b37e791d1ffcedb","sha256":"73fee905c1e42abbb58fd0ba60c13781136973be89f66d1ba7453bd7d414a4a3","sha512":"2e813d163eaf83426b48276845d7dff246600e27c3ee37d397f2bb9c1e99752e5df57504baddb497cea7ad29c26e27608affe600cb86b737179b152d42c40aed","ssdeep":"384:J7f01huQTVJ9A2BowNIlO3chpMZ1AIqUdjnaF8EH9zPtINox19WW:1+3VJG2je4cWb1FnO80jtxn","tlshash":"85a2d153c87f7dce878df12ae6e077ae2e80c9f50da0764eda2d99405a419168a5b03c","first_seen":"2026-04-11T04:40:33.540752Z","last_seen":"2026-04-20T13:14:14.903774Z","times_seen":10,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":742,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/uploads/iphone-16.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /uploads/iphone-16.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 26 Nov 2025 17:57:35 GMT\r\netag: \"54c61-644832193c1c0\"\r\naccept-ranges: bytes\r\ncontent-length: 347233\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teM5%2Fy2kyQ0mo2dr0d9Zea4s9A2hLIrRh3ICjeXu23CnyCY9jgGfgiC5C%2BdaMmJJpJTTnpkTuYrjAbsyRwPx0BnyD2AlNS49UtuTxHcbywvXW4SgzMSGPf3t9aokNfrtrVy3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e8d4b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":347233,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x417, components 3","md5":"2f5606129f5fbaa08fb05c2b33ee651c","sha1":"fe16d3c0c24d525c780e76550284a5862a61d01a","sha256":"fe5fb270072a22e954a910318f0f73cc7b580e4a9f4448ce6fab0e1ff7571ae2","sha512":"bf006c3103c388af18c110fc3f9851e289c6c52d27f938cf07cf578b506cba6ba46b6e5ae100fa9c24f70d283c40199b8a26a1dcafeb1d03ffce488d4706ad88","ssdeep":"6144:x86Hw4ypKwYrFlfP/YoMPJxuQfLBmCyZJqbdLIThD1EDc1pbrtkBB2XB:xbMpKwQbXpcu+gkbdkRKDcrbrta2x","tlshash":"2974232fad210a46ef2266fc8781c30af6adffbf3c758d681875f127a5514a04f61885","first_seen":"2026-04-14T14:36:39.471124Z","last_seen":"2026-04-20T13:09:55.694324Z","times_seen":4,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":469,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1754308331s24u-colors-800x800.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1754308331s24u-colors-800x800.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 11:52:11 GMT\r\netag: \"b8cc-63b88bce550c0\"\r\naccept-ranges: bytes\r\ncontent-length: 47308\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flWBG844HpG3CHXTPQn0Owt3%2FC8vz%2FaAandmwrNfNKQBf6uzwXFvxn8Bgz5rG0gwl%2BCWNfuTmPjE%2BAhu95ihf%2BIx9C%2FZIbtLKyUFAwHspfLzQZlEoR1qm4qEJv8rXI2xakmX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ecd625693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47308,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"2d7bffa41b786d8a4f5e4dc4e658e4e4","sha1":"1e0b0cedd6b7cd46f0d067ddf15e2d2213abc4dc","sha256":"222c51b28a077136e6f6c5caeb8ec2bfae642ecd194d40852bf96d46f01e343c","sha512":"2c5bc85d02b158a11a01f7e5d715febbb088a10ada313b25d0072ba214676d4a3a9db48ae8937b3f72ea182de9ba79b7610f4639f773a9ee24738b02f0e32091","ssdeep":"768:2RK3T8rp5dlsAx58Syg//E4LotzegFhvExoCmr+YTH2vYdqvV1G8/ePD97GJkqRf:7QrjTDxz//s4L+dZCmHTzyGXLhG2qRVZ","tlshash":"1823f1bc6b5e7a9ffdf8ad3c0ad2d0c4aa4c09274e4ced4bc6c158e4c4f0289969c061","first_seen":"2026-04-14T14:36:39.472104Z","last_seen":"2026-04-14T14:36:39.472104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539063342627844253.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539063342627844253.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:12:14 GMT\r\netag: \"65df-63b2b2401e380\"\r\naccept-ranges: bytes\r\ncontent-length: 26079\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A2i28GDWiVoRlyu0e7xWNb0KXtPtORZFMdsk7AYlP5eXukDb2CliXz8psI2c4Z3W3YYsHmMbBe64wNdVdLtbvmFQu9HDxaKz%2F6Vez7oKF7O1dtepofw7QkpJfI3gJeE4eR7i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f0d7d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26079,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"ea306a5c84fb2376e77c0ce518a24845","sha1":"f09acd35afa2d6f8a2d23af246c81d36e12111ae","sha256":"c6e17515176e9e94b4babba969fcc78e000ab6c51dd80cb1a8dbfb68d6c90f1a","sha512":"6fcbb5aaa9e5de28e147ab5f0119dcf92b308080fba4a3bfacadb471d3cabcf3f807b3bcfab8cf77ee20428dfe67e74a48e10f997f4804b8a18d13aaee12b09f","ssdeep":"384:JkwkkCimNCUX3nZ9rYGPhvYnUeGiGNEMeBo1TefiD7CULq+pDf3Ffs:tkkCX4Q3Z9rz5vYnUk3xyTeqTLqkL+","tlshash":"72c2d006cba47301e66c443b52ab7e5ec723efc8b40d2e3c692618d6055ee71be44e66","first_seen":"2026-04-14T14:36:39.472953Z","last_seen":"2026-04-14T14:36:39.472953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/lcMG1763286199u1UoQ7Rus7StCt4JsFyWsDgBZJTTALgQ3udbUhEc.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/lcMG1763286199u1UoQ7Rus7StCt4JsFyWsDgBZJTTALgQ3udbUhEc.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 26 Nov 2025 15:59:06 GMT\r\netag: \"546a6-6448179d90680\"\r\naccept-ranges: bytes\r\ncontent-length: 345766\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srSPFoApEEv1JjkXRjfRuFNL8kMY5Vt1g4B4cP1izzSFI67QD3Bi1vBMwSHIfwiLQyzlNS1vsPacC0pL%2FZywKm%2BL3fEO9FsbmRizxVP5SDTEEPz6WKB53aNwr2h18h4JlGlH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e3d245693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":345766,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x417, components 3","md5":"1640e1708f062a957c2d9caf3418c2ad","sha1":"fb1bf0b8d9742b338ec04de93b32e02bd1fb2779","sha256":"a742cd5040ddb66b9f84375f1f3ab576c4b9ca6662b6ff019bb1006c5c0b560c","sha512":"b7486ba213823d09d0d486ea5eda792b7162aad1ec1cb438efe40b127cf489090c1553c79912b69a4eb0bea4878d34460d8740cdb2ab1cd6648b9f6832928fda","ssdeep":"6144:bmf6L6qCQH3hZtivPkzBXgOFHNAFsO4ybTR2VyMsNrxay+i7pZB:bdP38vPCXNHNosO4m2lsVMXiN3","tlshash":"61742305837baf58ca4d76726eb43f29f3f0751f2d150a3272d5eb9486530de04816ad","first_seen":"2026-04-14T14:36:39.47392Z","last_seen":"2026-04-14T14:36:39.47392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":999,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":497,"receive":502,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/IyINpl161440014-144hz_gaming_led_monitors_desktop_pc_32_inch_lcd_monitors_with_2560_x_1440_resolution%20(1).png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/IyINpl161440014-144hz_gaming_led_monitors_desktop_pc_32_inch_lcd_monitors_with_2560_x_1440_resolution%20(1).png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:16:51 GMT\r\netag: \"4faab-63b2ce1abdac0\"\r\naccept-ranges: bytes\r\ncontent-length: 326315\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQyyUNayso3NlyNXWkPdTeGXz8bi0RWuPr350LiMPKD948Xo7FOdnOVz0wq40frfGto5NtHQ%2FKDkBVnY6txRbmXZL76F32XnDNvID2xNWoXISArOKBJ4oR4I%2Fwpx2xzupDyB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e4d2a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit/color RGB, non-interlaced","md5":"48032f1d891d765d2aaa97453dd9277b","sha1":"8c0be091f86545b49b8380f8c89f94211114b3d3","sha256":"f31adcaa293e9a0fffb4579bc38d6abd49f0fa80b183380bad90070fced04123","sha512":"88b32aa6b578de875d2e5d8e1cb41dafd95c0681065e765613034d6bc5defba306a968e6b835be75d3d5edc107794b40cb4f4d41405ab526dd5795402302c5ad","ssdeep":"6144:v6DGDd3mfGf5cWlqkbv9GobhvNAYqftxsq2LkaDt2N:vX9wmWGqkDDD9v1D0N","tlshash":"d76423168dc74f61d929dee5ccde5d7fc689b4b02cc28346afccd8ed9255d282229e20","first_seen":"2026-04-14T14:36:39.474969Z","last_seen":"2026-04-14T14:36:39.474969Z","times_seen":1,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":701,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583002002205562349_white%20(21).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583002002205562349_white%20(21).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:43:20 GMT\r\netag: \"9692-63f2a2ad45a00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 38437\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zjRlwsw9634Q8Ezl%2BdJgUkrwCQPBjDZA%2BEN3fON4QaEXKUAQUhAEP1bOUfmb%2B1pRqO%2FdgccdHvCl%2BEk3E5%2BWuVHtALYxQY8lHAmoXK3UuXmG2D9RQXQecekeGaEZtq7mWTS3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e6d3b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec0a5772480e56d185b4f40c05a25b1f","sha1":"60baedb50b60c9eaa8bad5447eb6168e60add594","sha256":"44607093190f54d0afd9460d92496b09f03527f7c1066340d4b87164b21dbfd5","sha512":"afbed767965eea153f4ecb3b6a21811c3621bbb940669186e94228ae01dd36dee8637ecbb1a1f12a40aa56d04ce97b8d75688319531c5fc7409639a003502792","ssdeep":"768:q2e43CodfsdzUyTdbAVBinIKrvflOY6KyUdIhQnX7pPa9oOqk0kt:7ZsdzUyT+2IKbpvKhudPa9o40kt","tlshash":"fc03e1f24a54943ad96866f71bc6fb760b77f0817ee66eac8b010ec0e494f0a53345d1","first_seen":"2026-04-14T14:36:39.476029Z","last_seen":"2026-04-14T14:36:39.476029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583014731575670338_4829426479_1%20copy%20(26).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583014731575670338_4829426479_1%20copy%20(26).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:04:33 GMT\r\netag: \"5726-63f2a76b4ca40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21795\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOxEgAKXSGzAGawqdL5%2FtruNdoF6%2Fg1DGFPH%2FjGX%2BSbBsAVoB99sBmytJIRagfWjXxZteO7srozOyr9L9k09%2BmaKeL2ktoQDwUhl5A5fCUSjn3b9EIxV5ycw7bNQylUo2Eev\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e8d495693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"196eac935212689aafcce39d4cdf61d3","sha1":"41bff94233811391f8ed20de9b37e791d1ffcedb","sha256":"73fee905c1e42abbb58fd0ba60c13781136973be89f66d1ba7453bd7d414a4a3","sha512":"2e813d163eaf83426b48276845d7dff246600e27c3ee37d397f2bb9c1e99752e5df57504baddb497cea7ad29c26e27608affe600cb86b737179b152d42c40aed","ssdeep":"384:J7f01huQTVJ9A2BowNIlO3chpMZ1AIqUdjnaF8EH9zPtINox19WW:1+3VJG2je4cWb1FnO80jtxn","tlshash":"85a2d153c87f7dce878df12ae6e077ae2e80c9f50da0764eda2d99405a419168a5b03c","first_seen":"2026-04-11T04:40:33.540752Z","last_seen":"2026-04-20T13:14:14.903774Z","times_seen":10,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539120202012248142.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539120202012248142.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:47:00 GMT\r\netag: \"b2d89-63b2c76eb5d00\"\r\naccept-ranges: bytes\r\ncontent-length: 732553\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1an1vKQJFoephzviABdKf7W07bWq5HDZIzJw4kJzvcOrcX7tg6Xzo0g8n9Hj6nmoYrwn0zCqYU7CQylBWIrD%2F6%2F%2BnFu5yIrmoQFW%2F7FTsxOV8zq5jW6ZV0rooVBV6MH0S5Tl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708edd665693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1350, 8-bit/color RGB, non-interlaced","md5":"839b6d853231ecd6e2bd1331397fde90","sha1":"4fdb78f257c6ffcf20d00559e21724c984032811","sha256":"92b63bcf545b8014eb4d2986292002985bb1be9b04d4892f16889c5d1a6454fa","sha512":"2b5fcea4dda5896521029003489b3d8d37c8fb0a286ebe9cdeeabcf4068aa0872d6536fb7ec2988564f2843247a385773d09c9e629b178daa526371b323c371a","ssdeep":"12288:/cXCtoiOtTRtyAzS8KR441cvo3n9EM0domA1rKrn7uxja6yJYOGxtgnJIRfvohI+:RfkFRWy4Om6M0dP39HkUI1NfW","tlshash":"99f4337c0ac542d303f1b4206e5876a88273f3219bfb49252d7f5ae127a9895b253f27","first_seen":"2026-04-14T14:36:39.477082Z","last_seen":"2026-04-14T14:36:39.477082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539053702621214333.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539053702621214333.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 19:56:10 GMT\r\netag: \"237d-63b2aea8c6a80\"\r\naccept-ranges: bytes\r\ncontent-length: 9085\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnP%2BFhW2RMcHbM38XGnKjItkPd3alOdRqnD6P7np30isgERLOTMUttAAkJomsdgAbFm1idKrO7FrE9VxkT80W6MZvXzo7YWZorFZAnqyscK8c6KFlfPGT9t%2B3%2BeowHomXVMK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370902d8f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x400, components 3","md5":"e155031eb62294520c22550be96aa6f4","sha1":"5a1427c0e40d856ebe2af0d3d0d5853a205898ad","sha256":"3a28b86ebd7afe5ee1444a10af59ca2ae60b8e45719c1f9299fdfe0c12f3621d","sha512":"8659192488bd556409b8d3f10df91263a6bb5e6dd09d890cf289dad0c6827dfa49cb1ff499b0bef6e6dfbb754c414c5f01ffd6afacfb7eaa847951e94d536447","ssdeep":"192:mXEJGf14yadaYkX+GoBrDvvy8mLQLWgomz:nI146X+DC8mUKgoS","tlshash":"aa12af1623192088e3087a3b9371f1a536825c51eb0edb7835d17c15fd1ae784ed75c9","first_seen":"2026-04-14T14:36:39.477935Z","last_seen":"2026-04-14T14:36:39.477935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/image/icons/visa.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/image/icons/visa.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"5383-622ed5b065880\"\r\naccept-ranges: bytes\r\ncontent-length: 21379\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kQRzgY7HGQxseKwXLDpftrXDOwcZuVZqJyBz%2Bd%2BOlbySVC4l2v9qqRcdxwjDgbm827THapf26UnjIvQaWEspVpi4YetL5THPc0bKzEQa%2F7%2BeMXxdgOpEgUhGNJ6YB%2FgjmWUp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370907d9b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 500, 8-bit/color RGBA, non-interlaced","md5":"6195d441485dff57b681f8125678dabd","sha1":"14506cdf17597adce2164a7b5c06f2247083155a","sha256":"13e6c75b65f6d60a1428bd8993d28ccbe1a1f198b60aa3e5279e765320e37f44","sha512":"9559d39e59b4c06b135f91346c81e2548a760f0aa0a249c7488cbd7e5ddb17599fe12caca3d99b92f6c6a24ae597cccd1b6d47553921ca654ac0823cbe7377ef","ssdeep":"384:2bWWeHWWWWWWWWWWWWFW6cpjwCTgv89Z9UQHbIjPN36pKE/E55OratHGgJCo53m/:3c6CBGQHSPN36pPckaR4ohmQt6","tlshash":"4da2ae24e912bb89ff8f1236e95f552bfed3a3374151b044019598d59c62fa32ccba88","first_seen":"2026-04-08T13:32:08.336111Z","last_seen":"2026-04-14T14:36:39.478879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":276,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17540851791954780781.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17540851791954780781.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:52:59 GMT\r\netag: \"856c-63b54c80004c0\"\r\naccept-ranges: bytes\r\ncontent-length: 34156\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yYcdoCxDKdImEG7J2ZK%2F87L4wjS6ltOwawYSm9c8LE%2FPX8h4%2B5xctmzVrvmxYWhFXjd0MZZSSGFMX17ynZVsRk998MqKIbl0b7ApJzENqSOTRMxPcKiexw0htMRv9Z3uSpi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ebd595693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34156,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3","md5":"b730470849976405a8639dd467929e64","sha1":"d7842673b6f6293b99d5b642b997793e79e8a80a","sha256":"d03b360a5067c34efaf23586a2c1fc0e36f18641b3d4f2316fcc9ddec0c70282","sha512":"ba08950e12ac5b2ae428df51664f74dfc054a0a988cda07af727af59c5db1fa86aa210a7845fc822cabbc9a4c2fa9700f99098fa726e3665edfd227ac5f694f5","ssdeep":"768:l7Z+thV4kRvzZzt7zk5+jlmgjC3tKiPSZr0gFdWhlWol8edz:ld8VzPztHg+jz+NaZXF8qol8edz","tlshash":"86e2f117dbcec423d4eb097b52bd28354e90aa140ccb3b5c6e0604fbaafb5894f53584","first_seen":"2026-04-14T14:36:39.480257Z","last_seen":"2026-04-14T14:36:39.480257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":502,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/image/icons/ecommerce-latest.webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/image/icons/ecommerce-latest.webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"4c0-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1239\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPNLLXoxAz0paS5b3slt4XMyTbeYjnaPHuBT68h5aHVZwSF10DDVDOawPYhdbeufbSL8SPRNNJQwn9uVkrULAnIQG4RnvRDFOwxVAHUkHBPOfkc7Z2jjjLNFXsRWQ9dkayP9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e2d1e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1216,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"835e1f165c06890cacabbbb59cfed486","sha1":"a296a8aa29cc5736e9c1950820af474340fed1b3","sha256":"096923f62e5d57aeaba326a827f70b70128b5ba4774ff7465eb72715b41a91f2","sha512":"c37e0d838673c79ecfb23fb8c110d0de48f7f78f4caa794226f799d658b9a42a50b77d7c39172017f272f7d61f63351a1efee6da964dc618a6854e28dc5281f2","ssdeep":"","tlshash":"0121da76f60e297047e2a8f89162f3c32921005b9865bc3eed02d82514fb8b16ed1387","first_seen":"2026-04-08T12:47:06.440394Z","last_seen":"2026-04-14T14:36:39.481372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/ajax/libs/slick-carousel/1.8.1/slick-theme.css","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick-theme.css HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"c4a-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 874\r\ncontent-type: text/css\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqIXEQ6UYUjAeB9HOnbWjxwuvIwCfrPTvYMmHNyXJtTlOHyhIe%2Bo4rnoMSZOXcBKWBH6VCwBnN6SmxRklMSqDda4UXnvx2%2B6K9OnufG7yrtCOq5fmDtriI9BqKtYLyBMtBkb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ec3708e2d195693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3146,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4c970b21989cd4972ebbd1f9a71d94da","sha1":"33c8030f48c7531b06cc3295d9deb8f7bf4ad1f5","sha256":"fbe3c59c455b739a97ca83e1c2b02d3461386b969b714db4fbd5157bb5d939fc","sha512":"9b78020487fe226e5ad24b08f48bdbd60d2ea732b3b69a9baec93cdbe32f7dbfda8b94d9a1ee4fbffa098503d57569ae64859470f8b311c919fd3c1088c1e1bc","ssdeep":"","tlshash":"dd51e09856b3a746101694903be7472477cb70131629d8acff95638d8fce0d8eac934e","first_seen":"2026-04-14T14:36:39.482465Z","last_seen":"2026-04-14T14:36:39.482465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539117582536840787.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539117582536840787.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:42:38 GMT\r\netag: \"58b4-63b2c674d8f80\"\r\naccept-ranges: bytes\r\ncontent-length: 22708\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hwDm49AC70LAvdh%2FJ3h%2FsLh1lXpwvxZQqU9F%2BoOxWzkarLnQuJWtKWt8aHyaW8v2pd1bbjHMmI5VP6HyEEFzBFHSiWYvLdc5FrN897jB0wNcqPRlaNiYNnpb150VK7GKNPzB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708edd6b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22708,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 746x763, components 3","md5":"1cfafcc889c5e1016954397e95f936e2","sha1":"61b945e8a83e515270d22bd09d21bd8b0c91becc","sha256":"304249d9c08526e0880951c57c00be229481205911633d10837aeb28e870bc31","sha512":"5c8b01940772013ebb2494a7136abd00aaa26869bb53b7fbc838718e8f96898418b3208dac358df7286de11d003b158be592887fd59d080f8d514da7cb76b898","ssdeep":"384:TkqEopMSrG88K9vf/AqYKFbZSypirqsU6vrf1IqZ7BJpuKEuugzJHXoC/gZq:TO7c80fAuFYrrqZOtH9Tp/6yJHXB44","tlshash":"ffa2e17b838a381df7ede7be1d1908b2dd360c3405e752e3e4198629599eaf146c40f5","first_seen":"2025-11-03T02:23:29.263827Z","last_seen":"2026-04-20T13:14:14.861769Z","times_seen":7,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":587,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539009891727857618%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539009891727857618%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:43:09 GMT\r\netag: \"3bef-63b29e56ba940\"\r\naccept-ranges: bytes\r\ncontent-length: 15343\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFbubuTx7DOQdDf%2FmzlrdRS87NGtkETl7BsfL7GNmJea9SfyGFrnzx%2F9GaBJdLvGg7oruWKqKlY6eAe0K%2Bat7v5hBgVulOUIH6EAjTJ%2BHXO6STBxjbh1asNKsW8nK0PjQcd6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708eed725693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x380, components 3","md5":"52e3c43cae68ec34878543ae0eaba77a","sha1":"a443163a1d8252ad09ee139242fae86eda408bd8","sha256":"843a30acd7498eba890cd8f548e5459c22b9c28b012bd9bade500b8ec6d312fc","sha512":"1255eea30d09866841bdade59cebd77b0cf0b72c60ec1bb43cc5e538be549b96706bb893922d206093331db6196d74b74a1c1890f2a0e87bc05a8b64d0ccef1b","ssdeep":"384:MkSUI7n0kuXEFk3XmQXn4W8m/cI04GXl1m2yP3yGMC:IUYn0BXEFWf34tVhlMXB9","tlshash":"3e62cfcae302e05cd778093f96c722c47a409c64e447131a3a39eeac59db5c5ba243b6","first_seen":"2026-04-14T14:36:39.4848Z","last_seen":"2026-04-14T14:36:39.4848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/ajax/libs/slick-carousel/1.8.1/slick.min.css","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick.min.css HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"559-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 522\r\ncontent-type: text/css\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PzV6W31cQAD1uZVFlO73YKywnN8sxHwc4onvL6lVUNBYjq4NafY68j3sJyWCT2mDxyYu4euouj7Ym1MUiJGxS22n1qXZio6FWMgtNa32OcoDgFaJG51zhUDwHsgE3RQbnAO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ec3708e2d185693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1327)","md5":"6a62ad0f300504c583e7797c79c2d8ab","sha1":"e6e4f113fc2d008516d21228dac93bb6a2fcbb53","sha256":"50ad448a8a5720bf8a5617db15af31ae60163de06331576f60c6244c012ffc72","sha512":"c879273f5fc0c11fb2c76e9c075cb4723bd050cbc46b63c5cedd5cf4b952e29450e4d39364559b8418a0f97f46f5e616ffc9b4ff8397371f29c49eb3e7bc7477","ssdeep":"","tlshash":"c2219d551496115a4027d3125ed3da9a38ebf1525c3607cef7408305ce8fbae2dd29e7","first_seen":"2023-04-05T14:54:49Z","last_seen":"2026-08-10T17:45:44.364225Z","times_seen":20011,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":751,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1753913461images%20(16).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1753913461images%20(16).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:11:01 GMT\r\netag: \"1720-63b2ccccf4740\"\r\naccept-ranges: bytes\r\ncontent-length: 5920\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qu09Yv6Nz63%2BDMp23Irnq5mORkm2KCzRqgWO8uMoFQnrxiuI6Aww2zchgoEy7MeRLgVMiuSp%2FZKkwMD%2FsV%2FDIykrYqi9Y%2By04v9CvKzps9uHYsplm0OHFXOrcESX8Zkvnm6Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e4d295693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5920,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"c9c6d59f8d741775e00ab3e0300fd330","sha1":"7e96a6dbb6b0a9c6f1938ed3afa653a98422921c","sha256":"464e8461bd0333f6e9a6c7b57d012f3f49597cb4220ab5d88eea9dff725f20c1","sha512":"9c08fb0b422dc5cad188561e8fd425df6feb3c6f5c8b05d3e75a7aa85531418eed6c54e3021035867b11853ed604d129b79692c0b090ce9a570d51abcf8e3194","ssdeep":"96:EhABbbbbbbbb0bbbbObF74GQTRI5i9Rnqa7Cc6Z/TLdCea6jsDrOw0c/sSnfVdgB:Zbbbbbbbb0bbbbgs7e5i9RXEl06j+h0R","tlshash":"7fc15ac20ea4c0ea722c8b302b1a354ee51d003543068eaa7f6857fed7ac1c8ee9dd55","first_seen":"2026-04-14T14:36:39.486243Z","last_seen":"2026-04-14T14:36:39.486243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/XAoJ2631256004.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/XAoJ2631256004.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:27:00 GMT\r\netag: \"21a6-63b2d05f87500\"\r\naccept-ranges: bytes\r\ncontent-length: 8614\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2FXpxXmQpGSKMUDmUhQhdfLKurC2e90hkj4S%2FZt1bR2Zj4MiEKbmMESnpjLDMnNM5dJ0zA0LZYegs62jWdlG%2Bxc2APFP7JXw8ghltfNjrMXifFcNX5oToSSRbxsAF6%2BCty70\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e4d2d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x400, components 3","md5":"9e3f58166e3660fa0e3c2b1993c36dc2","sha1":"260926f2c5de0ee734c29798fc8cebb1dc2de030","sha256":"4cb58a3f6f8b8819ad733d22af6a4247ef8149f83538215335acdb4672d96d43","sha512":"1cec7a65035777c48945bfa55d538169084fa362e177ead655fc6cef35675c4613144dbd6bebc6b37152ac524ed0b37fdd4b7cd05b7dd8fc2f5ba8bee9c4c5bb","ssdeep":"192:motNHsBS87drjxlyroVon2rxt+6fJzX+ah4ecB:xtuBS6LySo/6FX5hJA","tlshash":"c0029ddf2589be4eff2628f57429862478d19c06fc9882f1c1884949189bff06835e42","first_seen":"2026-04-14T14:36:39.487161Z","last_seen":"2026-04-14T14:36:39.487161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539012031887828483.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539012031887828483.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:46:43 GMT\r\netag: \"3bef-63b29f22d0ac0\"\r\naccept-ranges: bytes\r\ncontent-length: 15343\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gd45X1q4MaFx%2FQH4qHNVfo1UWvdz32OvkHaP6Q%2FlYVuHj2auLd3D7oTnbJH2KM5z%2Fi7MrCbruFRueqN5zZo2RBfLx88DyBvYxYnxD7OMF5lHpXneY%2Bv4glwuB7ZrYgF3O2F2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708eed6e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x380, components 3","md5":"52e3c43cae68ec34878543ae0eaba77a","sha1":"a443163a1d8252ad09ee139242fae86eda408bd8","sha256":"843a30acd7498eba890cd8f548e5459c22b9c28b012bd9bade500b8ec6d312fc","sha512":"1255eea30d09866841bdade59cebd77b0cf0b72c60ec1bb43cc5e538be549b96706bb893922d206093331db6196d74b74a1c1890f2a0e87bc05a8b64d0ccef1b","ssdeep":"384:MkSUI7n0kuXEFk3XmQXn4W8m/cI04GXl1m2yP3yGMC:IUYn0BXEFWf34tVhlMXB9","tlshash":"3e62cfcae302e05cd778093f96c722c47a409c64e447131a3a39eeac59db5c5ba243b6","first_seen":"2026-04-14T14:36:39.4848Z","last_seen":"2026-04-14T14:36:39.4848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539008192063783488.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539008192063783488.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:40:19 GMT\r\netag: \"44c1-63b29db49aac0\"\r\naccept-ranges: bytes\r\ncontent-length: 17601\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKKpRX%2FdEeqNrn%2BuQnbY49m3eDxIIZTByHest7MCC%2FtZ6jGlCfGZza2JlMsFfzPGUP2oC5Vm9Kq7Tr5z9tBkbcEvxWRx86coMPMPjFtIrfma4TDPbxMuCXLNo%2FgEaOmiJ15V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708efd745693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x380, components 3","md5":"30a3754f4da86aaf9be558ef251e070f","sha1":"6d8d9560592f9a793fca90a71801a7399f2181a6","sha256":"63aa130050e3a895252adb74cb2906d5b010fc111f6db04e309cd3a8dad0e980","sha512":"6f07b2508fe31b0cf85a2570393cd8af8cf88a6733960b664004ed46ca83ac507a06a8e18b672ab12660ad34a7006e4da9441a915bcbd27bbff8d09c9e074671","ssdeep":"384:1B8VmhgpeCHYQu2HE0f8c4jIsEgW7NSf2nf+c/XqF:1B8VmGp7HYTgE0f8xIRpNs2njaF","tlshash":"d482d03cdfbef564835178b88fa10726736556d52cb56b02ebea2371396d3c00b38298","first_seen":"2026-04-14T14:36:39.488025Z","last_seen":"2026-04-14T14:36:39.488025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539054281742306528.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539054281742306528.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 19:57:08 GMT\r\netag: \"113a-63b2aee016d00\"\r\naccept-ranges: bytes\r\ncontent-length: 4410\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DryOvmto%2B%2BjYXxRAum0VF6oOjaQcNz0ZzkijNK2%2BqG714uDICeZEemmwxoUR%2B8u3SbHV7fDoGcxz%2BNLAdQm4buaV28WFxzMd2NqeOsaD%2FeFBaF0vtb%2BHWkz4%2B1BbpBPoGI9l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370900d8e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"bd95f576bcbdb82c35206ba06c374266","sha1":"3ecf00f2978cbcd7950ef12b0a80f6568ff7c41c","sha256":"5c74927b495c677582d5d7f4a02dca5085ac86dede9bdbb1f01d409d2e4d4f08","sha512":"bc50e6309040e33f9991286fc981c8fdddf0b77853a600d71999a5d717c22090e9c5acc0de5ce8be394bb22c20111ce484d4f5318503c64280aeec799de11f0f","ssdeep":"96:vGhHuDimhHqz6Ea+5Vj3fD/eT5qKdtcD5utI184wj8sBXSRMkhYYUb:6HmxYj5Vj3r/ireDUI+4wHCRNYdb","tlshash":"9b917ed30d8f29a6de44c3f210a2293be38a73189270a422ad124719fef3823157f579","first_seen":"2026-04-08T13:32:08.409898Z","last_seen":"2026-04-14T14:36:39.488858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/image/icons/mada.webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/image/icons/mada.webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"854-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2155\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FXDRcVuvFWWnmVCA%2F10nfSNji%2F7cfmS7zu14WvTjlsNAayBKr0QVaN5nxajVjJXRqhQ6X1HUPlRrXMRVmUSmFrnrEI5JhqJ2WuuaX9%2BCiSO2TWSh8XUPa163WUFqyN3oKgP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370906d9a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a3c383081db527bc26a4612c6b8a362","sha1":"a7504eed71a846dc58b242964d18bfea55eb06e9","sha256":"49c816d92a0c6d2bb5d9ad5b73c942b39bb91d07a7570be0bd702f5ca722168f","sha512":"edbb3359d5dca3683ac869042f7ccb1a938031e200ad241c0db5230465479a5947d6b63a221032d52a923eba1d6455354d825793ea6d223b615fb2928c7228e8","ssdeep":"","tlshash":"6f413c1593d34f5454c1fa34401ed16164128139a22becbeb3ae216abba617962a0d2f","first_seen":"2023-07-03T19:34:37Z","last_seen":"2026-04-14T14:36:39.489805Z","times_seen":137,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/8mjC2175976652.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/8mjC2175976652.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 19:38:49 GMT\r\netag: \"b2f6-63b2aac800440\"\r\naccept-ranges: bytes\r\ncontent-length: 45814\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOtH2Vnd5P0Khid6PrsRRMVyysZQkjpWO07h%2BRmp78qxBN24lcfvQncxl87EwHImyfQIshTKV5Fz7QnR9gOa2L85Kw%2Fq%2Fm45vWDsrO0JDuakZEUduwWngGb3oGdXVMHXksIu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e3d285693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45814,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"0a6e5d70e21eaced4296121cd8a75ca0","sha1":"03a5db172de87d3aaf7b3d6380cfa315c573e6bc","sha256":"dede2ca9677f36bd43f5676f063db6a4d73de60deb989f49bf63c6fcd5b9196f","sha512":"69167ebc9a2a86f53e047a426fa8d8cef896788ee4dbf90034789befe6d37a5a5d0638b878dd616468e981cbe00bb5cdc1dbd382be561d3e6f868675325ae380","ssdeep":"768:AyqN9Eow8JpS3NowaAOumla6yYIHBpJFCeka1sZPkPnns3ezdEGnhh5qnULxpsW2:mNTXTS3NBNOumlaJYAf/ZDnsOzuGn1vA","tlshash":"9b23f1b923a67bc4e86d5f759425923c1035bee5764b43822cc12260fb4ed7bdd8f80a","first_seen":"2026-04-14T14:36:39.490315Z","last_seen":"2026-04-20T23:55:40.716653Z","times_seen":3,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539062381760664489.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539062381760664489.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:10:38 GMT\r\netag: \"6afc-63b2b1e490b80\"\r\naccept-ranges: bytes\r\ncontent-length: 27388\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9o70mPYsAPmJUDPrQCsqvjN3sbr6rIE1VJNcJdqHr7AB7w5uCkdUHFnF6lj6RuTGP38PQ1fGHmuFQKTKrEUMRSM0q8PXFhcXj%2FHGZRcwKQ%2F9sGAm8GZmpIdLtYTj2kEcErn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f0d7e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27388,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"84f2094d6b8f29b25ed0f47a427836eb","sha1":"d4780cfe49512a5392e868626274df890d3ea77a","sha256":"5c17e74dbe1b05d13160a22c827b16dcf9fc7b5dd2deea8aaf4fed23291936c4","sha512":"e87afdc91be900546363e127474cebcdf8daafe0350b4703db1abc0267299b234a3e48e9845aff3b12a9c72ac23a4613a1a38f668bd49543a4f9317238209a85","ssdeep":"768:1As+59TeuPfkSw2Dz3U4U53a0dDnsrxPEO:ATxnjPUx5KO0xcO","tlshash":"47c2c032011dab85cff32d78b3dbefe6ec22c2b499060bf2556a20500047a336986b58","first_seen":"2026-04-14T14:36:39.467201Z","last_seen":"2026-04-14T14:36:39.467201Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17540853132594844450%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17540853132594844450%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:55:13 GMT\r\netag: \"7e67-63b54cffcb240\"\r\naccept-ranges: bytes\r\ncontent-length: 32359\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gt2t1J8877syuzBnDimernG%2F8dhAsgoVQpKNOWfod%2FjTy6skDZlLiD%2BXMC9ud%2BoTKX4yxb80vBPvxtu7mwK4OkAkeaXfspDOHEJjMlpP6yjt%2Fdqu4teKFA2HzJMv%2Fa8q5u4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ead575693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3","md5":"2614e6556ad5a1d2c5a3614f04cb9722","sha1":"582a5e6c6af51d32d2bdf8d8107b7553d59dcfeb","sha256":"053a356c10a593eab562df27d1f4ec9cd2285eec6536aa90e1cb0b57978556ae","sha512":"bfc79ea429ab0df262affcfe592bf969c5f2cbb1e2f5569e307c9a266f568f6ca2c89fd5aea824861f46dc559a3fda7194d0b8aec111ac13a86b80c4d4d54c59","ssdeep":"768:mRwqjvr4x0CiiSz6EoNOMYmpEBfM3b4SRqxG6UK1s:mRl4x0CiiSnefrpsfWC71s","tlshash":"87e2f08ae39a3930ce4fd2bb640d3115a5895c0782dafbd501cf685ebd93029bbc8f15","first_seen":"2026-04-14T14:36:39.491189Z","last_seen":"2026-04-14T14:36:39.491189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1754308181WhatsApp%20Image%202025-08-04%20at%2012.14.51%20PM%20(3).jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1754308181WhatsApp%20Image%202025-08-04%20at%2012.14.51%20PM%20(3).jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 11:49:41 GMT\r\netag: \"ace2-63b88b3f47f40\"\r\naccept-ranges: bytes\r\ncontent-length: 44258\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vR9GQVoGinOaAmLUQNLBRh0N061KClnaYVBB073liAgM8jyqKN5ztgzTndBQMMlrEhARUsPhsjS649TT0AvrVvZdgN%2BoGNv1%2BSY6SlavCiFKA8sl5Nebui0yfBc%2Bt7DZzfBn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ebd5e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44258,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1050, components 3","md5":"3cf7cda7e7d2a7a85828350ee462db38","sha1":"4b090934ce61351d0ac40a905856bc6054f22680","sha256":"8aa18c8c85dcef1b32ad1b462a71165840fdc30be88fdf0707550d27846e056a","sha512":"8ea69636299887408d75e4157f8bc393cc14c845b89b76629835295c4c77c22e5c1aeb15bc37046bf32c89c4fb466478afd24226500c82f79c9e3ba588329a49","ssdeep":"768:/8h4vo08sMidxSeS6uOVpJsUVR76/GxtbsvWGxMFg6L9epCf7LuYf8KOvVckT39D:/8h4Q0HMfOKPkOxr2BfWYfRIT39D","tlshash":"f013d0670977a16ac0c6e7701c21a31edb42de40477d26dbf306cdab922f8b09e648d1","first_seen":"2026-04-14T14:36:39.492091Z","last_seen":"2026-04-14T14:36:39.492091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/UBT02374730536.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/UBT02374730536.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 31 Jul 2025 09:00:02 GMT\r\netag: \"1f40-63b35dddfc880\"\r\naccept-ranges: bytes\r\ncontent-length: 8000\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SQdxOZQz%2F5H3oXXarDHBcD6Yc2tNau9y0hHsmHxaucfVclDJ1N4X4NGlVIXbyFtVYU6vYaUTQTyPk1qZWCNE6ImdBn3X1i3uRWgUN3n0YKf8uucSUJ08Qk4cIMKcvOAleYoH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e5d2e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8000,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x400, components 3","md5":"ae3d34b1d5930df144999dd8f0c60c1a","sha1":"5d22577af136d44d1da6b4d008f82d535f138a33","sha256":"0009d5dd0002e50481713783ab8e69d297c55fe0362698b2b505f8adc960aa11","sha512":"fa5f0bbce517d842fced701f0060039ac9462de1cdfc909483fada0b9b25c57676ac8a34222b474217b3730719ab20174df0d11f612954b7ac9531d8a1942d2f","ssdeep":"192:mKhr1ELvtOzhewn1XKXa+xMH9GwMr++uIVTUApYQJ/A0L:bhriLVOz0+dKnxGmBuIVTUCqM","tlshash":"04f18ea5a1636967cf07caf1c93516a179550443ac63da3f36398e287a60ff09e33817","first_seen":"2026-04-14T14:36:39.493028Z","last_seen":"2026-04-14T14:36:39.493028Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17540849652080713740%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17540849652080713740%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:49:25 GMT\r\netag: \"856c-63b54bb3ea340\"\r\naccept-ranges: bytes\r\ncontent-length: 34156\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kIJ4ku0kBY9CrbY359CIQ%2Bjlvb78dspHFrMgKhCoxXBIpumd8rr0LkrpGca1x2ypzLtVO5DFrid8TdQ9f7Q5fC1v9arV%2Fne1nGLZyukkKD%2F8kZEeUttg95LrReyTUwYCuyZu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ebd5b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34156,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3","md5":"b730470849976405a8639dd467929e64","sha1":"d7842673b6f6293b99d5b642b997793e79e8a80a","sha256":"d03b360a5067c34efaf23586a2c1fc0e36f18641b3d4f2316fcc9ddec0c70282","sha512":"ba08950e12ac5b2ae428df51664f74dfc054a0a988cda07af727af59c5db1fa86aa210a7845fc822cabbc9a4c2fa9700f99098fa726e3665edfd227ac5f694f5","ssdeep":"768:l7Z+thV4kRvzZzt7zk5+jlmgjC3tKiPSZr0gFdWhlWol8edz:ld8VzPztHg+jz+NaZXF8qol8edz","tlshash":"86e2f117dbcec423d4eb097b52bd28354e90aa140ccb3b5c6e0604fbaafb5894f53584","first_seen":"2026-04-14T14:36:39.480257Z","last_seen":"2026-04-14T14:36:39.480257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1754308259download%20(12).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1754308259download%20(12).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 11:50:59 GMT\r\netag: \"1609-63b88b89aaec0\"\r\naccept-ranges: bytes\r\ncontent-length: 5641\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6fkGg1sAbS2BxIhk0TQ6F4STEgGl3HOCSr1S9Q22%2BxIZ76sqJJMtQIb%2F9CFMG%2Ft8cqJzA8MXTp%2Bu8rDsIvH5tJhtuN8O0Pw4kZhaiuq7heTo%2FBE0IOLueQ0BpcPPYumXPKz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ecd635693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 224x224, components 3","md5":"624dbcb04ffae7ed9e1a269985016409","sha1":"2d172c332e8f6b70f416f6a8a558e22724073b24","sha256":"2ffa1d40af83384a30710651810a6cbf528ce447d1f69c90bb6f07f21237f8e0","sha512":"c880cccf83f21299cce32b943e299c1e545341025e18198d00d07f77c67c0e04992c56f0c715d042299e391e34c5e15681e85f8d601270a0ee2b3d6f0f3af121","ssdeep":"96:+ARY25s0RraYh9GALfFYvvBndp9IeVqmf1II6p58oa1ZItbp:RXs+aYrtL9kBdpvV3SI6PKZItV","tlshash":"d5c17dd76f4c96cedd1b7f3873302522cf12fe10b429449ad94195620b34daddb78850","first_seen":"2026-04-14T14:36:39.493918Z","last_seen":"2026-04-14T14:36:39.493918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":745,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17540848602226555974.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17540848602226555974.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:47:40 GMT\r\netag: \"7a57-63b54b4fc7700\"\r\naccept-ranges: bytes\r\ncontent-length: 31319\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m92oy75RAMpPogfn54qAP7k49M24VCZ6KeiyZhYAXKxp2pUps64vqYVzPEt7xh4OwB0tZAjptUvVVKOqa85yDsNKNpbcz8G39%2Fx%2FYGPIyVQtbw6yTKKJqrKIDwY2p1b9hsRJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ebd5d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3","md5":"35815923d1b5ee14527a0a2d582c6732","sha1":"4aafc360b8b611be97c8087b637142dbd637e7f4","sha256":"6d8222ef6bc3f61c2f5e1a5ca81eb18ac8a129fa35d72da75d4833d7ead7e535","sha512":"ec0147498e0c27bfe37847d0777e455c54679c2ef882c38c3be71604f88594a9936145eef4bd9003c883bb0047237aa8c07059aadedde52ae36d5229fd1ea064","ssdeep":"768:2GuGEycUWus+A1qURoSv2xJXp5nKIcPFKRmrUTxpRHDFx:mutAFRoDxJXpsZGmro1b","tlshash":"52e2d1b0ab589c79c9706e7d429b360fe3bea1d131c06b962c66378c07e14d7478e297","first_seen":"2026-04-14T14:36:39.494825Z","last_seen":"2026-04-20T23:55:40.717097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539119651809701282.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539119651809701282.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:46:05 GMT\r\netag: \"1cbdf-63b2c73a42140\"\r\naccept-ranges: bytes\r\ncontent-length: 117727\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xFdmsfAVK6S%2Bk9ueMSkQJu%2FXFBoUnI2G1IuUEJQWc9KGmltBKGExunzTvIE8GJN8KsBwOwckgSvyNCsXP9z6NS1baAMIdP9uqv4yWMFJYAk7zMBxJ2W58RN8n9Ia1sSNdK08\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708edd675693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117727,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1280x1280, components 3","md5":"cbcc467ff57b7259a914386ac593f337","sha1":"b5464335ab52c987783cfc97a0d40db856c82474","sha256":"17c949c1646611968a4115d08b9c12f54a9d978e560d47af3c7e6e5f8e9816c2","sha512":"096c3a9e9aa4fabdb5b956e674693d94e3c23da1a60aac897987ccc464f986f03d0f3b22930e05fc3b0a2be0d357be634eb62e68c30d502616a7947c84d6f4d0","ssdeep":"3072:MSkE1lTWWPo/nnMbHL6sQ4zqQGQUb/Gh4Bvda2:MrATWWqnMzvQeqQq6av42","tlshash":"1eb319578d188e876468d7e97f431eed5f1a6b5cd8913eef10220e9b7f601221c8e06e","first_seen":"2026-04-14T14:36:39.49563Z","last_seen":"2026-04-14T14:36:39.49563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":904,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/css/all.css","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/css/all.css HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"221cc-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 23902\r\ncontent-type: text/css\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQSVMfE8jvj8hRHW3Gpz19kkZNZ1MP5XPIZ5wlw9C%2Bbf3A5c%2BR22K43qSNqvCjtrBCwS6ttjPksP1ewG5KaFiBFMCoK6TwvTB91F4YD0IzwUnAVWi0nqrOnB21NCF2XQzBCQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ec3708e2d1a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139724,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"e3d3126e93fc1303cf862d5852f56654","sha1":"357908650e3a2f75f7e77c3e741e8bd0cfa07625","sha256":"340d09d12141a30f53d870d647f2f4ba93047709331cd441c43db7301bd52d68","sha512":"1c7b0e0be8779da8d647b38a88666d7e114813383955120f75ed240746c6d9046275342a7feb1b7dcc424c1d7a01c141f77c4c8e7048284dbdfcc8ddcd713eab","ssdeep":"1536:4VmSm4mSmKmSm/mSmHXmSmumSmymSmLslCB7WmHFJeJsEy4x5nOxdFRYn5+hqhP3:MsB7WmHFJeJIUIYn5+hqh4Yazawi","tlshash":"2fd376fad0ff10d48311e0892647e3a4b739b62c9c0a4c58e2a67d8de6c165cb1d6bdd","first_seen":"2023-04-26T17:17:55Z","last_seen":"2026-08-09T09:09:24.023157Z","times_seen":1295,"resource_available":false,"data":null}},"time_used":922,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":921,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/myStyle.css","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /myStyle.css HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 26 Sep 2024 01:54:01 GMT\r\netag: \"b98-622fc03326040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 871\r\ncontent-type: text/css\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=osQvUPwmoK%2FFCb%2Fopa2HCXJ3WGxBvZ%2BslieK9h1mZ3Hd0e5ZI99VDzUj%2BdJVBD6%2B5Ol0SPnhrgc%2BIm8YIKm1h%2FuxrOAhlI2QB90k%2F%2BsiwejtCeFemIBwx1HCOBf4noUKiDqh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ec3708e2d1c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2968,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"c887b6eb049974e370965785d92226a2","sha1":"bb52fe039492442d223346ced73244fe41e8d4b5","sha256":"bd8a1b4723c5347de1e63ab5ae8a096024a5e361f808df0d78e317c491557775","sha512":"8c2d2ae5d0a045ea24b080e650d1e48090b20f74f3a7c1301aa8aeda5c9ac4c3491b76d4a4f936e8b8d5725f13ae61fbfd6523cb4d9f79c8255fa6b79587b519","ssdeep":"","tlshash":"33516b98c92a61473277a7781f705695fb66506bcf0603b83be9b3618ff94782422dcc","first_seen":"2026-04-14T14:36:39.49698Z","last_seen":"2026-04-14T14:36:39.49698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583015546877281144_wqer%20(22).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583015546877281144_wqer%20(22).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:05:54 GMT\r\netag: \"6074-63f2a7b88c080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 24092\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boEuUJBQQN3kPU4aATngjo6%2F%2BXDuMk1FZP9DVjt%2BBp8QPtmqAujQ0xFnqm0faFxpmYr4GbCBvymfxJMSgEfC8xscdx9AHhouakp9oJxJUAUNJyXtOqzy1qKGijw2VeVrGMon\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e8d485693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e901cbbe07ee6179cf62cda1429eaf3d","sha1":"8852cbe4d95807770add6244f16be41c0da37e0b","sha256":"b06e8f2fcb14ec80675a88a4adc3d61576022f9df168ee5d4d909bbfcd362eab","sha512":"625bb5e54b1983b7b36789d3d00fbc56b9420bf0dca5a075ee68530d0db6fc1f273b2564eb91591f82fd7c641cc1538263af5e05a267504e65dc00985a6b9276","ssdeep":"384:8eXwxnxsQO3tskDPI7M2dkbh6C6Lou/SbTX7ktLDkbpKMEiW2Yp8yNpmWW:yd2F3HD4+96CDbTX+LgWiW2YNi","tlshash":"d2b2d174086c278885f7597c93c5f20b6609c07c2620be98f674737a77aad859b2f429","first_seen":"2026-04-11T04:40:33.537318Z","last_seen":"2026-04-20T13:14:14.905841Z","times_seen":10,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539149462617230302%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539149462617230302%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:35:46 GMT\r\netag: \"18c08-63b2d25529480\"\r\naccept-ranges: bytes\r\ncontent-length: 101384\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=obG47WrIhun0kk0En4QI8AzO5nGle9CSAvFBj36Bjo%2FqL2bs%2FaTDnJBHDMuNmDMSKjQe%2FMbCx%2FmIgehaFFE%2FxEvpCmUTBYSdgeJDGOgupcnNF7BgHksjq2EJo3hhMXIlr3V1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d4c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101384,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"76d712e9d732eb2b7954a2c5287f01fd","sha1":"ee83416b25cb1d87ba9f2f3e889ce06a8e921b79","sha256":"85907aef3005008bbe9b0e9a837f510d76d19cea5d6c4f75e0ddca5e7a24cbae","sha512":"ee9136eff2754746dbbeb17c1e11a7d5e1271a3aacc62055dd6570b6791c864387fe4cd206defce17f386f0b8fe301c30d09985579eb82278e45e448e5efcbcf","ssdeep":"3072:Mj+230R9Y/hKGchaXfZUwWi6OfKQvmUQ/Lgw:a+m0XSkjGKwWi6ajvmNLgw","tlshash":"a7a30236df2eb0b2cae3017169923d55f92a50a777aa4723858200324dce5b4df5ae1b","first_seen":"2026-04-14T14:36:39.498547Z","last_seen":"2026-04-14T14:36:39.498547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/12fQ%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%AA%D8%B3%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%B6%D8%B1%D9%8A%D8%A8%D8%A9%20%D9%85%D8%A4%D8%B3%D8%B3%D8%A9%20%D8%AA%D8%A8%D8%A7%D8%B1%D9%83%20%D8%A7%D9%84%D8%B0%D9%83%D9%8A%D8%A9%20(2)%20(1)%20(2)%20(2).pdf","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/12fQ%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%AA%D8%B3%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%B6%D8%B1%D9%8A%D8%A8%D8%A9%20%D9%85%D8%A4%D8%B3%D8%B3%D8%A9%20%D8%AA%D8%A8%D8%A7%D8%B1%D9%83%20%D8%A7%D9%84%D8%B0%D9%83%D9%8A%D8%A9%20(2)%20(1)%20(2)%20(2).pdf HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 24 Mar 2026 08:29:43 GMT\r\netag: \"5ed4e-64dc0f40aba89\"\r\naccept-ranges: bytes\r\ncontent-length: 388430\r\ncontent-type: application/pdf\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WG1VKJKNVwzyU50jBobcxw7gvbiybwMBTz0Rqkjt2qIDDWte%2Bt9xLdUBBjKFPKhUIva%2FGuWXU%2BRvd%2BZn8CxgDOyEkDG39EzyPe6TU9I5bzuDlCPOl0lSf7FoZvcJn%2BCMgeNO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370904d925693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16375,"size_decoded":0,"mime_type":"application/pdf","magic":"PDF document, version 1.7","md5":"c285e481e54192c49c5a3c52cb34be75","sha1":"17d580f668bf486bf33be030f0b7f39b94599e63","sha256":"bb80a9686f4eea58d02418bc493a968c831c939a14131709703357de8b4abf94","sha512":"d1b25805ca4ca1ee7245784cc708720e92a89f8928d9fbf5dfccdbc6141443264e8ee6b0b24245f9f039258dfb865f2dd0f5d0357065a01d4e4650a5e8af5ffb","ssdeep":"384:BZSH6MjjVIpWwHBabrRiVuUYbZH5XWQUwhVhLS:BZCrVIpWUb1gXhVh+","tlshash":"b072b0eea550cceacc8a8c71971ce9ead7c880d6c0185676b8199785ba4cf71fc780b5","first_seen":"2026-04-14T14:36:39.499416Z","last_seen":"2026-04-14T14:36:39.499416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":419,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/image/icons/bank.webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/image/icons/bank.webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"46c-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1155\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrFGkwiJNOOB4zcaki%2FCnk8eit6vg60g%2BohN6pB7VnVtQaIMjIaSYwDotTkF2ig7PUNJZoFFwa1eKFjg2WgHH874IPu1Br%2BLLDQ3FiporIw22UZdemqcs%2BS%2BxFUa3bdonrnm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370908da05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8353758ccd813788ea6180f62a50fce0","sha1":"9e9c209678118862a3e115a2d9530dc729156f53","sha256":"fd4020a2c55f7626fd82d62ccaec3aba6673ee309b77ce514349dae52a817237","sha512":"362fc1b79e9b9348a118f72c88ca595e4d576835b029759ed68940dbb02fbedae2503319988c1b53f1c8120053ceae8f218c66ea25a2c5b027f7c43d983b4497","ssdeep":"","tlshash":"922196e8e0456d12a8cd169d0ead77b7df6e804ec1d4f21fd721c1f1aaa37a44d1e182","first_seen":"2023-05-19T14:42:47Z","last_seen":"2026-04-14T14:36:39.500231Z","times_seen":55,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/image/icons/ecommerce_-_love_favorite-512.webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/image/icons/ecommerce_-_love_favorite-512.webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"3ba-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 977\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDWpi1Mw7JFtUJCzDm0aHfe53Eu%2FSUuvYadD%2FQzlS0awFu38C4dHUIHZgSW%2BlNmnHcgoOQcLGnpqo3cVcxAj1B3W6QIV%2BtbK00IFOL%2Bv1hLa3cWJSFk24HGqljGBHnKEAHC0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e2d1f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be324bceaa928596d67bef6e194147e8","sha1":"e775505de7c2c4f1d9de0f26553fc6f8f837513b","sha256":"e37f8dbb9cb8120cd8784f61454bf9e56313faaae882ddd565f76ff8fb958781","sha512":"66b8f996d5a5853e2b9c050492cb58a9fdbbda9b3e6e65f3bdb449d851f7653d60c52b2bbc9ec7fe049345164f5996ac704f2879832695c59df1847ed9b4b118","ssdeep":"","tlshash":"bf11c809554f3249f150becee4060a7410363613a979cec10979bd807ad7be05e21e73","first_seen":"2026-04-14T14:36:39.501041Z","last_seen":"2026-04-14T14:36:39.501041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582991302377991116_orange%20(21).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582991302377991116_orange%20(21).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:25:30 GMT\r\netag: \"9692-63f29eb0d7280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 38437\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFbnIOJKY6B%2Bl%2BgTIUAWqQEikF%2Bsh%2Fakdn3sMVqSjZrBp244aad8lZbNIEwxXPvBI2XsJ%2FP5z2MWycsNE6pLD98IzHymSZV79h5%2FhwkkoQKoTJCjOFCWjamXMwvgoRrAAZrB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e5d345693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec0a5772480e56d185b4f40c05a25b1f","sha1":"60baedb50b60c9eaa8bad5447eb6168e60add594","sha256":"44607093190f54d0afd9460d92496b09f03527f7c1066340d4b87164b21dbfd5","sha512":"afbed767965eea153f4ecb3b6a21811c3621bbb940669186e94228ae01dd36dee8637ecbb1a1f12a40aa56d04ce97b8d75688319531c5fc7409639a003502792","ssdeep":"768:q2e43CodfsdzUyTdbAVBinIKrvflOY6KyUdIhQnX7pPa9oOqk0kt:7ZsdzUyT+2IKbpvKhudPa9o40kt","tlshash":"fc03e1f24a54943ad96866f71bc6fb760b77f0817ee66eac8b010ec0e494f0a53345d1","first_seen":"2026-04-14T14:36:39.476029Z","last_seen":"2026-04-14T14:36:39.476029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539067752328473177.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539067752328473177.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:19:35 GMT\r\netag: \"6ea4-63b2b3e4b03c0\"\r\naccept-ranges: bytes\r\ncontent-length: 28324\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O1OXRqdgm7%2BA4HQKdR9lttZEuYkO7vCB6rb718%2BhkM4wdYON3rGHBQ%2BmYTdXfnBpw32KJtp%2F7IHNYHpxKW%2Bgb8urpJqUJi0Aw0ChkA6rx%2FiBfwU2%2FbtP07iCBtqJwQGFm8bg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708efd785693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28324,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"e6017453b1a25efd48b3ef7e5e4a3657","sha1":"a0b119e4e7215d919ef695c74c21eee96c21b2f3","sha256":"70fd1f54f7dbd3ebbeefa86e50f8d307c3827a24042971efe0a332744bd59caf","sha512":"8ba508bab04dc270d1d6ccf4864bea7cb70d855de8472e723a844c3b5ba1449431f3f2c18f9c68ac9e8e34b27a22e0320d2eb110ec024aff7be6030439d35760","ssdeep":"768:wtCGHSaZ6JvimaFwRHvA9xR2vbZHkR+3biZD2Uai:P0SakXaF8PyxR29HkR+3bidii","tlshash":"d9d2d028058ecc49f1654e37f9c34e22d2470b566a24f53576dae5ca25fce38ac36d88","first_seen":"2026-04-14T14:36:39.501874Z","last_seen":"2026-04-14T14:36:39.501874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539056382623734395.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539056382623734395.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:00:38 GMT\r\netag: \"21a01-63b2afa85c580\"\r\naccept-ranges: bytes\r\ncontent-length: 137729\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynMirliuuFTJqVABL4%2F5xGHktW39hCtIPfi3jsTc2JCw5KN0DEJaYjGia2ZIN%2BH6CZ46fnkdZTSKPSXT0GI1NCp9SwtgnsmmPWmDFibqiLJH3QSYFL5OSyv%2B3OaEMIGAFooU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ffd8b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced","md5":"e2eb83d6e4f1b3cfb3d6aa44f390dd67","sha1":"7495d1ddef977f4abd7bf4eff5825fa85e1650bc","sha256":"f2091e0e8e1481932511457205d01151b66b97343aff5af960260f45bc07153b","sha512":"f18efa4817fa22c66cedfa3db661ab2015aea927d32dc9a1fbe248d1bfa91cea66968909665bbaa6fb05b621c7800c0528b764e40d1ff8a39450aa26179ad80e","ssdeep":"3072:qZLV8jQO5bRBzSuvadBHD2K4XpWeg12YMdC7c1:qZLWQOV1ad1afX82YE","tlshash":"18d312a479a71650429f29b8e71ba03161819cdcde24223d8f0ce558e746767f2fc3b3","first_seen":"2026-04-14T14:36:39.502758Z","last_seen":"2026-04-14T14:36:39.502758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/jquery-3.6.1.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /jquery-3.6.1.js HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"46c14-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BElykwl3erN6K3CC66KZ0RsW4AQsx8pg3usX7fc%2F3bws07vdA3zXPPoAIE74HidUuPmw5RTP5saJuK%2FRSEJD0FpW1KhW2q0jrJBVgyUb2m3m4iWXknVR5rHgqN4PUxu3L%2Bn5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec37090ada35693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289812,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7e26506326a182c4175e54acda7ef15e","sha1":"01ee1a965e756292430031c46f258d6e2d3a961d","sha256":"df3941e6cdaec28533ad72b7053ec05f7172be88ecada345c42736bc2ffba4d2","sha512":"097eec0cea7b51302afa2d4560895ff54a36ef1e28b3e9067a84fbae0c2f63ee1d9a3a95d08b84fc1979855b239d03d08933a1017d4edabda3e5b8ec141beffc","ssdeep":"6144:WJshNVlG+TC1lFhTzeKpTcYmD2zK8U1Js3Px+WK+N7TFyygRWL/Ia5geNTIPfgy1:4jTcYmD4I4Px+WK+N7TFyjITiPflAqqi","tlshash":"5a54a3d9f78d112e423231aaac2e12cdb77cd171560458aefd4d597c24a083d83baf7a","first_seen":"2023-03-07T13:47:10Z","last_seen":"2026-08-04T15:32:37.359296Z","times_seen":938,"resource_available":true,"data":null}},"time_used":813,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":673,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/css/bootstrap.rtl.css","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/css/bootstrap.rtl.css HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"39fd6-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 29745\r\ncontent-type: text/css\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aY88NGDmnbKVtxNrCg%2FWTiXMsbp4g7Awjltp7GneQ7yWO7SSacegrEo7WTeLRe521rEk82AnSm99dtF7SbgOIs8x2swIJImW%2Fg9a8meeq16MiakOMCXoGq4v0%2F6GPcAZ6vI9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ec3708e2d1b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237526,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"63deb8b86313c6b8ec8bddfe71ff399b","sha1":"c5f52740b06beef31f290a49314554878709fa91","sha256":"be6d729c04aaacfd9a3499c2ca059372143ab76049e0c6ac9646b728c7434113","sha512":"e15969dbfb817db1010d36796b448e640a9dba4dd8be7e4c6d9dede9617d299b8f0178bd6ec535feee89ba50287dd10590dfdac936ed2f616745631366405485","ssdeep":"1536:hRKiSNUqgORE8Gi8KqqHBwnZ1nEsxaPGUIZNAZDr+5jkKR3tkpNjIRE:hWgORjKR3tkpNjIRE","tlshash":"ff345458fdf12828387b9259649abef9bb7c4086c60dcd75b5d33224cf893d15ca29c8","first_seen":"2026-04-14T14:36:39.504662Z","last_seen":"2026-04-14T14:36:39.504662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1023,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583019671903019431_asdfqwe%20(23).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583019671903019431_asdfqwe%20(23).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:12:47 GMT\r\netag: \"6af0-63f2a9426a1c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 26783\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ViisxqtOUwY%2FkApcvKjq5bxqk6gPLuuq%2BagJqeGFbPQSttmpsCDVmURfhd8OiOZtQYV8CqsU53vrdcMbmKd9kiGtYw2E6XVp%2FuTE3bdKPtN4koeqlkSU27GcSM90ZwDSPwRU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d455693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b650f8c540e77340f5a9c507165f366a","sha1":"d19b35ea9752d8b66f884cedf64a52162c23dde5","sha256":"baae58c37591d5111a077af51d0efcbdfcc11ed694ab97dcc7b9103a96a2758b","sha512":"98f6a7c1fe808235ab4e720068a37711bd9cd8f118cd182ee549f5356bbe89f636e99bfd77dee945762a5be4953619c210345426d72664074697fce7f2546e66","ssdeep":"768:gWikUufTxcgZLa8+JsgX+qaIARH5zg+8XD+G/TOWW:p9cgg8+JDOqYjN8XDrW","tlshash":"d1c2e1ea13cbb354f464c4fad404fb89b6fce011cbe75c22571a361e102c8d769d9960","first_seen":"2026-04-11T04:40:33.538526Z","last_seen":"2026-04-20T13:14:14.874826Z","times_seen":10,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583014151575670338_4829426479_1%20copy%20(26).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583014151575670338_4829426479_1%20copy%20(26).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:03:35 GMT\r\netag: \"5726-63f2a733fc7c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 21795\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5ptVrFtRuqbRY9k%2Bd5jgQPRzaP6jNGOZhaSpl4zXOOn7Uy9%2F03QHgjX7JqUDoZbylryVjL5XUDCifegCA49MWC%2FYABceoOPVnRV5dycpEiOcfK9UGsM%2FoquK8JeDGKi39wv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e8d4a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"196eac935212689aafcce39d4cdf61d3","sha1":"41bff94233811391f8ed20de9b37e791d1ffcedb","sha256":"73fee905c1e42abbb58fd0ba60c13781136973be89f66d1ba7453bd7d414a4a3","sha512":"2e813d163eaf83426b48276845d7dff246600e27c3ee37d397f2bb9c1e99752e5df57504baddb497cea7ad29c26e27608affe600cb86b737179b152d42c40aed","ssdeep":"384:J7f01huQTVJ9A2BowNIlO3chpMZ1AIqUdjnaF8EH9zPtINox19WW:1+3VJG2je4cWb1FnO80jtxn","tlshash":"85a2d153c87f7dce878df12ae6e077ae2e80c9f50da0764eda2d99405a419168a5b03c","first_seen":"2026-04-11T04:40:33.540752Z","last_seen":"2026-04-20T13:14:14.903774Z","times_seen":10,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539120781852847778.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539120781852847778.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:47:58 GMT\r\netag: \"b50ba-63b2c7a605f80\"\r\naccept-ranges: bytes\r\ncontent-length: 741562\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxzgGdls4xeE%2FXxsxdnNIFWNB8%2BhFJVlBQE%2FE%2BxtkRcmCH%2BpxAOsC7VxgKDmS%2FfbzjszVCh2m6LfLZybfEeJVLpNZD8uld63Pnc%2FHjfqd82e%2B2wotOI50Xe6xtmpTNZh%2BYuQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708edd655693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":741562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1350, 8-bit/color RGB, non-interlaced","md5":"90e29d782a8902b9c375bf9307b64c26","sha1":"6bac006e7d38b04a7f43c23e49bbd3fb3d9cc9b7","sha256":"45c665ab1685ca290d8cc92ff0d16a85b6b1cfdab518d7b5089df428ecd203ec","sha512":"5a0848c601be16e39b3a02a6a4599951ae3d126f50898599cb8f3d1f6ab4cd85cb58896b152eee8b842ef82dd4d023a0e801c33870e44aa8861150ecee0dd78c","ssdeep":"12288:8YW+jbZ76KMIHeqAWxJj4V/d7bB3FsDh9eaIP6udKQge2ot+Ny/+o1w:7ZqwAqjA1HB32DT3ICudKQge2QB+iw","tlshash":"7ef423d4b0fdc2a39c93a3b644e58d79d780f847afc074ce1a8596e42c3b25299b135b","first_seen":"2026-04-14T14:36:39.506618Z","last_seen":"2026-04-14T14:36:39.506618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":737,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://connects-ksa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.0.0\r\nx-jsd-version-type: version\r\netag: W/\"bf30-qVRYMYA7E1nP7tR+O01rrmjkDpk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nage: 2097742\r\nx-served-by: cache-fra-etou8220109-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13501\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48944,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-10T17:58:40.780905Z","times_seen":110719,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":14,"receive":2,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1753913389download%20(10).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1753913389download%20(10).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:09:49 GMT\r\netag: \"131a-63b2cc884a540\"\r\naccept-ranges: bytes\r\ncontent-length: 4890\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2Bep1jAEpyoO8x%2FyPWILJgeQOqWvZq67YFWD5jC9O727lNOoqk8wKYl8bilufQ3ovzdtS8tycCVg3ZU5HV7KpWQGn2Yk9AjAeroT74QN0Pr68PmQmVf9mpFH9PjG%2B%2Fr372Lr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e3d255693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4890,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"a3d88d3c94fbbcf3c1dc277f603edd0a","sha1":"f42cc40696c543fce30baf64d7ad1c6928ff0188","sha256":"67e4463cf521e69d596e5b8788ded6aaa54b43fdbd33b52decd984e86fb7c612","sha512":"9d35f06fe4220d5bf99f6c69f93f0e4300cef40debc37969f48fd2bdb3f8a231f0275e1792bfcb0bb148f199ec462fefe0bdf90d2648ebd3e4048b7724676a7e","ssdeep":"96:s7DXIjYhyJJCd8fY/q/cnMDVkkr8zVMVy8QZ4ZVeixkem/yT6wO0ufRtAUBprAu:gWYUJJyW/AMekr8H8QkeixI/C6wOLAU7","tlshash":"1ea17d5b4d1a96e7d313e5781ad0580e824290109bf3862a296547fb68ad287ec8fd23","first_seen":"2026-04-14T14:36:39.508534Z","last_seen":"2026-04-14T14:36:39.508534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539118112102620335%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539118112102620335%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:43:31 GMT\r\netag: \"6801-63b2c6a7646c0\"\r\naccept-ranges: bytes\r\ncontent-length: 26625\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzMb%2F%2FVyq3j1EowWsHoPU22EavdAuwt6ZA8vp0ZCH10WQ1X3inOUBPzMWuIEGITuZ5tGa2H%2F61gWgmHMXCq%2BSNa%2ByhHVruKOrPPC%2F0OjzxUSiYMJflFH9Qn3jZ7ujoN6d2Pc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708edd6a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26625,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 375x375, components 3","md5":"80881da2a2a99d5ee49566d51b3fbbaf","sha1":"6ae820f881563e2921075a20fb5c3d29eb046833","sha256":"2c4e8447d085d507f3a2a9278995afe60a658ec23d7ab2e330d6c32c4b655752","sha512":"9a00b686df9ca8c7c73a30a7e0caf68eafbe437b1dccac66542325f99824f57d60a7919d50160578883678311f2af019d9d85da1e5cf08aa194202e6f10f5c06","ssdeep":"768:9ruD6DcC2sU6jDifClyXDQA3TB3GF9lU9:lxLcUA3F3G9U9","tlshash":"9bc2d08df99c82c6f7d1c93fe3765f081ad0ef54b28a2745d8da3a40599d93e60a81b0","first_seen":"2026-04-14T14:36:39.509628Z","last_seen":"2026-04-14T14:36:39.509628Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539066572356453133%20(2).jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539066572356453133%20(2).jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:17:37 GMT\r\netag: \"65df-63b2b37427a40\"\r\naccept-ranges: bytes\r\ncontent-length: 26079\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DKgpqNfMEjrU5Z5pScAiVGRbK4I%2FHRo9wZX0lZ6YhowRlooKZu7le%2BDoCmQed4f7z3QyYHnBju42vB%2FXtTBbJHN2qFi8t9FvCunyPajD12A5OgCC7eoKOT2M1BW2Elwvgn8o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f0d795693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26079,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"ea306a5c84fb2376e77c0ce518a24845","sha1":"f09acd35afa2d6f8a2d23af246c81d36e12111ae","sha256":"c6e17515176e9e94b4babba969fcc78e000ab6c51dd80cb1a8dbfb68d6c90f1a","sha512":"6fcbb5aaa9e5de28e147ab5f0119dcf92b308080fba4a3bfacadb471d3cabcf3f807b3bcfab8cf77ee20428dfe67e74a48e10f997f4804b8a18d13aaee12b09f","ssdeep":"384:JkwkkCimNCUX3nZ9rYGPhvYnUeGiGNEMeBo1TefiD7CULq+pDf3Ffs:tkkCX4Q3Z9rz5vYnUk3xyTeqTLqkL+","tlshash":"72c2d006cba47301e66c443b52ab7e5ec723efc8b40d2e3c692618d6055ee71be44e66","first_seen":"2026-04-14T14:36:39.472953Z","last_seen":"2026-04-14T14:36:39.472953Z","times_seen":1,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539011462681279596.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539011462681279596.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:45:46 GMT\r\netag: \"44c1-63b29eec74a80\"\r\naccept-ranges: bytes\r\ncontent-length: 17601\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgBiPMD9FjTfpZJ8f9%2Ff5WqfGMSncb1ol5B3GZzCfCQ3PBXrZIgdBmGk17yZCXpIjI2LDovRd49Cm04uHUtoaMYPgRbPE5HCFrXBI3%2FXDt1EuWLYbeqvMnzNrCCCLeU1xlxJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708eed6f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17601,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x380, components 3","md5":"30a3754f4da86aaf9be558ef251e070f","sha1":"6d8d9560592f9a793fca90a71801a7399f2181a6","sha256":"63aa130050e3a895252adb74cb2906d5b010fc111f6db04e309cd3a8dad0e980","sha512":"6f07b2508fe31b0cf85a2570393cd8af8cf88a6733960b664004ed46ca83ac507a06a8e18b672ab12660ad34a7006e4da9441a915bcbd27bbff8d09c9e074671","ssdeep":"384:1B8VmhgpeCHYQu2HE0f8c4jIsEgW7NSf2nf+c/XqF:1B8VmGp7HYTgE0f8xIRpNs2njaF","tlshash":"d482d03cdfbef564835178b88fa10726736556d52cb56b02ebea2371396d3c00b38298","first_seen":"2026-04-14T14:36:39.488025Z","last_seen":"2026-04-14T14:36:39.488025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582989542785018424_3414753791_black%20(19).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582989542785018424_3414753791_black%20(19).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:22:34 GMT\r\netag: \"aa64-63f29e08fe680-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 43518\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCid7kjSKsU0UH9wnB9e6mbZDyK7zBJkh5nD03EAWp11Qyu31v69KBfsRPwJ6qdyHQ8T4PsVCw3lV%2FkwjMxj8hWrqSGiXTdA5TcKAbaHMeU14IJc2pWFMzr219RkPSLJ%2F%2BJ3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e5d355693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a6ed62d166bb01749b6ef9c5ed0f9a9","sha1":"af04bc62e4c079e4df18ff1248db77f5168fe093","sha256":"5e711097441e629fcc4da4f193e78d73662ba342621c30ec47b4bcc12a3993bc","sha512":"372e9c31afbfb2c79002c3b1728e348127259e6b12fadb5895b2463f4dd2dbff7c6191598b3eddabb29e0d5a094191312ed3e6e0eae82ed261f89e8edbb0a8d7","ssdeep":"768:WGfap0LxAUbZ3851a2JOMfqN7cIBEpVudr7+kzvgBsQ+ruQxTZfgCm6wM3wvgq5r:WGhbJ8ra2JOMfqNo8YgXsaBNx9fgdnb","tlshash":"b813f25aa710c919f6e78972b3ee87de65ac6020f9c0e034dd271f84f0121d386a7de5","first_seen":"2026-04-11T04:40:33.576531Z","last_seen":"2026-04-20T13:14:14.908989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://connects-ksa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nage: 1054116\r\nx-served-by: cache-lga21963-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 12707\r\nx-timer: S1776177354.027112,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-08-10T17:58:40.779536Z","times_seen":81063,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":21,"connect":14,"send":0,"wait":13,"receive":4,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/b0a7532ac8ec/main.js?","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/b0a7532ac8ec/main.js? HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec370972de75693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29341,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (29341), with no line terminators","md5":"02409c5211c041179f0aa75be6b28ef9","sha1":"b1124b7955b8668a3d5078cc6c8acf4943d7045b","sha256":"2200df8584771e204e001f4b3c1c219edf9175100b428cd0f7e6b714cba147ac","sha512":"7f062e67ac936f9bb19670df2226b2682a05a786e3af0b28e88e778e389ad475f17e5a7c09cf6533f641c76284e338cf37a1d7f549e992d3094f640a5b6e124e","ssdeep":"768:dlpHKaTAX017+k88wwH9wJ8iIie9UOUVoBajOT70k1kg3uHoME67F/B:zTw017+k88wwH9wJ8iIie9UOUVoBaw1O","tlshash":"fed2f8cabdea3218d35f50b8117370cbbaab1cc473845594d210e8fbb9a031571b6ed8","first_seen":"2026-04-14T14:20:11.780154Z","last_seen":"2026-04-14T15:29:44.129683Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/image/icons/language-latest.webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/image/icons/language-latest.webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"3fa-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1041\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YySTuh3Z8NbwMCH4Bt4MaFm27eVsOk7pC72Y3TfvTqYei8wRp%2FXVffVuKZFYwz%2FNAHUxWB1FEZZKaM5QTJ9Fz1hQuDjsNFETo572UxO8QzbvvfEv8tFfpBClGwfRE1i19Ywc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e2d205693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb6634598df7c2a3c850271055783a92","sha1":"f5f317832d4990bbfb3146563834af66b789a4a4","sha256":"7a27c75effb6003221d20bda5a7d0aabcc8c7e449a720f87a9ad4d7d13e7e409","sha512":"49bfe60af6083677c424377ce935876e4dfb4d5dfc22c29e9f455a8de18a5f54df68276c535d07005164786d7905fe65aee5470a5d09cd05953fdce57aa821f3","ssdeep":"","tlshash":"bd11d8118212e82e956f5d94c88304179430ab45d166f6220990f69039022b69a6cfd7","first_seen":"2026-04-14T14:36:39.512031Z","last_seen":"2026-04-14T14:36:39.512031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/krD3images%20(17).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/krD3images%20(17).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:24:38 GMT\r\netag: \"b61-63b2cfd81b580\"\r\naccept-ranges: bytes\r\ncontent-length: 2913\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hx0YzwCPo06QXvKGtLkWUVQBUKOvc175FFm7nONnt0uXE41xaigB7SX%2F2Of2mcfTYEeIJVkNUt5zDFRN8nDtsLkPMIZmca1YM%2BR4yiyrbL1CuYiPSAx2KpW8WyG85uQSC4AI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e4d2c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2913,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"40101088a2b8d00fbae9385f00bea097","sha1":"a054f4f963935f945deaace31dd60c4840e521ce","sha256":"7829945d287c32be5335fa614fc1ba10f522e198b2f461725c8ceabdf7676770","sha512":"4f49abe77c52da65dd5fd7c675079f990b11bb919f334221c58ff2253b7fc2de00b08805f59e08c2c79f35dfdde3037578f0f70543060e5ca964a7d14380a2ef","ssdeep":"","tlshash":"d8512b3a3b02e093ffdda8701e1a060997c9ae56da8f0662177a5d901c6c0bef456551","first_seen":"2026-04-14T14:36:39.513297Z","last_seen":"2026-04-14T14:36:39.513297Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/NCShimages%20(18).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/NCShimages%20(18).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:36:20 GMT\r\netag: \"105a-63b548c747d00\"\r\naccept-ranges: bytes\r\ncontent-length: 4186\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6Ei74izUVbTIHugESKlnHVv28YqwgAgJDtbv80SPjEpnnLUT%2BwrZ09ntmxq5gg7mV0tiv1lMWUxHsT1pp9%2Fzo1CswT4bLGkpcProq3YjPy0qEHe65v8MrTLdHA%2FoRFxLrDi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e5d2f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"a701b6542ebdb40b7e971919e5acc861","sha1":"c54002e304c69f032a8ec25e08b8e930f6b58904","sha256":"4c086db8f8e846686d2727a1df0491290d6367d426d01fcd2d9b58b18ddc7c97","sha512":"6bde8b61a9cbfae60d7f7c4e3c3202fc090c1618441e9669f1fd6808f9c66fefb926a8ac0c278883f7e47ef200f81f376bd08f9eb2daf3ba8c63c5c1535317b5","ssdeep":"96:vyCRSE21wTg92andAQQrqrXI8PNRlggLY+V:qY721Ug9dduIVPzlg0V","tlshash":"ba816d6f3f4d51bddf838b3ab1b281644166af95ad14e3b9428bd7b0cd00b407d2b986","first_seen":"2026-04-14T14:36:39.514398Z","last_seen":"2026-04-14T14:36:39.514398Z","times_seen":1,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539009192464137472%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539009192464137472%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:41:59 GMT\r\netag: \"47d6-63b29e13f8bc0\"\r\naccept-ranges: bytes\r\ncontent-length: 18390\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jG19JmPDdCTl7d0ERnuIJlZA80Q0X53ix8KbgrfbSiZjYDFx7VhXG9TXvqpQ9dGeSy3CbdhrQVuicQtDqw10CAYItM64i851mHGcjLIAhpecF3cvUJf8dMkzcrrjHl5BgwW9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708efd735693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18390,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x380, components 3","md5":"bd7eb9215e2bd4919bd0bf477340a866","sha1":"6fc70b90d49dd2972c120bbcb581cfd337c93b15","sha256":"c3f4f2822b4e780a72d47a45565bd83378f8ccd9c3ac4bf2bfffba7876efe7c0","sha512":"5a849e718d6bb49551dfd6753909083c8956c15fa0cc4d1446f38cec425a9124188498be304fd5748b0f77b0c9a5e80a3f2d50519f3e742fe477f758b86c72b5","ssdeep":"384:40OIy8GCUYyDHFSFb5R0rUpa4Lnp7qBTlc7O15kI5YW6XiUFGoaOZdfDlB:4aGBYyrI04pa4LnNq5lWUv10UoR","tlshash":"4582e143acee1ef9d9bc13b987df0dec638ac282b31ac2dce485576152255f78463026","first_seen":"2026-04-14T14:36:39.515335Z","last_seen":"2026-04-14T14:36:39.515335Z","times_seen":1,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/uploads/5577528502_7Yiw2RSQoy53TD015Zh3XOCcgMYAzJr0he3gdc5C.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /uploads/5577528502_7Yiw2RSQoy53TD015Zh3XOCcgMYAzJr0he3gdc5C.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X6moGGReWIPWB5M7ghCCT4piPPSlso12TGo79H9nT7x8QD%2B4CtLhs8G755kgJQloZrJX0uy%2BXgiO6RyuzYu7A9FPrjoYN9Rrkd84arPY4hTnkoDsAms1DWU6vyuXiRTr%2FmNn\"}]}\r\ncf-ray: 9ec3708efd765693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"be39e8e2d48de411ff2011928a0c37ea","sha1":"503ecb289e450bc4d6a4e4f99426f5a186705308","sha256":"a698e81946579e350e6e1fceffcde31e7fbcd9e611a346fc69efafc400d5a0f3","sha512":"f133d16f9b3660d6f58a341c910f37c28d417872cd496b8275e561959f1647b1a16884709efe14da2424a90a656fc6d0cf3ee5d42f9fd82fd848e86696daedab","ssdeep":"","tlshash":"2f119c7610f0142b019391a13be0a31b5f95da43ea078609b5fd82856fe2e87c9c3a1d","first_seen":"2026-04-14T14:36:39.516256Z","last_seen":"2026-04-14T14:36:39.516256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583000936047315115_orange%20(22).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583000936047315115_orange%20(22).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:41:32 GMT\r\netag: \"d098-63f2a24646700-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 53135\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JScR4VGV2IlzM8ntcaGonMhPgv4BnOwtlM3%2FM7sEOp2ouv93Q%2BIrp1cRN1Sh%2B%2B102f4TkG1wwgV9s3cgdNFIcN7%2BGjD2cGMzS2%2F4sqX1FPBysXpUW7W1BI1cl2KkwKwVO75K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d3c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09728cc68f0a61b9814fabcf99556f3f","sha1":"4a148de4f6c980069fa6d871c94f025107f80ce1","sha256":"dc3e04783ee7b295a2c29bb308e13b6412d93b686b6c38660b04f672599ec471","sha512":"176ca69e639da6bdf9f2d0d310d577af86c76b859048912fcd7e3369881bc5eb16aac2e48ccb3e7eea1ff6a6269c1fcbc9883e2da1449d015e3107964b156ec5","ssdeep":"1536:5cXHUkNyXPqfNo7kg60jA/dwUdwRPqgKd:5cXUcMAWQnX/dwUdMq/","tlshash":"1b330247b0c2cdc3f4d2353c4b859e52ad1bf3942274aca6be4b4a5c6a67dcd06b5704","first_seen":"2026-04-14T14:36:39.517235Z","last_seen":"2026-04-14T14:36:39.517235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17538982741844599955.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17538982741844599955.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 17:57:54 GMT\r\netag: \"1a74b-63b2943980c80\"\r\naccept-ranges: bytes\r\ncontent-length: 108363\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaRnj%2Ftm9ochGaMb7hwSNVHst%2FHW4cQzkI7qVb7%2FFbbBjlXulgjT%2FwZ2cjcTPAanHCoq88ak5SZ%2FUI54RmTMrigWvBkRsWukFKU1yQFrKWe4iN8iKgO9vCCOYgRD28TRCAZI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d525693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108363,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"50d578468974adf12535ddd39e1cf71c","sha1":"e28c2d31c38a9c53b94b761bbddfd169a56e91da","sha256":"38b2a1fe32dd17dd85f09fe076b87c825baee0e87bb28a45e6498c46705d5afb","sha512":"879454336c9af1930165b79f515fa86850fe4d4c30d8035fad6f8e214ffbd8f183ef2bcef4d7f0101a8c1eb94cf309c7270355f7d0e2295b93d82d6707a1d75c","ssdeep":"3072:NH+0D6ddFkhD9qWf84sSwd3p2UFLz0wSdvfMw:g06d6x9qWf84cr2Y0wSSw","tlshash":"44b3027ed2a82241ec47ebf68249cf2a634ac3f7333e6787029367b146974955c45a32","first_seen":"2026-04-14T14:36:39.518318Z","last_seen":"2026-04-14T14:36:39.518318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/popper.js@1.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://connects-ksa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.12.9\r\nx-jsd-version-type: version\r\netag: W/\"4af4-w7l3qkuN+2nWUeBwFQMdOF3tlks\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nage: 2805199\r\nx-served-by: cache-fra-etou8220176-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7053\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19188,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-08-10T17:58:40.786178Z","times_seen":111144,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":14,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/webfonts/fa-brands-400.woff2","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/assets/css/all.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NyM7LZU6f5Sh9iDTQpEkuJ0zS4U2xkX7IqJ91yhsJPfJHduysCsjC3tepDlER%2BTqUl8NHI8uBkHUdtNrFgW7q9e4QYorWFjwOZJF7fjBli3%2BVHS4CaZtbNK11CVZLUDb8pL%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncontent-type: font/woff2\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nserver: cloudflare\r\netag: W/\"1a3c4-622ed5b065880-gzip\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9ec37096bde45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 107460, version 770.256","md5":"f4bdd85a576812f553ec3cfea8b1a2b5","sha1":"380bea4e9eb484d835d89cc608f2af7c3179e8a4","sha256":"3fe890d088ecf0cc9bc1b9069201e52972dbad6237865524090e15982d0de718","sha512":"bee31cd02a25885c9bb0e8eab268a836aa80efbfd82f724652dae32a68c56078e5d069b7fb447e30432fee5f94564f6e07685b568496ffcadb07ed0c51f305ce","ssdeep":"3072:Q5M7ZAZsXQhcMCxRuc+6q/SNY4GvEjLs8:GM7+ZGQhrCm/6qKHjLd","tlshash":"9cb3124928cea9ccf3ebfd9a15e746b308c15584476fdd16bad0e1a9cb8d07c0a37902","first_seen":"2023-04-07T03:14:12Z","last_seen":"2026-08-10T06:14:29.249962Z","times_seen":3381,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582986821020871190_black%20(22).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582986821020871190_black%20(22).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:18:02 GMT\r\netag: \"aa64-63f29d0598280-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 43518\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FOBfbo9HKG%2BAVwcydnNqYwOdXFxHtEhJrUz%2Bq366OCnbC54MGOsGuZYxg0dCDoAmw4uBbwuQCVR8kM4Y0bmNvmLzmpHJKhaV%2FsNSW%2FvhuNCl3kFlNoZzph0BB5RABeBnDjKD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e6d375693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a6ed62d166bb01749b6ef9c5ed0f9a9","sha1":"af04bc62e4c079e4df18ff1248db77f5168fe093","sha256":"5e711097441e629fcc4da4f193e78d73662ba342621c30ec47b4bcc12a3993bc","sha512":"372e9c31afbfb2c79002c3b1728e348127259e6b12fadb5895b2463f4dd2dbff7c6191598b3eddabb29e0d5a094191312ed3e6e0eae82ed261f89e8edbb0a8d7","ssdeep":"768:WGfap0LxAUbZ3851a2JOMfqN7cIBEpVudr7+kzvgBsQ+ruQxTZfgCm6wM3wvgq5r:WGhbJ8ra2JOMfqNo8YgXsaBNx9fgdnb","tlshash":"b813f25aa710c919f6e78972b3ee87de65ac6020f9c0e034dd271f84f0121d386a7de5","first_seen":"2026-04-11T04:40:33.576531Z","last_seen":"2026-04-20T13:14:14.908989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582986013149270939_white%20(24).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582986013149270939_white%20(24).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:16:41 GMT\r\netag: \"9692-63f29cb858c40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 38437\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lW%2BweXVrtMZITqgoK2goi4OZNT0Jy0dV8bV8vysPeTIDXdQUXOAHNOQ69JRXafIFXOf%2BjWnqOCKIH0ys86ZYOmy0t9mTYAB8pYJtkFDdTd2yoriKHFSefjHRcCay7wBes5Tn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e6d385693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec0a5772480e56d185b4f40c05a25b1f","sha1":"60baedb50b60c9eaa8bad5447eb6168e60add594","sha256":"44607093190f54d0afd9460d92496b09f03527f7c1066340d4b87164b21dbfd5","sha512":"afbed767965eea153f4ecb3b6a21811c3621bbb940669186e94228ae01dd36dee8637ecbb1a1f12a40aa56d04ce97b8d75688319531c5fc7409639a003502792","ssdeep":"768:q2e43CodfsdzUyTdbAVBinIKrvflOY6KyUdIhQnX7pPa9oOqk0kt:7ZsdzUyT+2IKbpvKhudPa9o40kt","tlshash":"fc03e1f24a54943ad96866f71bc6fb760b77f0817ee66eac8b010ec0e494f0a53345d1","first_seen":"2026-04-14T14:36:39.476029Z","last_seen":"2026-04-14T14:36:39.476029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":755,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1754308276WhatsApp%20Image%202025-08-04%20at%2012.14.51%20PM.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1754308276WhatsApp%20Image%202025-08-04%20at%2012.14.51%20PM.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 11:51:16 GMT\r\netag: \"e877-63b88b99e1500\"\r\naccept-ranges: bytes\r\ncontent-length: 59511\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OX%2BN9Pzf6At7XXayXI7GblpOVXtzv3LuJXEjRIHwBaU8YFhrY%2F0U6N4A778NRJgOoE86B1XpOHKiYywGxqM9IRnBJUoj2TFD3Z8T8EuxHSp8WIdNvQ7sHsapvGqGab1soZw4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ecd5f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59511,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1091, components 3","md5":"64e7e544b716f5b11db259f4f98fd67b","sha1":"1acd66839df769875d167f10dea52c4e6debd750","sha256":"d5b9992c1e0a0d61f3d9323f6f1dcf3dba05f66ac8c9a068e1416ee2979db9de","sha512":"a4c68e28ae4a9322819fcd96c5f17f2e6d9ec57f5ac43507dbbc7eb4405fc555360613ca0f68fa7d7f7caada52e72c08ce91852e2ae882a081666aca83abbff9","ssdeep":"1536:/8jMqqKZmOO7uS5FCfEMMgB1I6T4U6PyR8/Pk:5qqGmX7t5FdxgB1I6T4U6zPk","tlshash":"3643df6c37233badc8ec963dc208c96d1e733d68b2b3514ea056db92991d98175863d3","first_seen":"2026-04-14T14:36:39.523849Z","last_seen":"2026-04-14T14:36:39.523849Z","times_seen":1,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/XR8FpkEod8DtJPROCQ8UH551Bjb9uK48RpWUotwNgAs6%20(1).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/XR8FpkEod8DtJPROCQ8UH551Bjb9uK48RpWUotwNgAs6%20(1).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 26 Nov 2025 15:58:02 GMT\r\netag: \"74b3e-6448176087680-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSqdcoYLMnaBPiH1HmDXLX531xD%2BO0K4pP9p3H5%2Fkl6hsZr96EpKLEj5r%2BpqESQXHfAbnl3IRqb7i9VzLDbmlD2LEmXEheXKHpoOnrmFgCDIIYGzsWDZO1oz8bcOUVUl5Zwy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3708e2d215693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478014,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 2600 x 1200, 8-bit colormap, non-interlaced","md5":"397c46b727b3e5f3c464dbe2ce7b3b13","sha1":"0ca4e7a4013af66b4dacca92bc26863d4093d759","sha256":"5e86c2e869f53553ec78f9c0b1089662b74aa23d7ec0d099cfdce7b73e8a8adb","sha512":"66fc769f97924fe3765559dbc93be484830fa71da74bd759958034db7a0c20d5430eab461dca7532ccbe0b0b61fe3e3e3102cf9fcd53fd64bdf9e0db9d4cbb89","ssdeep":"12288:wOaHVadPXcuPwH4sLUuKnfQ9EapRJCPl0mNIz:8cdPXVwH4yKfMEapRJYlNIz","tlshash":"50a42398b086d0fb194fc1023ad3ff56c99a103a1e77dc56804aa94ed873cb7a835f55","first_seen":"2026-04-14T14:36:39.524792Z","last_seen":"2026-04-14T14:36:39.524792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":558,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539007232495684223.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539007232495684223.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:38:43 GMT\r\netag: \"14cad-63b29d590d2c0\"\r\naccept-ranges: bytes\r\ncontent-length: 85165\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLbMGvqyYsn2uKWF%2BawyNhYS2lkKqko69quETy0YPg8ARMGO93b4pM3Zn6vL9x6xP6BnonyIHOgjzuoPcV1J%2Br%2BzEdfdmMGhqDUOR4dy2mdr59N0cTorSWds6DJ%2FG6er6fYN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708efd755693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85165,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x800, components 3","md5":"2f547fa35f2d593edf6d7d2288e39eb7","sha1":"b0549faa62b149be8922a8333a3475e56b878ecc","sha256":"28118cb90d6404af6a802254f99ffbd5083acb38b376e4b7124cb26afd84e071","sha512":"9dae1319eb37236700054dbbe8d7d8ef786ad50ff707ac4b8b69d97893057cd9de2c2e4f2a533adb9e86684ef56b312a14cbcdfb3063cb0cf3055ef4f5a60ef4","ssdeep":"1536:nXaeS8Lk74vv7oizcQ3E00Uujh+2lC744/4Xi9XpA2lAb:jS8u4vvr3E9T+2lg4CUi9XdOb","tlshash":"fe8302e5e2858024e4fb0273397d2aae61a0749cc1d11697f16a7ccc53d935fb06acce","first_seen":"2023-10-13T18:11:25Z","last_seen":"2026-04-14T14:36:39.525763Z","times_seen":2,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/s1XbwgjoEZh8qr-code%20(1)%20(2).png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/s1XbwgjoEZh8qr-code%20(1)%20(2).png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 24 Mar 2026 08:27:38 GMT\r\netag: \"406c-64dc0ec935e04\"\r\naccept-ranges: bytes\r\ncontent-length: 16492\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BzFvp4RnbH4PBanAT7VaYPgQX8%2F7eVcFLX1e%2FDTNRNv6Z0%2FnyIv1oqy%2FcRwoms6dK7khcCeI2TVSYCIzl53PJsUIs%2FhPFGMZ%2B9Fw33ty0Da8G0MyMQC1YKoM4qqwc9dCO3r5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370903d905693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 248 x 254, 8-bit/color RGBA, non-interlaced","md5":"39eac4a76c9e9792a147f150534103fd","sha1":"bc51d3058bcef9d31fff5e68fb5206ac2a370e09","sha256":"0fbc804387b309e1790b7c02e30a92554a9303ec062b4db7c3631aad7ceae821","sha512":"e374f9d74fb32f0b0d588930aec57c0045bf849568885462ba2719a136604169266156c903fad11118d5eb53f75d276d37f9e06f5f49fd253d36d3cc96390965","ssdeep":"384:PXnkwwL61bGGGzXyJR2A1ttZklVEjalq5fUufAjHm4dhscW:vCvGUXutZklqalq5fUm8s5","tlshash":"c672d0c4a7049d72a65b54883cde0d8b4a238d19def04ed2bdec544349b09b89c6afc6","first_seen":"2026-04-14T14:36:39.527098Z","last_seen":"2026-04-20T13:08:55.001367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/176416450317582982632048654286_orange%20(20).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/176416450317582982632048654286_orange%20(20).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 26 Nov 2025 13:41:43 GMT\r\netag: \"d098-6447f8e86d3c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 53135\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKrMjJNPosgyHq0TsPkoJLWO9ENqOBl%2FsbuvcHK8CD1hp9HLzzuP6kPCvnfh9verg7nG7s5YKIq7GKrNpQBBAsNCBcr4MXjM9MpYne8rmnxiKXQMIWW6D8wD6jqED1OU0Gz5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e5d325693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09728cc68f0a61b9814fabcf99556f3f","sha1":"4a148de4f6c980069fa6d871c94f025107f80ce1","sha256":"dc3e04783ee7b295a2c29bb308e13b6412d93b686b6c38660b04f672599ec471","sha512":"176ca69e639da6bdf9f2d0d310d577af86c76b859048912fcd7e3369881bc5eb16aac2e48ccb3e7eea1ff6a6269c1fcbc9883e2da1449d015e3107964b156ec5","ssdeep":"1536:5cXHUkNyXPqfNo7kg60jA/dwUdwRPqgKd:5cXUcMAWQnX/dwUdMq/","tlshash":"1b330247b0c2cdc3f4d2353c4b859e52ad1bf3942274aca6be4b4a5c6a67dcd06b5704","first_seen":"2026-04-14T14:36:39.517235Z","last_seen":"2026-04-14T14:36:39.517235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/webfonts/fa-solid-900.woff2","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/assets/css/all.css\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RzNTtqTatq7C5SwVkaQY1DXDlpK75%2FGC50lqAdGtpczqpFo8DVJWFDzJow0QeXXbgUcOyurS%2FRyTO0ERmiHqAVFQnOHtixHNFuvSy9xkGRDBmDsQQ4SkyE01zkw6CcCrB8lq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncontent-type: font/woff2\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nserver: cloudflare\r\netag: W/\"24bc8-622ed5b065880-gzip\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9ec370952dd45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150472, version 770.256","md5":"3e50e269ee627bb2279f91d18c085167","sha1":"a7fca574d24e9ffa5ee0e0589ffe17277ae4ec27","sha256":"d27bc752105c079f8a516e9142406a9fc12cbb409f9bf8681f2ddfe0360b52a6","sha512":"3747ebe9941b68e1227ff95d5de76bc2a232ee4fb975ba5704050c90d517186e5a7bbaa2335774ea04c75a278811939f507875aa8a70a44fc2ca767598342645","ssdeep":"3072:ncBRRL0RXA3+l2ZxfIdMqhX/41aUGNCGIIlA/zUNf1W4H8yiaEagOlcgGBt:0RYRw39ZhIlhXwHiAKf1XDiYuP","tlshash":"47e312aee37f83402215734fcb4a2562a0c1d8a696f12d27bb9ed1ab3d6ec5e44c4315","first_seen":"2023-04-07T03:14:12Z","last_seen":"2026-08-10T15:27:15.781754Z","times_seen":6372,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/176416461717582989542785018424_3414753791_black%20(19).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/176416461717582989542785018424_3414753791_black%20(19).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 26 Nov 2025 13:43:37 GMT\r\netag: \"aa64-6447f95525440-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 43518\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MATzSHvXwyeN80i6A9NilaaZpJyixbGPAD4jLkg6bKz4qTRr8A7wD%2FVYBpi7cedXOr5CmgZfH7vF%2FFzSoIDao57prDsVZkYsrChtjtfyMTgiG%2BuVlTJmbN9U6f4pGVZBtdmD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e5d315693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a6ed62d166bb01749b6ef9c5ed0f9a9","sha1":"af04bc62e4c079e4df18ff1248db77f5168fe093","sha256":"5e711097441e629fcc4da4f193e78d73662ba342621c30ec47b4bcc12a3993bc","sha512":"372e9c31afbfb2c79002c3b1728e348127259e6b12fadb5895b2463f4dd2dbff7c6191598b3eddabb29e0d5a094191312ed3e6e0eae82ed261f89e8edbb0a8d7","ssdeep":"768:WGfap0LxAUbZ3851a2JOMfqN7cIBEpVudr7+kzvgBsQ+ruQxTZfgCm6wM3wvgq5r:WGhbJ8ra2JOMfqNo8YgXsaBNx9fgdnb","tlshash":"b813f25aa710c919f6e78972b3ee87de65ac6020f9c0e034dd271f84f0121d386a7de5","first_seen":"2026-04-11T04:40:33.576531Z","last_seen":"2026-04-20T13:14:14.908989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539117142358570048.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539117142358570048.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:41:54 GMT\r\netag: \"2ee0-63b2c64ae2c80\"\r\naccept-ranges: bytes\r\ncontent-length: 12000\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1h%2FIdoO9xc0VikdNoaIUwyazmK%2FSeOXSjPEh0m6NmkobkF4M4d0vaaiv72UydQPsZH1R1qwHagz3oqlTQXMPjFih9pqFAd6ZpMoauGiuA15J%2B9PjaRP%2FM3KpR1CNY6d3ohc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708eed6d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12000,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 256x342, components 3","md5":"338945b9c1abf15bca37b7698876981b","sha1":"e318abc5000d0396fedf26815a26cfc3d01183a6","sha256":"627816852d3585313e68d4954cc96c1dd02895b625a874a393c90820db792a38","sha512":"3170ab96455fa0231c19d2db76ad37e16d39a6008abd0df85abc2fc8b1f4998f9107ca01ca17aaa67b090934b32b7e83476cdba92c24eb0100b8c7057a70fa62","ssdeep":"192:eVTeP91vhsmii1MuttKaSNVaJs0lp0INqGWR265EF10DkUOLVVZ93TRVikRI9u:eleP3pwiawtPdlTLWz5OuVOJrxnX","tlshash":"da42cf839f145bfcd634fb3a90adea1b5884a12b7b6a45a1d0c32640ce318734de8640","first_seen":"2025-11-03T02:23:29.205119Z","last_seen":"2026-04-20T13:14:14.857749Z","times_seen":7,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539118642131972104.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539118642131972104.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:44:24 GMT\r\netag: \"a83e-63b2c6d9efe00\"\r\naccept-ranges: bytes\r\ncontent-length: 43070\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bTahFRbMW6zOzlyNw55%2Ff38J3t5zSv9LwBkjn5BbxrxF6RwexA%2Fm4qsMz%2BhwjVADyfcMMCGUT85oQa0K%2Bnf9NTvoAaON2zWSpZhJ8dk18IfFDRm3XHieEfDNXW1ew%2FfwNIBN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708edd695693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43070,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"4e7ca8e4827ad69712623ba647165d85","sha1":"c53eb0c7be8f5f27125acfffd90e8deb9568eaf7","sha256":"5b23b81c2fe6776716e9003e4000f37e0b1a6eef9b6c0073edd621c100e63f45","sha512":"60c600eebfffce678ac56ef2d01b82d46017777d0b401bedf466d437fac8a0efdf926566ab06884e3e67a3f9e4dc9350344bc43f2865c6bd5d9087225ad3cfad","ssdeep":"768:rdnYVPPkxqkm7CuDTjH56Yk8a4CR8dRBCn3+km0:V/m7CuH16/rQBCnOkj","tlshash":"9313df8c5fc784cbe01e16b8cee6de5e0fa8a577151fb89b56d70d1c8688d239b74082","first_seen":"2026-04-14T14:36:39.529371Z","last_seen":"2026-04-14T14:36:39.529371Z","times_seen":1,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539010401883965670.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539010401883965670.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:44:00 GMT\r\netag: \"4647-63b29e875dc00\"\r\naccept-ranges: bytes\r\ncontent-length: 17991\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bi%2Fiz44wEq89kMsam6oF4dGPS7Wg%2B0h88eIsDFmWq7XwI0Wg3qJA4JJLVl1n6h%2B4pE5IRHDhQAg825AS0gjD4rLu%2BuYtuKEqnh%2By818x6tP1p98SdhiLrGmouW1xu439xtFP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708eed715693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17991,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x380, components 3","md5":"67fd5fef94f59ca799a1d91b8e2d8d9e","sha1":"37e1bffdb2f046d631c531899553160664928b7c","sha256":"3d7f11b754c1a29ad8cad85863e2469bca99f929cf6431a66203ead0e1ce4ba2","sha512":"b293252cbf411ea8a6737a6a7648e32f9ba9143b1f7652626b8e65e80fade02cb456b81daee76ec4dc0dccbc1aa95e8dff13363d6be4b8b0e6c7916b2037a0e4","ssdeep":"384:Z9YsqU/379ny/YqME/rY5Z5FmCWO+nI2wWaLXEmlU:ZRv5YHTwZ5FmCv2wWaLPU","tlshash":"af82d0d2b0c984d37a2127b0aa51132beb04a55a4bec3ed4f184d5ce8d7b5905b64f2d","first_seen":"2026-04-08T13:32:08.332676Z","last_seen":"2026-04-14T14:36:39.530221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/b0a7532ac8ec/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9ec37096fde55693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29341,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/b0a7532ac8ec/0.7528293747370668:1776175841:O8YJ5kZWkxZDKNtuyEjirHiJW_kl2kNqlY_o-LA4Ack/9ec3708a0ad5b521","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/b0a7532ac8ec/0.7528293747370668:1776175841:O8YJ5kZWkxZDKNtuyEjirHiJW_kl2kNqlY_o-LA4Ack/9ec3708a0ad5b521 HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12145\r\nOrigin: https://connects-ksa.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12145,"data":"L6B7w4cZhTy33yFXsTsgF9c8Gc3jWjKdhjBFc5jV7zH4mY6YcQjM4L4Gj6hW9ji4K7yDj9Qscr07POFDPjP66zPjhimGjc47cuxTTFc$TOrF7nrm3BBcMw3oTN$g77jdIxSx7ricF7Ims6jc8N3v+h7GyCvws4x4jfS7pjN4pYF9dmTZPahZPXjywhvyNfUFsjzIGZP+dXsbXdU4-FjwF9jg6jYnJWjToLr097qAeVc0epiZ1avv66jwBYjcHyhxDwRVDTjOGuCHA9F-7jhImNFBB7jw+FeL87C3Bjqda4s3bZRlB6jp8YFgszhidL3rdsZT8jzB6FGu0m7jyhMpFZmcY0CY0NYBjZn9j0+F4Bjp9IsDQmB4hBjodrZxrrIgUEMCEeBu4l9KD+epW$3ihpUAB9K+u7jp$1ppjGxzHmf-GjGdKcGK4JK3hhzbKJS459CWW$XKVf9wDu4jDB4Yj8hxqGWcS5pYNW7j3L8mmDdY+avxHfvir+Ay1PdPEDPMrDi+0ijypBvdlIp+zJwKZG57qWON9Yl9q8Hhrb4pihA9k9s7Tk43CxRJ-FyqrrVziyUY$$xrKqMiARcAOoHJjcan4w$qAVVxc+AIfYmvM6-N6C9bCejKIurj8r1zZ76srPNuybBydn7NY7D7MBbOHRRaQwmVKeyniXyfVOeifY+L82vu1g$HcIwdLzvF24jeydvfp6On5UoVvDG5NYzUwC4YoF8OfHHGJDnom7J-K$TZ5wJ3ccoVwUhzbL5-GB4X7k0r3UjYjGC7jDHTZBRzT5BAjpPTxgCTUX44oX$k95jd4nD6-rOoz2J-r8FNWyFbr5zNQw15B474y9FcAhFvj9Lad$F0G0pNg9U7NjBdIa5BghTwsxjpheBmfheOcacscy-hpghh5jl$hBB7IEwn64Z5j0OhPhK$s3iBhKyhPj4ygZ9N5pFhVLlsI4jhV-EbYRwnKGsrzweFjz5gs$2pZ7xzgsPjN5e3WApMghaSzj-FPT7IZDes4ubMGAVZB-9MwTjKrFYDhyKTeMrb75ApY9Pc9y74B9TA6ddmATPKxT-xH5FGxkGp-xOzglWVSMdRZUPzBNgGOyz0lO5qx3ryz0grNSZhAynK9QG2TLkKYOuGejBH9pgFhbT8TBB7BDcYhGF43DgxOSOyhLBCrJTNPT9TsHzrcZO3UWTL5cjYOhPI4psqs6hKi02Bhd09kKGeZcGcc7PhvplCFihXFMkhXWG7L7D9i0h5PbLPGGeus-w1riLe6YppljrClBKOoHFW36hFm0G2T+af5jCx8CjERvieUaI0zxc7O3MKU5jchOPgY$zj447W0EQmOgiCIG+gzPOSHU4WjK3wubg6b7POVeafoxhhwBFcOzdy1F0zgyfw+rjNpR+eNL42MYz-BydbHc7NTyf4GY3q370$SIpL7f3pBsjru6wQhRv8f4K08+1VH1qU5a0ybT5pT2FTyvhWO8qsw$xZ7833XVqrnXV9-zXfR+alrCdGeKAf+2qOVKx97gRH$xCSb2ofcL2ChFyl8N2$lND+XOv$vd2TjjySkF5rB8S68yq6Nj798Tjhc-RjT2820QLTb$z5Gx-bsXupgFPjpkSGshlg7BBK71DBcrIfhWOSzsnuNhwgqddDBEbwFjy9nyhcF4Fx8Z7W49hLu7DIPcNyTPTgG$JXZo+mrTjB0o+LkzL1KIkWIVhd6DppL4p7Xd3yEaYJKZRoGhj4y7SlBaBIMFNhhvKOZrewjfp6gAm6bdO7OeXgF+45HIcnDcydwaq44+Zs3cGMU24HRc03vhps$ICr$OCT6gQDc8Rs44b75PZR4KPQRxhhIb95++1RSYx83I5yiLRRjGEURRcdB8qeLIiEU73Wbu-5pDR64g0zTBPFFcrXXaoxpKBDcroR480Ah77RFG9a$-pGBZRpd7j6TyBN2d8Na0CpRPCDAbBpyY0eYsHmoJTppjiiCubbFnWsTZRswmeXVx3vgZodAUI6yCp-imoCTdZhUO3uPJ$8slaJylYjhBWaB48h408nMIj2yWdAzEjcEFGZI6og0dTdJz+KCNcjnYFinxY7E1DwEZCsPC0Evj45GpGNuoXgDZpJKgghXgYyL0YDXxRfJPaTT$ZNqLEYNjmykUpy9Ic1mBTbRUbR5-ihcieBYl8z9jh3u-dmHdAWimKwyhE5E0pgwF8x0LUG1BzGKuz2w4mbyNGzy6JoFYZhMLL6897BYazd2wkNWamweJ7cj1rF4lKsfE1wx8kK+v8jLyR0iNOeT-yHX$I99hq7CnBY+7JHRc9+JgZlKoyM5Fh0MrasemDhAwGHa$wym-cqdxdRJnA7jVnB3AzBd-GaWb7TeLLIhC595SDufA3jonENpZLEa$7a+LU3kBFoIcjoiRCC9AqF+bjTdC1Lgj+jlQFPT2LAAbx2PmcbRi6YQphcqKhl5BjSrdOb5jBGcCNjiaH3NfETkIyTvC5sNCxKj5zoQU53e336GozciUIpA$whZG3gWvuLZoyhsmr3rCGPwdAOzn0Kd2qjQY1P3BUFgjEYMnswnfCFc8CXQV3BFVDcKQsETgFp73A-NDBBLn2dkpsh-gXIKZLvyfOfhcxnYroTooR3Xberr$3QimocA97j4uyOiFXGjCPIwsoD7z9Gkw2bKUolB7xVcUZ8WgYlmeG8BOCryi8l$gwsebysSTh0yjXhc+zs9QqwGRgsyCqLVdWMXD6xn74JkMw$Bgj7FmuMjvA9RGC2MC-u+IgQrrAA21fpT78a76Nn0Fjm94MyYAchT0wvmVs2sckjEqcbTBiXo+D59K$DflaiWbgDw$WLATD1TT4$4vjsLcc+WKGTOIQ$G+NijpXC8$jhrvDCXAcoxoUPvg8Xfddilw6RvoU9FEKjVTHm63kDGEsId4yYcs2sXxmngweHIdNQMlXgCFhxFZ$JFqI3WBBi7U-wFjrpOljsLWMNnc9gPI$aRlIOg6R4gHv99A+P2WNI$3+HGBI68BONL7rh9UI8VfFoJsyja9cpm7DjkHxDZ+ZuNUWoj0DhXo2$Z0kTELoS91OQDHToy2vyFGCeAcyByIivTpKDTF3i1pRruIVuHi1FaO8Dc4dyw+iFgrIO1+dTdxNU9TP08C8b3Prqkz79rw5WCkEPbL6eMUBBGP0A9STSVKN3iVowN9PPGhINs73+93ANKzL641PRDcYooyEKeTAwWieVCycaPxJ2paRqiNODAwegGgVqkm0YiThdaGVTzJibHGwRUAKfN5lc0L-Ms7dZ7cC1BAK6YWr$+UTgZmAOVcNOsA9ML0LOINS$XLkb4-d0nfmqxos1dwqe5pj03HLLsMcnQ-U8HEwf27NpkcNHOwCdfelHGP4oI3cDu+d5aKE0RAn6nnZPW0v3cEkvWriOsIgDBeFg+GGsL0oJ8TTq3j8EIKr84gHfHRBjGWC1NUfTWqRnle4CfLU3BRQqXZNd7blORFTezgjwpeUe3LXsnqRP7wp+X$j$3Mo2zwFMW4Nlf-5vzBUdR56eN3QPj4T37ij6BpNG9RXR5HWvGMWPZ$s+sD5U5gcHRrW-Bp5scVY8QvWBegzAz396sBeHZx4-G53EWYlB5-GqsrfV9weI46h9cGf3B$7Kj-D6JJUqzzBToZo+hHjXz64wn$Yqn4scjM3pG076BYU0TgUno4zZ7vjOTG9-c6XZNU5WcjIT3pcqUuclchNC48QYfnIwG5CYsn9VWfI-eHXNUJWgTRB-U346YTDZR79d3eUUFgJxpi8eUeBGCOjz9yNMfMTufWD6X0JnYERhDZoOXa4qThBenllBUAR9fKn-IgQFUCcGzgIicClcjhI3B4NIRZF9mhUFUumOQlaHoKpJGMTOjUjBaNC4mNNI5wF-I1IOJSIBjqhT8R4e5YoABAmBnMI1Y56+sb5390h1oqsoQ6aSlDnK3w3-j+fxU9J-ffCkzCew4YzYsefgN3fE9YBrj3WMTWW8UZRl8VzLa6XvG47yDQcQWLjXWOU$pzXynoawGIWpPW5sJgZ2hd7yfWYhZonsWYBV3BQyN4sm7ZRGzRc6fW9GUqPSC-hpB-WyN3XfG88vakff7jPTQV9Pj-I79s9BQBU3fqTasyjZ7UTOQBUno-pV9gTaanorCTBaaIREUJljECQmRNlp78c1p6cT3vDA97EBEcjijHlka2DYBamF7Y8GzOhSWj7Ohxh1T+WpEy9fmz72s83GWdNG8XZOjyjqsqRrhGzjoQ6nYmc-FEJpNe5NfOjQf$p8QYoYP1PZRY8jG7cTBGU0hD6D9UjpDm7se77qhis4QGiPjSmaUgjkNjBvZgTgUIROhrsgjUNwa8e$EdPeQpiFajzoihEe51GOjLjUiMQ0z8IjE5XMZE52s99IQ+sPQ7BYUqTsTjiFjfZC7blqiXXyIYCTfEP6YpH$YeUzoOjzUwzvGXhTBXQYi5CeGADVf9Y-i4JzPhPfGOsn999VH9z25DIJNlmWCVWfDxUoikUL5G4wC1s8QJzB7qi6E7g5cTBBaFclBkWf7NPdh2sUj1f3JHGCcVcf5jgJmQUBc7gABwjX6wp$mjgrf$fMg99vmO3HCgiFDMiNluieDhHi8PTf7HXYomeg7Kpi8QN-hEIMmA3beeeJHYguUegDanC5NblKowDUavGZdMj1jc7cEJCyPllBDpeKTFPFIn3we6f-96YSmzdZsMZ6I29YIc3MZeHmzBjY8djvT+dGcDoKj$fZdGDHRTaLjZH5PHRaf+nNTeCgfVZ4lVdCcSmoiW4ZB5ZGNaadWjeXi9CdcJChiyNB5hBLYxjrYQUA94D1GrsRsP7AUwNIzqoKf27eI0i3DOYmdKeGzlW-JkD4lAX+AqNM41Y2fSdcCUGb5DjZU3hXd3BjfePz4P7ca0IYBgln93JgIWRyNvd5JuE6JUFmBS7Ojr5C7ocXJT38Q7MxJY8RsXZn5397aZRfGHjogBD4HsJf3FGYlKoV3TiBnXW7PPnQjQAE9QXaPVl0sfGeRC9Uj-mWJ8QNGuGrjOgC9$Acz89wWZG0gFPwGLfJE9AJCedRajgIRqis5XAOPvgLTzppGRPVdMZBf$35AVLZmze2WqL53fCEJEzSmCe2j2WsAqHPM6B53Bas6cfc7TLYops-NZAnRKWTEB91mHRl8mGooKgYhFZHRaL8d$P1YKAI5oTwCjX89FLj9QG1YF7l9$Q+J$ncjPfNTxd-noMYmKu-IDifughSsFCSUFH7EdMMZYoDz53qgagYopA5agneUIQZ7f7CHdLGa6f7ceNMjB7psZsqMfGdpNM1Mi8PNKXi8HPAZYlIE6gyNfGXmygLmoT$jeaJCaHnCyNBsB5F5cjsIHiUfFiFad7YaKnKo$Zqs9M0hrp03HHhMgN$onzKPucSm8Q2R1ZjWnmfG5Js5AXgICLTnQLYEnPlgQWKWpGTALj+5msnnYie3ngPEqXp4Bl6P$u+uqszAFJxZZoSfU7ZorukREAKpmTGmghCeCEgUAUXl7n5isUlAAGKe5nIYYQSuZGk8-8-PlPFzzBlcAj9JuZ+ef7blTmJNjfCmII+E7c0Tau-sImqEdJCPag7EkWZBKEJQ3JyVMneNKWVUcznMFiGzubJT4svZ2MPMLyxpl8hbEgeUYPC7AhG91dY85ZWCSsU9yZAX0shCW9qfYlEaAXVmqZ0U0mQPgTkueIP7QzYrI3AjRI$AKW3HLjTLjoE9GoQ3oPQ9lDjgJUePBPYl-G-G0sCN53gUybfTQh9Tz7jK4nbn7gYBgP9ByNnoOMZ7Yz+eqRaaB5mB3ReFNrmVBjBbrpxU3rF7XZqT2CuIZGas35mQ-IrrrszBsoMusPx4YlqiqaSGGHFyDL5ughIRfbLL8ibLILrL$LCCEbIGc7m74NgdxDFiBrZhMcHA8MxQwf-JrX5UOJxJUidi6DGd9DXZpl8Q4DCDa4iWnoGLrXaafiMHE9F$I7a7cdUExDD9yjZPygIRABfMjgH9zlgjgeFskIYVoT53gI3hjzgIUb3rIifGjNcnoXOiQmqTgUObAXoIOpcIu7iZ$iVcHjKcjBQJch47p37l7AN92Nwrpi-EmbAND61p$$uN-7sDjg7I+BiVj9-jmIjujz$bZRSfLgaghAuINT79C999orj84a8dBW0T5aoWfy9rA$C7L$p$FHNL77pbd7SdZgOLILsuoeXeZgkdAXxb0bgTzw8Qvmczyg4DeF7wVWP7lyijCV4ZmEbEEEKgMA-wbbe50wygKodyEu2doXCZeZ$KoXp4yUv9c78QKoPbu58fW+HCD+8ua5oddbjDVdAo-G8QXolC4Cs7B$CAKp59zXuibKQU0TvWPoYcfEwLcUucCewsqs+cBrHG0pKENnaEobZREKwGsAdnqdvbpiEmmberHb+LEEuHwGE5E9oE15$Xwms$wJCJW$7dYDbiABhnICKipiedGyfLbq1cyUuawVHUaWFlgTqVmoMes7Prd7-u4ciLs7FGWnyNREAjwUSdJnYBkJADv9Kj5n0pMy-pKs-AD52sPuWVhBXrnqqsxCFbbPPbbwCuHKKjK70iLqyCjspG1YlB8L2Jv7RuFqczqI9KKdVfU7u$WyDyO3UyblBNkz1W4ieng7hsd72MgUqyczUbrynkmo2KzN-L4qXeFuZOibdZ8HKuYosu774iADnY7zRJR42YnaFQ2bju0dLjwCEqRIY8hn2YDPaoVCAV4+b$7gEiBISdifKJUq4k4NkJi7gUJzcjp4+Zlsmr2crzEEyE2aa5kzBr5CU-pZvH4iwFn5kGeWAElBaaKwbrwhckMkQOWlaAHR9$xa+3MuxrKKNAcd8o6oJKJrhCicTOErgN4buEeuDDWC4NvLlqKVdgkQAh7B8fZ7nVxKZGKzxoJTQGAHLQE9fdRN8wT$BMk8NKdGg7wxLPghnEKeIHwfRgFQs6S+ZgIDaD8+DVKOoglEMHvzQMTCZCbJnqB$ABTiR7nfE-FAC9eU9$Gz2wize9Dd3JPTms0TYwdgXb1sRRmbjbsopADN4djgjAR-7wvQGX2JfKoc0scZZG2CmY8der6dHXqiP72yM3CD2YNei+BmQ6bAZoic7wygduFG7r890rENB7GULkoqUmQGukbVlz$3noS+GQKCzgHKLIu1W4wsikf0VRBiNIMRmbkNF7MyJLeodwNB+O0OxZE0H-g0bkBwzBM+qs$hubz78dhBKYNYYvdUWbp1ZGVMz7fIxNOEBgMrUfs6PbR1mDEHjWCzYKcJQITB4NIUxph5Qep+2BNeGRlBjVlUkgwF88$-AAUwiMJG8QSi33REl7oEqDlnbll8S7z7VT2YnV$OaqN-1QQ-s9AA44c-mCDX+vgj-IsX09lr4rn9Cr7Bmk4AqsvWGHgkG45XdH$i+ioX$+gUqifNE93zi9kK9KQXpKBqFC+KYl7CsCoXWgs0A9LcYESmaLOSvSVvBjJLjsz+x-Of0-1RHg6XTxiIl8-IY26JSEJcCafGvR20rw4V-LaLoijN4vezZ1ARu-X$z7rm8IPAZR4uOYLc3EFGzS1sIJgmcr7HdvHhFapcdmPEFO7i8ar47Gx8cv9BkcGC3dajacjx47BhBQf7q8pECVr6l15lPbevhxEaWPyFP7juNg4XHhB$jAMqIcyR4qIbF31KLi0GDB+KBT5gsioNCQPGnMof92p0y3cUcYj6RA9OFjo-8$APU66f9kr3jCrXlv8P7OFBKpxiT3n5rUqjy3c5y28sjAaRsg9-YOqjmj-ewWor57szy+DTTgo+pm9OamEcQGpiwEcrwCjuCaQ0GJ059RWjPpnYDCy7cBq4eMcQsRQDZ5IwBgKnBByz0eYphbmzzf7R5NRyhgP8BIZ7zBiyWahVcFI8vpxjYwGKcGFI66DBRwYXIssCGu3z0jHIcygybQzG88WhxprThhz7XF4N9DopymQ9gUm8WmrU7uj5I8BP8U7zrmFh0FDjXyhhyP4OdWIQsgGg9yjcryCI8QL8JVj0krICIQXRF-hKza$hqCYsFGOLm-EcICIzyBh57sF++yIjD-RLpXRezkhNIEskCDZ0wCEyZIXGuEjYPCgc7wBSdT8bRKPj3mmlK4qFLlDbrSc1IQsm4BB5IH96CGxROzpAjf7Iyu7mTOiLhBTPcyPciBUpZM1U75p5oM0iCz40Y$8rDIcIRxw4BGzBr08vGJq8fdzrp4pm5B$XPrdf5PmbFB7w4ETyPjrcNpA198JhjAIghB88gmD0gcchTre9eCG9b3hXKDszejGb5NCBXh0H5F98QxBL-OjRrQTis9$TrsIpRyfD$0AHzhPHI7ybIq5x00ihE4qGFQ66LpAdywwqPomMU0jK$5wzciGIQGJeUi$Pj74hUPs3GD5$PhzhFFx8osmhzKmN4W7g88TLdhU5Irsaw8-Egu1nmEhrCgjPF5$rY5wykBeITjzNLyOKhTaLYxOyNz4idhlavTpn8WTx67Il9D6xXDDp6yArFmYscsW8Ksy7IdjSpz8UewaKW6rI1GV8RYL+66c4npFCaI4CyjiGBUU5TFRhTXzurueF83sgR40wJMWmuFr70WP-pG72m-JWTIacq5qrasYsiownLqgYIMsuIBi0MhzOfaClmFkFD-cSPs7aIU$TPr7g$OnmQBuG2bOHh7igy4TrJT9F8j8yTj-83rmC0XachjK7POjR5+dKUjfPasXZGKdTBkRsKSIz7PcY5CZcq4raeCKhbxccyMmZoWZKFECdKcjI-sB7OjwscTju4eUC-BCOP1hpNj3lXWg5P0cCRsFNBBGRszr7ha3KK8CTgMyEj1zhcfPQjxR06ypY7cy4DABaD9IYdJVU6-091rqh5KsIWhiKc4nC-AiY3imT7L-NkITjvjSRDjB28UKE7glJ7Ck53+31473KiZsQpOoFySaScdjZoDNDqKaFfjyTmNG5zH-3IU4ZhAjMj3hOs89BWPlPUsUdjPFhcC7upYsjjhdU7qBy7SFhd618r9vj5eqWYYKQMFhhrpG0sIW659XFVCGn0BDCjDPqpS7-Z5K-ldOBVcLCDpz7wepaY1Qh6aoqGRaJTgHZ-hJsq3O1FL3lWDs98w9sccRjVcNYwSp8yaPfh6GT2hM4FDQciHNj29n4AqxOjmRUaBsELwICycx9BnS1w8iGc0BUrkziBgN5pyg5s7o6JF8T5M0SFjR$joe3YzRrgpUF0BF8a6hwxWIOlCGyT0jy$yggMrPYke2Ah$QFKvK+zyww8GhyIyOAJahXwx4hOl4XrzE+e6r5zwcjGIQa66mCTF4G6qrFmyjSC0e4PdghVaC7DZJVzZrPVziiBpNF4OENEI8s5YJYobMNycG3Dk7TsPegmCm6omS71jNGyq5sbP6BBx75uhpyz47sBsm9mTyzjUrqjuKRegGOny0cCY6zqXZbg9hE7No8YJ3bxO340jIEqGUp3qw46lsgzxQc4Iqz5dWCZDgTZ70$PzrNGPco$qj0igT4KakBcYBC5kLWIwjEEBKpjgkDxgnc5j3ALQSKpr-zd8HKjcsxBhTcfj1QP-UCpZh$KmCr3M3bDilTVNUBB91Ry4bOzoc1aeHeTyDxVNr--MlHC7U7TOP$NSmceq3u3Jgc+5ICNHqZvN+xTOmPG-40ZuB0OcVNb$VjU-GTI1wqgXmJH0pbwPxzZNmP1Bnw9kEprS$wCOBjz0-NkwTcm$lHi7GQwFybNKFHjMjvCvih0-6EAcOZ8f9VybdXMqHP19oPv0$dXMR8759TEqOvYojaHZGUC5e52B-C1iSlYG0hhLNTj7gQ9UrgAg2YXlra7h-x4+jk-7zIHZhklrS0$Y3G9z7WUCwBhrIn$ij1H0cxO0$NP$wlOZ+CjNNuanCIcZlocFscw62CXgBTWIW3pNrHCWgNnLUWK$QsAmnFmQDGhlyD$NClfs7mcNkDjx6g9oOZC4qfrFx8YJgF4CQpj96W+H-FF4o-0Wwbds$IjKeKG+GnjH9F6Gl4VcWzr2P4zlc1l3aKJwiI5zDHnYFUDUNsxo4LFTZaNO7oZWWjjgahVaikgq4Dw$7MCUD56vl9EC5g1TFPZ7olxczGgsl3PJirkNewYXhCqaKF-K$0C2BRR6PRYEgqHCm7Y3X9GTc3xGwQ7URXWi3zZjbsjHlF+45k4sWVsodU7LU9scnCRighG4EE9nRDRWaaHCqUVgjaZx2VlHMOBHgjsJWJz4oqTKQzSBeCVzzFg4Vcx7xi+MwQHVYFWS7GVKLwkBjBdHucIW9wwMdORnim1LWxDsIdHcgUWvT3jAwlHPjF8PFhl7fmlHAZpHPQr+7Tz-dooZgOS0$Y74ljIR8-O0h3iIj2dDAbW+GEcWImwdiWUCcG54jBCDHVYDgb7uh7urgfRzoXFyP8gYzo7U-h6SipNhc6zFenK-Ps3ZNews9mzNp5QDpjp+qiTPB-hb$bdrsp34SUCPcNQ4T+-f8ZbDOicXhHmcifesCysufg6+kzGfAXyFEccI$-dOelRgl567xyPAvZWHZF-s6UmBmlo16bag6rsI0foBZFJsuUpDGEiXLhAb3gV-5oc7YzlWWJ3r-UzAEEovaxp8GiWoCG5F6ErM0QCN+5iy$jMzXB8gc72jU5BgPWDlxBV7MQspEUrxyACCEih3vGD5v3rYj0iIokQJXvx-f$as4Jo7pOD$dE+1dYsqUKxTL9a$pHJJYuZoWK-9j0jiJ+83zo64H+TMVJvCOWEHWCoxFRUTuJxww9A$JM1JvAZq0+YL+yA+ZVf3D3ORrw5MBXXPWNEOxaziM7XhPWD+RhOwgAYlMnznE-Y9sOAg7mUisdIO-wfA4oedp2TLWg+fMETP2OB-193jY9-4sMUST8WL++HXXNMAl3L9v$G671bVG2D9cvCKM4ovW4nEux7zkM4olcbD3qx7zHMY5NcFpE71SYpgF5fc9DzGQ8zxMzC$cWNEs9zoqAfheMBJuwWLoRgY4aAUGEOrZL5MMh1uim+Yq-oU83ImuUs+Kx3zPMIo+I9MM6xqYcgUHBFKJvpWOofLUGhmJD3AxRzbor5nmbm+FQzwzA$5dmUU+XCzLQH4o+mK8uO5z+Vg3WqbWajYsYqcLL88yFiC3xECELzNILcPK+Waw-gLR+yb6ujQ6qvgJh7rb6u7Apqvg45I$UpEGQUqKTp5H$Zpn7Q5+pdANCsgYExOS+2BBW-MOC0hMBq4dgo3EbnuC9PJC7woauUeu-YQqeuRCXVmd8EIqzVE4ovwW$pT1KwIdWX+wFJuD9rwdLLoX+mKpNAE+XuPW+EUUnDxkwe3+5aAUMnzQqwWd0F1iWGyWWVqDdKpL+x3nJ1-zeMJWM6Ja93hS4VA3704gTLvgwqbTxB2gjBoEafiXjEhYpcF5XGkqUZBNkFDnpUye4CGqJYsIjgKydck7PRnLxHxv5kiP7WgOFTVg6cOVqQQ82dRLBwr6pknsGvGSic1JvR9ulJ-kqhPr9ccOuCBQKGIwkJl+QAoFKsj3YphGjjjVcrEHA3+cjjjWdWYYcGGNeU6gq0SJW7BFlYSC+2y9rJPk7W4bRzNhxmNcV3Vsi-GF7p4EIEzQJ7jjmwcfshj0pB7-njkj2BF7DZEJgh6ng58VpZFWnzmh0jFIJYRoKFd1hCXXaRnkj575QyojUbjjhYhh07jjdhw+deZjQ4qAATyFpFy8mKby73jzRYdebcEb5Dkxq++M1Wkoc77O-q4cHe-7bbjjqIH1WkppGUEFzOEHQJsFjzjiey+oLelk2eJTh7crugyojKsJUu0K$EYRKjyBRsyObjcreXkKb1Hj7p0h4REIpV$jZ4K8OUMfcyTDMATO8yaM9I9I3nI7jFpcWkI5VrjivqepshWGQVjzCXPJhK9ejXjkUM7PcpBwr7yEyj+Gxzpuc8Eql-vTaPcy3rv4j82oATpo5rc6XXBNpyDq9GM454CIYVWBcbTr-$d0pV9UnzNyq9Fk0jwGBQ5vEl687Bhd8OOA3-aQpk4bwYRhgbKQcNcwGdsg29cT6RWIMj$8S0AjbKQ47pjSnHePjOGhGjejXFRhB$Ls$MmOBABMTDhIi1rRwaABCh5hm0Pp4CPeG5eBlgXrXc5jNc+vb75TdZcalL8m7aX8oIYO3jL8hFWoEQI8$QcoFjjTR$k3hYpTkRUME78kVnXD+Oi2uCrSXG8vfrOKJcm74jSpAsjjwko57jj"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: P7bWpHxgMHcLrbsUyxjRQg==$U5JX+cCNc7Run2N2GRq1jg==\r\nset-cookie: cf_clearance=OjOyl0PjcnjiPne5bq1COrs2cuqt98KUBttba5PbrCo-1776177355-1.2.1.1-3v_4o49jUgJeGcz5q.uwhNdauIz9Iu8ighv8XbsB6nb3Ql_WIHQsqtNmqrdOwfRT6xWcLRs1ceQniFhavDaRkDVjOLA2G2EW0o.WB1YrLEPf7nA2IqCZa40jyhKvt4bx0ChxR6bVQLYqJjnZ9UhqPYZvOn6W9dhy4BDHCgUqKvGu4vonGEtc5wpRP9VEQjxCnFzX7Xqbz.LlYYhWSnOX8_zRQ4mLHpsvokFBkLdeYIbr3GQWD99uowuAFoVF7WbZ_9HpiTcU_7a.25JW5_.TTaT4x3P4BguxjoZQH_0Lm7xNnex9ognDdMT1c43ik4dupQbuVkwMDrMfa4ohaYHRPQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=connects-ksa.com; Expires=Wed, 14 Apr 2027 14:35:55 GMT\r\ntiming-allow-origin: https://connects-ksa.com\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ec370997df05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T17:57:23.859173Z","times_seen":17821759,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/12fQ%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%AA%D8%B3%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%B6%D8%B1%D9%8A%D8%A8%D8%A9%20%D9%85%D8%A4%D8%B3%D8%B3%D8%A9%20%D8%AA%D8%A8%D8%A7%D8%B1%D9%83%20%D8%A7%D9%84%D8%B0%D9%83%D9%8A%D8%A9%20(2)%20(1)%20(2)%20(2).pdf","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/12fQ%D8%B4%D9%87%D8%A7%D8%AF%D8%A9%20%D8%AA%D8%B3%D8%AC%D9%8A%D9%84%20%D8%A7%D9%84%D8%B6%D8%B1%D9%8A%D8%A8%D8%A9%20%D9%85%D8%A4%D8%B3%D8%B3%D8%A9%20%D8%AA%D8%A8%D8%A7%D8%B1%D9%83%20%D8%A7%D9%84%D8%B0%D9%83%D9%8A%D8%A9%20(2)%20(1)%20(2)%20(2).pdf HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 24 Mar 2026 08:29:43 GMT\r\netag: \"5ed4e-64dc0f40aba89\"\r\naccept-ranges: bytes\r\ncontent-length: 388430\r\ncontent-type: application/pdf\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3PqpwDbDhvCvqyWfHZaXFOt8xe9gLlUWuoFOeUZjIUJ1F1%2FUDUOOPQG4PO%2FCKs1KaxGNK%2B3bF8XrPtlPNcQFsSKCZPcXbgYvlpoRq0nl7qa8Z7vikwwgGqBlUTWEwZL%2FTUs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370965de25693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388430,"size_decoded":0,"mime_type":"application/pdf","magic":"PDF document, version 1.7","md5":"475ba25c636d8e090818203197526c2c","sha1":"abc47ef3bade3b50fb9c0e0801095161337d5e56","sha256":"d850bd1dcbd82a069693d49d0f1c721be87608e00f47b4096ea913a6b9354da6","sha512":"3cb1ad73c568892fe855532c12277e313df1c7c63fadfb88e55a95ec7aa5ed1705c8509b9eba4ebc97aeb1bd86c90d872062d48673a88b3d124a5b9cea08fd7f","ssdeep":"6144:vArdghsVa/tRUmDvAuJfRChgNilMKZqc+yx4vFIRwCk6TcjZgpYkRIk4T1ZYRO:vAfc/tyCv3ZChgMlRZqym16T99RI/URO","tlshash":"5c842318ce36886dcc90cc305c947adb96fd74c140eeb2b91c1a49995f9cf68d8a87e7","first_seen":"2026-04-14T14:36:39.531868Z","last_seen":"2026-04-14T14:36:39.531868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/uploads/2.webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /uploads/2.webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:48:34 GMT\r\netag: \"d345-63b2d53195480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 53451\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1kPGkv4Xv7gOsZu12tA2JmymVvblLgPzDQOVG1HWDd4U%2FS8FzuGvOePC43ypobKyU4su%2F18NlGg%2FFw%2BIljGyvDTFMdZreA%2F81L%2B9vYCv24OtKiyaJkm9FBm5FfJFpEz38iBE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ecd645693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54085,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1108x428, components 3","md5":"610ff9d2b65e79781b17e7791f639ad3","sha1":"bbd5205c01651706958978eef57234edfaeb257f","sha256":"e810b8377b4308c8e46580c18d39a758d7b685bdf747d53a4015d2705acd0fe5","sha512":"d6b6fa6fafcdac4a29cab55b357741858820137655f97742643bcd246cceee72b649e43209f8bc2efb2d313d0f6ef09bb3984fdf59c82a33c7ec4d7dc4ec46de","ssdeep":"1536:/8yd4OCYTzjv3AzgINK1KvSNRxScW6/PBM:5lRXv30gI0RxRf/pM","tlshash":"29330202328b2973ffbae63429b8efa0545456a593fad649b147ce531904e0098f62fd","first_seen":"2026-04-14T14:36:39.532769Z","last_seen":"2026-04-14T14:36:39.532769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":733,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582988099893254818_5193147604_orange%20(17).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582988099893254818_5193147604_orange%20(17).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:20:09 GMT\r\netag: \"d098-63f29d7eb6040-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 53135\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sKUP2KGefWDoKvKQpdy4KLGRwPq5bc24YyQKjyMl%2BDY8fDvlX5k%2FktR9TQ03kRADhEgDttCM7txA9nz65pSVUlW3BhwMAX24u2LzdYRM5xdjyx%2BPe90PXN52DcRoExNjyurM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e6d365693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09728cc68f0a61b9814fabcf99556f3f","sha1":"4a148de4f6c980069fa6d871c94f025107f80ce1","sha256":"dc3e04783ee7b295a2c29bb308e13b6412d93b686b6c38660b04f672599ec471","sha512":"176ca69e639da6bdf9f2d0d310d577af86c76b859048912fcd7e3369881bc5eb16aac2e48ccb3e7eea1ff6a6269c1fcbc9883e2da1449d015e3107964b156ec5","ssdeep":"1536:5cXHUkNyXPqfNo7kg60jA/dwUdwRPqgKd:5cXUcMAWQnX/dwUdMq/","tlshash":"1b330247b0c2cdc3f4d2353c4b859e52ad1bf3942274aca6be4b4a5c6a67dcd06b5704","first_seen":"2026-04-14T14:36:39.517235Z","last_seen":"2026-04-14T14:36:39.517235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539119102181403748.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539119102181403748.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:45:10 GMT\r\netag: \"1af0-63b2c705ce580\"\r\naccept-ranges: bytes\r\ncontent-length: 6896\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yh57ysTpWAUddZkzE9f7c63aKfqeq2lHMYhG%2BCH8FoBaZ217pZSgjXoja9%2FgubyycUxqZE87QP5mwrCEjS8ufBE9CI0vXlgrGv6x1enoAfRw2Q0gqaEo1YmRS514JotSyYZD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708edd685693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6896,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 350x350, components 3","md5":"3d0be593286b543ff718ab31113680eb","sha1":"923886843a8890000cdae685308182ad09a73228","sha256":"10b55bae9caf6a8db150548d51c4e4192d1a2f3244cdd18b6227dd0f6f2c6057","sha512":"6bff30d3416811989663e184e03c449b618bae975fc4cb1e6f8aee40c367be7631302827721b4e0f29373dde3cbdffe3fc6f6a3f90b73f114e6345d4cfecccfe","ssdeep":"96:emAHUye+vcRl/Um0Z+QP4DKDb9eFvPzskYSLpU6le6AZjkkcBkueYqQKRSICa0NI:CvvRrb9eFdRUfZSkcBkDYnVsWz0","tlshash":"d2e1afe7e6048679db8d49301487be1f2acfde43d7ab73c51c61a8e2374ad090584851","first_seen":"2026-04-14T14:36:39.533733Z","last_seen":"2026-04-14T14:36:39.533733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539068662572761765.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539068662572761765.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:21:06 GMT\r\netag: \"6957-63b2b43b79080\"\r\naccept-ranges: bytes\r\ncontent-length: 26967\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSK6x5CguURobGlJgGtq7xW6HuUs1dra4Nw0fsleD%2FGNdtMgWUSjYA02hG4eRZwYrReXDNV4dyt1qhtrg0kzbUi16ecS%2F16oqamF1r8n6Mk0pGClcagLGVPtCrleHDsVcyei\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708efd775693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"9475904ac38d1e8b1273e07cdda4d6b5","sha1":"36c51ea5f08b7e35e4c37350030ef7d96174217c","sha256":"77cc47aab1f49960436b2a586ef48a99cfbb0439472f1e503fd288bcc8d1514e","sha512":"568a8b1e9999386965547beea596a0194ff8756ac933aaf083ef96857b1537ed4515bab1eae2d790c262354e1e7cbff738d86d9e4ed4f807aae9fcb7751b3267","ssdeep":"384:InZt4oT24/VXjTP+nfOuHMGlUDYTAB7VZ896K6KMyG0xsol5gxZ226Irr:ktfy4t/+nVXTg7VZ896fh0Xgv22RX","tlshash":"7cc2d0572336020ecbcdfe351291dfa3cbe6434c586ba2359bb18a647bc0dda9e19210","first_seen":"2026-04-14T14:36:39.53485Z","last_seen":"2026-04-14T14:36:39.53485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539055642338766175.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539055642338766175.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 19:59:24 GMT\r\netag: \"2887-63b2af61c9f00\"\r\naccept-ranges: bytes\r\ncontent-length: 10375\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2BW62mjpveN7WXbB0G2Mf1KKxTxW0FA5RsP0kzGZdXm%2FRv8ZZ1p51fM%2BT%2BphPxC8LwxHGWIAV8wx8LRvsghycm4jUmrVEwzGxu8BnR%2FbqspnURHGQZ%2BzZasPiVjAePAa1s67\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ffd8c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10375,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x400, components 3","md5":"e31c569a589915e54da7af8ba1681daf","sha1":"a669ab98584fc2efe7419c96599801a716770a61","sha256":"5fb8e7c7673730b41a32b99d123b79f13102e747d9f4f62a6757c6ceecad82ac","sha512":"452c503f3c27b24287bd79f1c119b5ae9d05b49d9287fcaf6e0c7695615d5a67ed63e19cb485b459ccaa15449012a4cba6f0691259b95a4ebc6543ecdf9b74d6","ssdeep":"192:mWMVfICLJsqvTV/JOgJ+Ll470mT7P745xts9uvyc3NBYjtIt1AJijQ0lq/:xCLJHJBpJ+Ll2dT7qxK9uvzWqt1AA8V/","tlshash":"6322af68480122b1efb3b17401e6c13975229664ac0f61bcdada64563e2df733ce3138","first_seen":"2026-04-14T14:36:39.535689Z","last_seen":"2026-04-14T14:36:39.535689Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/hGOs3GRis5HWvat%20(2)%20(2).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/hGOs3GRis5HWvat%20(2)%20(2).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 24 Mar 2026 08:42:51 GMT\r\netag: \"1886-64dc12302cef7-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 6301\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxNdjpYMu%2BahN59RwrmH4LKZ5Rz0GHLkyrKv%2FNvRoHA9Yg75la8XACCHtVPvebuzCOR8O3S6gdCyHRQFXQJtnLVUQvmnwn4lNou7jzWSdvxccSvViIXU5OUNr3sXD8vbo8OL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370905d985693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x255, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"83549c881df7b07b398e18c416beb27d","sha1":"aa79c2165759100a97ee29329f60d6dfc8968603","sha256":"0f5f20b2bdc0290bf178275f7edc0064d49afd80d110321e2c0c782fb7128179","sha512":"fccbe0738a051ce67fb214705e7afb487111549a17b13a01fdc22bbc7fa426babaa26049c065cc586af9a86ea491cea5fa4e692d07b850416305e65251a6bf25","ssdeep":"96:ADjGkq8pq7lcWUzF5+oK1Fl1wacecXRch0l1MozxvvijWhjutyMJQQ2PCeKgC737:wq8I7o50Fl1GRchOt4WGDF2EgY3VoeH","tlshash":"afd19fb3e80133890515bfab517d04deb77a81b1c3cc1bddea5a040a39fa644d90acb1","first_seen":"2023-05-14T19:38:23Z","last_seen":"2026-04-14T14:36:39.53657Z","times_seen":82,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582998453175641349_orange%20(21).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582998453175641349_orange%20(21).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:37:25 GMT\r\netag: \"d098-63f2a15ab7b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 53135\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kj4dYDa2wQIbPY0X0%2By07hEGvxOVaXpzG5sSWfiqdBIHqxs2SsZ8hwlyLHRhfJ8yc1AOGkUrs7Ck8b%2FZnEp20faVXCTpcVP%2F9ePNaTvckURgaooFaxKUk717x9s%2FL13OLX09\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d3f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09728cc68f0a61b9814fabcf99556f3f","sha1":"4a148de4f6c980069fa6d871c94f025107f80ce1","sha256":"dc3e04783ee7b295a2c29bb308e13b6412d93b686b6c38660b04f672599ec471","sha512":"176ca69e639da6bdf9f2d0d310d577af86c76b859048912fcd7e3369881bc5eb16aac2e48ccb3e7eea1ff6a6269c1fcbc9883e2da1449d015e3107964b156ec5","ssdeep":"1536:5cXHUkNyXPqfNo7kg60jA/dwUdwRPqgKd:5cXUcMAWQnX/dwUdMq/","tlshash":"1b330247b0c2cdc3f4d2353c4b859e52ad1bf3942274aca6be4b4a5c6a67dcd06b5704","first_seen":"2026-04-14T14:36:39.517235Z","last_seen":"2026-04-14T14:36:39.517235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583017102849936288_asdqr324%20(26).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583017102849936288_asdqr324%20(26).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:08:30 GMT\r\netag: \"721e-63f2a84d51f80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 28599\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKZpwkDmWX9FQEOJC%2FjLz5QgNXXZ2VzmAICvKf4N1rAdCH6KcL8PDRQHe73Nzs0LKYE6TMaIu7BxyD2Uz3rs%2Bxu2c1GDvFqh7BafeXb67kCHC%2FbC4tUbtzaf36LSVpMUWMmV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d465693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0863f28955b9d0e4191585f97c2b5f1f","sha1":"07267691ee31e5228f8e7ab848967ce5d188cdc5","sha256":"6de641145e85eca6135be958956af41afccee530f2ba65572032ef5169d8a11b","sha512":"26b11425bdb22cecd741438f6b46200e14aafa05d077db6f286b5a9f7376f54003945122fddda1bed28c599ff2dd1dfcd52bc1af596e31d8d26d7355228196fa","ssdeep":"768:H3E6X5Y29QIzbhl9N9Qg+7V8D9SxLPsWF:H3E6Z26Ng7ukZsWF","tlshash":"a5d2e1ca47d8c85aed4c9a71a6c85cf23f50c1b61346a13f2275dedb6ba8508016dcae","first_seen":"2026-04-11T04:40:33.520783Z","last_seen":"2026-04-20T13:14:14.850222Z","times_seen":10,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539064791717028266.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539064791717028266.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:14:39 GMT\r\netag: \"6957-63b2b2ca669c0\"\r\naccept-ranges: bytes\r\ncontent-length: 26967\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PpCzJ5SsWLi3Oy2V%2BdXYepXWrzSUgoOo43u2z0ibxbBxdKSS05aHTJvryPFFZ3XJdJpyIoQ99Sl5yZwu%2BCqpWxIVEgfG8ROOfK7GBBkENBm42%2BJQ5XiomuX7AWFcJSmnY2pf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f0d7b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26967,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"9475904ac38d1e8b1273e07cdda4d6b5","sha1":"36c51ea5f08b7e35e4c37350030ef7d96174217c","sha256":"77cc47aab1f49960436b2a586ef48a99cfbb0439472f1e503fd288bcc8d1514e","sha512":"568a8b1e9999386965547beea596a0194ff8756ac933aaf083ef96857b1537ed4515bab1eae2d790c262354e1e7cbff738d86d9e4ed4f807aae9fcb7751b3267","ssdeep":"384:InZt4oT24/VXjTP+nfOuHMGlUDYTAB7VZ896K6KMyG0xsol5gxZ226Irr:ktfy4t/+nVXTg7VZ896fh0Xgv22RX","tlshash":"7cc2d0572336020ecbcdfe351291dfa3cbe6434c586ba2359bb18a647bc0dda9e19210","first_seen":"2026-04-14T14:36:39.53485Z","last_seen":"2026-04-14T14:36:39.53485Z","times_seen":1,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17583020218394567855_wqer%20(25).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17583020218394567855_wqer%20(25).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 17:13:41 GMT\r\netag: \"6074-63f2a975e9b40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 24092\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAykubC1lGd1PlZH09SKDuX0PlwlELPi0n5eg1mS11KF235w954HIgjT5YfOH1wBCIvoMfcnE6nTDCqgJv1ITNrZHdBzqDGZa8ZnDAhizQokH5iqbbXH3VxXjSUtQPJgvoS3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d435693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24692,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e901cbbe07ee6179cf62cda1429eaf3d","sha1":"8852cbe4d95807770add6244f16be41c0da37e0b","sha256":"b06e8f2fcb14ec80675a88a4adc3d61576022f9df168ee5d4d909bbfcd362eab","sha512":"625bb5e54b1983b7b36789d3d00fbc56b9420bf0dca5a075ee68530d0db6fc1f273b2564eb91591f82fd7c641cc1538263af5e05a267504e65dc00985a6b9276","ssdeep":"384:8eXwxnxsQO3tskDPI7M2dkbh6C6Lou/SbTX7ktLDkbpKMEiW2Yp8yNpmWW:yd2F3HD4+96CDbTX+LgWiW2YNi","tlshash":"d2b2d174086c278885f7597c93c5f20b6609c07c2620be98f674737a77aad859b2f429","first_seen":"2026-04-11T04:40:33.537318Z","last_seen":"2026-04-20T13:14:14.905841Z","times_seen":10,"resource_available":false,"data":null}},"time_used":751,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":749,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1754308358product_color_gray%20(3).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1754308358product_color_gray%20(3).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 11:52:38 GMT\r\netag: \"395c-63b88be814d80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 14282\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azgId9e%2BPd5lnUEdd20fqIaeOB%2BP6BGG2aGxsoL3zFndQrkaLA0NrF2UprGMPp2Jgkw8DgMHZg5CDV1yN12t6pYQOWQWWTdXIsDR97PxUdF2UBiHLwH2Lb43qUqoK7gVxfxT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ecd615693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14684,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb3ec0a416cb8eb0f4ea1d665241fb50","sha1":"ef020d47b6ed990eb7046df114b69dc7d1d07368","sha256":"4958e68d423937a06b1800a55f4a82ccd918a8a0befda731daf3b368f39735f6","sha512":"5003ed58dad99596f3f42d5104005b35bc5c3ed22d7c8bdb8dcf85fc63478ce4328730a9b8bcf9991a9157ebaaaf3180c5ce6dce2661ccdabf16618f5fe4f16d","ssdeep":"384:wIn9nsqKLtSKuxLfCuGt4MRzjbQMmXNpRyFnjntXQv:19nZKLteL6udMRzjb6MFjhu","tlshash":"e862c0b4676cc313c30745b7ae263b4787c0af658b384f0207ae524c7e58285a758fb2","first_seen":"2026-04-14T14:36:39.537984Z","last_seen":"2026-04-14T14:36:39.537984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539057131831310964%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539057131831310964%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:01:53 GMT\r\netag: \"11c5-63b2afefe2e40\"\r\naccept-ranges: bytes\r\ncontent-length: 4549\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tr4W3mtoe%2BI3QWSQFiy4%2Ft%2BLG3w155fH5SqWRTw7qvaOtkip5ZSKG36%2FWkwIg9Mo3cY1otKlRDbCF44iYK%2Fr1%2BTOoNibuEH48wVJ8npIqcbVheHt0wcJQCGEeLJHvwmJMRlx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708fbd895693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"a7a5ff165c98e44fc180322642842900","sha1":"145cf8b67b2982f1c5480bae2ad2f585a19e6290","sha256":"43d61afd8dc23da37439b146814e512eecd20554b9c80beb780fe192694d15e9","sha512":"5ff4c76204993ba41ef42494e8b773cb8bd39af2d94466318318cde3337f927442fdf55758d8244fa6c5a30eb236eb4f137a96cbfb7fdae158050d3f720dd99d","ssdeep":"96:a8gLQgn/iuudW8Vfpa8l2h1OfI6gf93rvJLhhQ86:abLQk6ufMRtl23D6gf9bNhm86","tlshash":"2e918e774fb156a1cb528332d422935cf330b3589d210062966429effbee05f298fd05","first_seen":"2026-04-14T14:36:39.538875Z","last_seen":"2026-04-14T14:36:39.538875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582996986439331369_white%20(22).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582996986439331369_white%20(22).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:34:58 GMT\r\netag: \"9692-63f2a0ce87080-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 38437\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5XRs1eWhYsAZf3P9tItup7tdpHeYEmsvN2hppvAtEocTJt0g37zV1YwxciNJ2M5iS7yMyyqH4XjNG4Sx6aMWrnh%2BYgzzkUrua7B0RBim%2BT%2BtqrcMktCxSv7MbIfHSy5q%2B7q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d425693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec0a5772480e56d185b4f40c05a25b1f","sha1":"60baedb50b60c9eaa8bad5447eb6168e60add594","sha256":"44607093190f54d0afd9460d92496b09f03527f7c1066340d4b87164b21dbfd5","sha512":"afbed767965eea153f4ecb3b6a21811c3621bbb940669186e94228ae01dd36dee8637ecbb1a1f12a40aa56d04ce97b8d75688319531c5fc7409639a003502792","ssdeep":"768:q2e43CodfsdzUyTdbAVBinIKrvflOY6KyUdIhQnX7pPa9oOqk0kt:7ZsdzUyT+2IKbpvKhudPa9o40kt","tlshash":"fc03e1f24a54943ad96866f71bc6fb760b77f0817ee66eac8b010ec0e494f0a53345d1","first_seen":"2026-04-14T14:36:39.476029Z","last_seen":"2026-04-14T14:36:39.476029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T14:35:53.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 14:35:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; expires=Tue, 14-Apr-2026 16:35:53 GMT; Max-Age=7200; path=/\nextra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D; expires=Tue, 14-Apr-2026 16:35:53 GMT; Max-Age=7200; path=/; httponly\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwl%2Fq3GZwSfnvqiqAWSTwazU87eGo%2BRBA3M8%2FYzAFK67fPI%2F6hSHXAUp1pyRgLpRXxSr1AmvSisX9jlT0GE2mHutbWb2OVQxwrbyAYCtQnIJXUjn7qT94xaIYJfa6UsoPxuf\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ec3708a0ad5b521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Odoo","description":"Odoo is business management software which includes CRM, ecommerce, billing, accounting, manufacturing, warehouse, project management, and inventory management.","website":"https://odoo.com","common_platform_enumeration":"cpe:2.3:a:odoo:odoo:*:*:*:*:*:*:*:*","icon":"Odoo.svg","categories":["CMS"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Slick:1.8.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Less","description":"","website":"https://lesscss.org","common_platform_enumeration":"","icon":"Less.png","categories":["Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PostgreSQL","description":"PostgreSQL, also known as Postgres, is a free and open-source relational database management system emphasizing extensibility and SQL compliance.","website":"https://www.postgresql.org/","common_platform_enumeration":"cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*","icon":"PostgreSQL.png","categories":["Databases"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":224986,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (325)","md5":"840d25b386ee15209f4f7ab5d9bbe613","sha1":"029035bcba7e84f11ba93709fb303b6a6890abee","sha256":"5c0ba99d7a97a718fcdcbf447894baad4e46635c6a1b15860dd7da66d1c707b5","sha512":"ae3d290756c1a128694c8c3f409c934ba0fbe4858a7172403738608c27c4c66b821b65d713fd597ee1a46dfeaf61729caef648cad35b17e15852f46537911e54","ssdeep":"1536:8T9DUt+1Qrz7yA6DUCF7HrcsO3hQxlvyJeeDR3x/Q:usz7sDUCposO3hseDTQ","tlshash":"ff2401b125f96173019381f461702f1aefa1a943ca5ba90a73ed0b94bf97e82cd0753d","first_seen":"2026-04-14T14:36:39.539765Z","last_seen":"2026-04-14T14:36:39.539765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":59,"dns":44,"connect":1,"send":0,"wait":415,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/WLBz2621214333.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/WLBz2621214333.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 15:35:31 GMT\r\netag: \"237d-63f29384c56c0\"\r\naccept-ranges: bytes\r\ncontent-length: 9085\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGKq7aqoYQzt9Xe3PLoTpVzGah7B%2BixSda7A4gKJ2cwGesfhzOst87oYZtDkw9xyYIz%2BxmSOeLqT%2BAWw8rCqhEeaNFjF34554imbAY0cVgn9w6MB%2FtbXCqdNAX4GoAc%2F47O%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e5d305693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x400, components 3","md5":"e155031eb62294520c22550be96aa6f4","sha1":"5a1427c0e40d856ebe2af0d3d0d5853a205898ad","sha256":"3a28b86ebd7afe5ee1444a10af59ca2ae60b8e45719c1f9299fdfe0c12f3621d","sha512":"8659192488bd556409b8d3f10df91263a6bb5e6dd09d890cf289dad0c6827dfa49cb1ff499b0bef6e6dfbb754c414c5f01ffd6afacfb7eaa847951e94d536447","ssdeep":"192:mXEJGf14yadaYkX+GoBrDvvy8mLQLWgomz:nI146X+DC8mUKgoS","tlshash":"aa12af1623192088e3087a3b9371f1a536825c51eb0edb7835d17c15fd1ae784ed75c9","first_seen":"2026-04-14T14:36:39.477935Z","last_seen":"2026-04-14T14:36:39.477935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17538982242524020432.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17538982242524020432.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 17:57:04 GMT\r\netag: \"1b6c1-63b29409d1c00\"\r\naccept-ranges: bytes\r\ncontent-length: 112321\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjFKabxOeZ93lVNRNVQD5OthtyqP8yrxIlOQqlzzVrpvgfHnb2elYVQrEEcLs0FfNG%2BHzi%2BxUHnPuLVr%2FxIwWzS11S5b27Q0SoTY6VYWShNuf5bcF00wpdnDkHdf1hyzf1Ni\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d535693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"d3b36265b0b10063f118e0a73fa99bdb","sha1":"17b3918c88802192b8e11d91347a968e03688cf5","sha256":"231d1b08581a56a0ee4c5b4749d3ee16d59976c595da88c7b6fbe14c8c140a54","sha512":"43e5de87014cec792e6b84521268eae2d2cb7538176c623d12133f3f2e29ad4f70ba1bcfc036d44b18ab2b67abea189edc9cb85a35e89f2eb16a912125e91a93","ssdeep":"3072:qfiTfIxMx5IXw4nIAM0QL5K+2DpO2JR7gGMsQyFyWmFgrn:ImQi8Xw6IqiEPA2JdrMiAWFn","tlshash":"09b302755b000ff0e80b96f2f43c5fa479020c5e3a66ceecaef8669114e7ebb9445185","first_seen":"2026-04-14T14:36:39.540636Z","last_seen":"2026-04-14T14:36:39.540636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582985285193147604_orange%20(28).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582985285193147604_orange%20(28).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:15:28 GMT\r\netag: \"d098-63f29c72ba800-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 53135\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2BJ9KC4rQ2fcFkHtK2lNx9VCjP79k21XCHcIJKS8TbrxJIEIBSOFfhfC5GwopoJGW9fDghnIc7QON3qML%2B6GOMUvvvy6lDtE2N5Uet1Qo3wxTtlsjwPlYx6%2Fs%2BZGmz4ezJrZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e6d395693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09728cc68f0a61b9814fabcf99556f3f","sha1":"4a148de4f6c980069fa6d871c94f025107f80ce1","sha256":"dc3e04783ee7b295a2c29bb308e13b6412d93b686b6c38660b04f672599ec471","sha512":"176ca69e639da6bdf9f2d0d310d577af86c76b859048912fcd7e3369881bc5eb16aac2e48ccb3e7eea1ff6a6269c1fcbc9883e2da1449d015e3107964b156ec5","ssdeep":"1536:5cXHUkNyXPqfNo7kg60jA/dwUdwRPqgKd:5cXUcMAWQnX/dwUdMq/","tlshash":"1b330247b0c2cdc3f4d2353c4b859e52ad1bf3942274aca6be4b4a5c6a67dcd06b5704","first_seen":"2026-04-14T14:36:39.517235Z","last_seen":"2026-04-14T14:36:39.517235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":839,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539064062009849916%20(2).jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539064062009849916%20(2).jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:13:26 GMT\r\netag: \"6ea4-63b2b284c8580\"\r\naccept-ranges: bytes\r\ncontent-length: 28324\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4XsGfqCgTzEhYpak4A6kmRhvAE7SS4KQJtxMnO1KBHz8vSUX3I4GP7u4izON50J6czfWerehMM2YSNIx86rrMBnEtGmaVfrdrnWJVbnFii5Zm5a4X5jAfZWLJAj0jOZKWA%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f0d7c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28324,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3","md5":"e6017453b1a25efd48b3ef7e5e4a3657","sha1":"a0b119e4e7215d919ef695c74c21eee96c21b2f3","sha256":"70fd1f54f7dbd3ebbeefa86e50f8d307c3827a24042971efe0a332744bd59caf","sha512":"8ba508bab04dc270d1d6ccf4864bea7cb70d855de8472e723a844c3b5ba1449431f3f2c18f9c68ac9e8e34b27a22e0320d2eb110ec024aff7be6030439d35760","ssdeep":"768:wtCGHSaZ6JvimaFwRHvA9xR2vbZHkR+3biZD2Uai:P0SakXaF8PyxR29HkR+3bidii","tlshash":"d9d2d028058ecc49f1654e37f9c34e22d2470b566a24f53576dae5ca25fce38ac36d88","first_seen":"2026-04-14T14:36:39.501874Z","last_seen":"2026-04-14T14:36:39.501874Z","times_seen":1,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/uploads/5577528502_7Yiw2RSQoy53TD015Zh3XOCcgMYAzJr0he3gdc5C.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /uploads/5577528502_7Yiw2RSQoy53TD015Zh3XOCcgMYAzJr0he3gdc5C.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: no-cache, private\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPyt8X2PcUFsvKneTQEoso84VgsCFekt%2BSZNbQPfa%2F0QY0dU0QMVdXV5ZsnyGYv4WoN%2BgQSP7SFSmbET5iuWSKpJStYCFMiKrhymAYlbibh2o1JMEAQb%2BXkwSv1zYtvwtGkT\"}]}\r\ncf-ray: 9ec370964de15693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"be39e8e2d48de411ff2011928a0c37ea","sha1":"503ecb289e450bc4d6a4e4f99426f5a186705308","sha256":"a698e81946579e350e6e1fceffcde31e7fbcd9e611a346fc69efafc400d5a0f3","sha512":"f133d16f9b3660d6f58a341c910f37c28d417872cd496b8275e561959f1647b1a16884709efe14da2424a90a656fc6d0cf3ee5d42f9fd82fd848e86696daedab","ssdeep":"","tlshash":"2f119c7610f0142b019391a13be0a31b5f95da43ea078609b5fd82856fe2e87c9c3a1d","first_seen":"2026-04-14T14:36:39.516256Z","last_seen":"2026-04-14T14:36:39.516256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17743385331764263112Pnf266NkeXd8lYDw3A0sbsPtIbV57su1l66Ca5Sm.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:55.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17743385331764263112Pnf266NkeXd8lYDw3A0sbsPtIbV57su1l66Ca5Sm.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:48:53 GMT\r\netag: \"95b8-64dc06204798a\"\r\naccept-ranges: bytes\r\ncontent-length: 38328\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:55 GMT\r\nserver: cloudflare\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuFstCbdUB9qYHt%2Bmaa8ToUzjZY4Q2zJxv%2BbiDDNw%2FSdECAaNKyXegXp43lC1mYyedGtlqroz3jRqptY%2Ft2u746LK%2B8pYCMP12208J8FALl%2BBWSlJLUf%2BCauDB4kZReM5F5X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9ec370982dea5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit/color RGB, non-interlaced","md5":"8d36f73c3569ba6dc874b39a9954775f","sha1":"afac51950a37c5dd17244078e38f1634e132669c","sha256":"84be06f741ee8a5f9e3496afe5e10706ad1ded0b9d1bb29fb1abd88cf0932db2","sha512":"fce2d4a4dd4e7c4cd05cc61b19650ef06f1cdffa8e582e1ca5820fc1778a56b794abce25206fb0201f712637ac2b78515c8c77e09ed2e022e270d2f27211ddc4","ssdeep":"768:6A6qD0//277xadoWfJpX6HFNF5KWNz/FR+v/SHvP0e1i8R43glEsqtMMU7Sx1/b1:iGxadoiyFNSW1L+kvP7I8RYttVLb1","tlshash":"6803f1d112b89ef3ea51bc3274aac25b16dd4d474743b6f05b02c4653170bd535be8a2","first_seen":"2026-04-14T14:36:39.470021Z","last_seen":"2026-04-14T14:36:39.470021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1753913243iphon%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1753913243iphon%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:07:23 GMT\r\netag: \"25d4c-63b2cbfd0dcc0\"\r\naccept-ranges: bytes\r\ncontent-length: 154956\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46NnCegBkvR7BYABhUS6XFvDQPM6Is2rUAs6PA%2BXAbfsKejllo0%2FskvCJyf76hel7WLRTSk78jAF0tRQ6CsOj2OiCX7kSHbB5wzSOTs8UOpl1%2BDTYyZlTyxCah9Ds3BduW9l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e3d275693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154956,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=954, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=969], progressive, precision 8, 969x954, components 3","md5":"f1a5af1b3505b8d29f7252177cb9fa42","sha1":"eeb5a0d7aace83506e7565d29a91c6f06a649cbc","sha256":"ebe8beeb367c8d1d2cca38b805959becf3d090e047d52c4967930265df4eada9","sha512":"1f0e903c951e14f84b4531ffbaf7a5427c0114c1ced6579c8e034ce4a272f7f60a2458751427e06413b8aacdee6864edf40816b5d2ddc3f0e46e854e5b65b13a","ssdeep":"3072:TDptoCvYMvVUHRKu4rwXcdOD+X82tzyUWQcPZkGBLV:TFtoCwMdUH2rTds+vtzx1cBHLV","tlshash":"8ce3122a7b61ca62dc40627c96b1c7bfd203c7807533399776cd880a3778b84a9d7b49","first_seen":"2026-04-08T13:32:08.356143Z","last_seen":"2026-04-14T14:36:39.541468Z","times_seen":2,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/3eSM2264251954.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/3eSM2264251954.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:20:31 GMT\r\netag: \"21745-63b2ceec8c9c0\"\r\naccept-ranges: bytes\r\ncontent-length: 137029\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkYyEg9CRoZfr1FtTZ%2FLiFaMLGQYq4C5r7K%2BLnMkQWoJUsSh9sBKg07skabKaZ8So2nqrw27aobeoxgyGntX3svWWYPGuG5esWAS2NSfnQFmNoTDvE1a97wexlhWt6aHqOV%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e4d2b5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"bfff7af75a80abd908085d06fa3fbcc5","sha1":"bc87b39a85fe58c9a2d08c59b4d3a6d9fdd177cc","sha256":"1aa0a7c0c9853549502b40ba361fb79ca5d316098786861d50866a7c8a3a12f2","sha512":"67fae68e4b3d39e80377a36b650b293688cf2b9fcd76aab9947192d4b3a5f0197b03b56d3b14bc5454a3c66a67d4ad358ce0be9cb2d060f8355785d9e67e586d","ssdeep":"3072:PavAOGbsvIyqfWYnBFus/+LFQfA3gus9lsVVgiLk:Pr1sAWYnalqfwsK7Lk","tlshash":"ebd302a46f74d0a1001a2f72d6f08ef6508e28fbd81ab94dcb4d8dc0d74bd5c75a95e2","first_seen":"2026-04-14T14:36:39.54268Z","last_seen":"2026-04-14T14:36:39.54268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539148672162164399%20(2).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539148672162164399%20(2).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:34:27 GMT\r\netag: \"1b6c1-63b2d209d22c0\"\r\naccept-ranges: bytes\r\ncontent-length: 112321\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xV1ZCyYWAPFYRWMV5F29UAF1qePRpU1FuAIqgJdlqW8%2BzqK22rcXonNeJIORY0iYUVI4286ZOjeBOvmj2ARFoeCAPAcr%2Bsf1JTUXDtQ%2FjyrPEr7d4FdRncGE9ES4qKRef1vc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d4d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"d3b36265b0b10063f118e0a73fa99bdb","sha1":"17b3918c88802192b8e11d91347a968e03688cf5","sha256":"231d1b08581a56a0ee4c5b4749d3ee16d59976c595da88c7b6fbe14c8c140a54","sha512":"43e5de87014cec792e6b84521268eae2d2cb7538176c623d12133f3f2e29ad4f70ba1bcfc036d44b18ab2b67abea189edc9cb85a35e89f2eb16a912125e91a93","ssdeep":"3072:qfiTfIxMx5IXw4nIAM0QL5K+2DpO2JR7gGMsQyFyWmFgrn:ImQi8Xw6IqiEPA2JdrMiAWFn","tlshash":"09b302755b000ff0e80b96f2f43c5fa479020c5e3a66ceecaef8669114e7ebb9445185","first_seen":"2026-04-14T14:36:39.540636Z","last_seen":"2026-04-14T14:36:39.540636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/uploads/iphone13.jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /uploads/iphone13.jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 21:02:51 GMT\r\netag: \"2d394-63b2bd906d4c0\"\r\naccept-ranges: bytes\r\ncontent-length: 185236\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWsiV6n3LgKF5YjDQ3rjR1gPxRd8Hmv3rSvzbNuzCihQZQl2PDkFB7qaUbv4%2Bv6d64HEbEEJOs3IWqp4OPr91DvGjbrOT8VMN58%2Bjn%2BOCDDuXAlRhqGwRlQtO8jm%2FsKUfvyT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f0d7f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185236,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2216x856, components 3","md5":"a6eaa0cb7ed9b41280184fc0c7b1af68","sha1":"07744d1240f8cd3786b0de70983bcd7f318b7d15","sha256":"2805e76a15184df1dae2ed975b9c520a92b6b78876824b805e4432b374ca41ff","sha512":"a36c709cac6f8dd0bedbb73ce8e919488fb4afc4a25e241b693676a4afc1b40c7450c9b8db8ead4f5cbabb3ff18371e67da86d2bb776a278eeaab87998aa8e1f","ssdeep":"3072:PhZkJMgbrzNsFIRcL8fyVOwHxk1vmDI06+O2Wjul9IAKjw+VNbsw:J4XzSFIRco0x6vC8S9Gjw+VJsw","tlshash":"990412ae15fb0c520bff7a9414c24a541f8574201e6afafc0ac8acedd0ea2b794d0257","first_seen":"2026-04-14T14:36:39.543611Z","last_seen":"2026-04-14T14:36:39.543611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539055032564615746.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539055032564615746.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 19:58:23 GMT\r\netag: \"113a-63b2af279d5c0\"\r\naccept-ranges: bytes\r\ncontent-length: 4410\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2BywVFEpHjcx5qMzeK9AeH5kJeQ5YdyhX0Y9w19CTO3lKoOrpAvXmTaBJxjkSePTJJSDgk7D%2FX4T3EDbpMHBCPhn0V0bjL3BrToPjCM2264kfMHzHgv7Cu3FSeb%2Fh1cdezxy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec370900d8d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4410,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"bd95f576bcbdb82c35206ba06c374266","sha1":"3ecf00f2978cbcd7950ef12b0a80f6568ff7c41c","sha256":"5c74927b495c677582d5d7f4a02dca5085ac86dede9bdbb1f01d409d2e4d4f08","sha512":"bc50e6309040e33f9991286fc981c8fdddf0b77853a600d71999a5d717c22090e9c5acc0de5ce8be394bb22c20111ce484d4f5318503c64280aeec799de11f0f","ssdeep":"96:vGhHuDimhHqz6Ea+5Vj3fD/eT5qKdtcD5utI184wj8sBXSRMkhYYUb:6HmxYj5Vj3r/ireDUI+4wHCRNYdb","tlshash":"9b917ed30d8f29a6de44c3f210a2293be38a73189270a422ad124719fef3823157f579","first_seen":"2026-04-08T13:32:08.409898Z","last_seen":"2026-04-14T14:36:39.488858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582997683851888496_black%20(23).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582997683851888496_black%20(23).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:36:08 GMT\r\netag: \"aa64-63f2a11148e00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 43518\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFuCL697sea%2BCvZ%2FC%2Fqdb%2BJk0ueniTwg2tIjkwdLgldlwsdVf6wRfo%2FpcrI4uEXbjNva%2F6BvdI3fRMRVI%2BLPygYy3fnyQil%2BfZ%2BwczVxlc8yJGI9pYu14cxet7HdRDZmXAHS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d405693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43620,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a6ed62d166bb01749b6ef9c5ed0f9a9","sha1":"af04bc62e4c079e4df18ff1248db77f5168fe093","sha256":"5e711097441e629fcc4da4f193e78d73662ba342621c30ec47b4bcc12a3993bc","sha512":"372e9c31afbfb2c79002c3b1728e348127259e6b12fadb5895b2463f4dd2dbff7c6191598b3eddabb29e0d5a094191312ed3e6e0eae82ed261f89e8edbb0a8d7","ssdeep":"768:WGfap0LxAUbZ3851a2JOMfqN7cIBEpVudr7+kzvgBsQ+ruQxTZfgCm6wM3wvgq5r:WGhbJ8ra2JOMfqNo8YgXsaBNx9fgdnb","tlshash":"b813f25aa710c919f6e78972b3ee87de65ac6020f9c0e034dd271f84f0121d386a7de5","first_seen":"2026-04-11T04:40:33.576531Z","last_seen":"2026-04-20T13:14:14.908989Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":964,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17540851362176433441%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17540851362176433441%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:52:16 GMT\r\netag: \"85be-63b54c56fe400\"\r\naccept-ranges: bytes\r\ncontent-length: 34238\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOhRsVYSnAGQMX61d7V7YCXT9qX%2BAzu1g29je7SfPin4H%2B5e%2BLuiuf3Eu6mSQTpk7zLhAu37THoSRDKno%2F3pJAISI6zpILhGqo8G6J%2F19pVLTlO9ZjipxkY14SPGXWvgqSCL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ebd5a5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3","md5":"7d259b517e19abba51519d291ac23060","sha1":"0b71ad4fa3138bda3d498a1e03422b8a5b376642","sha256":"5c5ff7444006cdf9b7342981208384845fa05b299fd600f88e2c7f6868ec949d","sha512":"8c7cbf3aca532d61bfda616e7d275839d516129a818031f25f3aa7186b540772a5eb8816ba1dcf29386ee843e9a1cd9ab27ebb5fa53c247d356b5d2c0754f27e","ssdeep":"768:WNFpiFeC8SzvaxEoEr7H0KvnG1/Ewb01zbsFHBNkePez3:eBC8SWEYQgT01EFHBN03","tlshash":"39f2e1e035544fd7e7523378739234ccbd94af1678cda391a6a0bea02bd78124c9ab18","first_seen":"2026-04-14T14:36:39.544508Z","last_seen":"2026-04-14T14:36:39.544508Z","times_seen":1,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":626,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1753913222iohone15%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1753913222iohone15%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:07:02 GMT\r\netag: \"16c01-63b2cbe906d80\"\r\naccept-ranges: bytes\r\ncontent-length: 93185\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxlSXw%2FAOpcYftEnSHGjzQSOq22qe4URTUmvybDGByblUlw33cbJMkVuIM9scI0SfDqm6CMXcCk1ecXMMalSK7%2F3K%2B1o8JcCA0OTKapEo%2B%2FpxQRQ5bZwKID%2B7k5cReeOaE5i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e3d265693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93185,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 969x954, components 3","md5":"cd06813c21176c668fa1603584c22e23","sha1":"5e01d1ee134d728287afc7ed4eb75bd5c629556d","sha256":"75d0a64aff938cbb3e6b34de3c94648919ec99fdcbfbcb45b657fea7e94a9cb6","sha512":"c5b8928f9e9134ab0c8cbc38e158c6cf2a89d48ee2411d51b84964f2b7fd94a4a4649f2672dc60c6ac8ba38dc53640ddda076e5f53295d5c417f6a804c0cb91d","ssdeep":"1536:ljzIvXeLjKCRWxJCiYPjOMs5QnXhx6ikN4ohDmy5hoCCn1LQboeMIUD3t7O:lAiG7xUieSQXH6iqhi+oCo1kboqURC","tlshash":"9493ce4b298be127b54bc2799a61305c35135a1022c38771786c7bbff77e26f6cae814","first_seen":"2026-04-14T14:36:39.545282Z","last_seen":"2026-04-14T14:36:39.545282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539010951727303755.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539010951727303755.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 18:44:55 GMT\r\netag: \"4647-63b29ebbd17c0\"\r\naccept-ranges: bytes\r\ncontent-length: 17991\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zBqap7R8G%2BR7c7zMxogf0Zruv76MAb%2BLsE%2BbGP%2FfI7e4trJ34rD3XtdKe1pl9kjeb6L9Hx9CYDCyA%2FduTgrckkC6dgqQwF66AsKFxVuJDNTCib5aPlt18XAsFW%2FEzwoRNEY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708eed705693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17991,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 380x380, components 3","md5":"67fd5fef94f59ca799a1d91b8e2d8d9e","sha1":"37e1bffdb2f046d631c531899553160664928b7c","sha256":"3d7f11b754c1a29ad8cad85863e2469bca99f929cf6431a66203ead0e1ce4ba2","sha512":"b293252cbf411ea8a6737a6a7648e32f9ba9143b1f7652626b8e65e80fade02cb456b81daee76ec4dc0dccbc1aa95e8dff13363d6be4b8b0e6c7916b2037a0e4","ssdeep":"384:Z9YsqU/379ny/YqME/rY5Z5FmCWO+nI2wWaLXEmlU:ZRv5YHTwZ5FmCv2wWaLPU","tlshash":"af82d0d2b0c984d37a2127b0aa51132beb04a55a4bec3ed4f184d5ce8d7b5905b64f2d","first_seen":"2026-04-08T13:32:08.332676Z","last_seen":"2026-04-14T14:36:39.530221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/rrlYETADn6kPF6Hx1iUrZWYI7HOvLJMm9VN6gJD5ovRq%20(1).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/rrlYETADn6kPF6Hx1iUrZWYI7HOvLJMm9VN6gJD5ovRq%20(1).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 26 Nov 2025 15:58:24 GMT\r\netag: \"90547-6448177582800-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JiDZxq4yAW8aPGF1oSRLBlVpz44wLrHJvZmktiKzdjToWWp9Yxw4Ea%2BOUFi4W4CwJyezzMub%2BhTnv3R5iWtEaPWHyaWNxHoSgH7mVVTg86EEqoV%2B7UTUG1CBlBL71hocwSg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ec3708e3d225693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591175,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 2600 x 1200, 8-bit colormap, non-interlaced","md5":"f51c9dbf6e6928985f50a197d497588c","sha1":"e5e6c3d2a65e1a8f0ae6cde8f2acb123cc797bfd","sha256":"32c2e9c2be0a96205f534ef431cf4e0b1f0a5000e7bcf67dc56bf84f7331021f","sha512":"2b598ecbfe3d501d71f84d3000bed4eab34e3d1245811d9cc45c300f1aad26da59633c774bd7e942c67e2b8f185ef7d70fabadcf4d765091c1e07d81237d4ab0","ssdeep":"12288:Oywjc0w74anoBoDRjJ54mhkiaBJPA+RmjPWSqDC7eyADxo7yCcP:Oykc0OGBoDl74mk4j8ueFD+7yCU","tlshash":"ecc423eb28cf3ab69b38531c7e94377f49c0019820cb241c68eb0653d9c65dfc6b8699","first_seen":"2026-04-09T15:36:59.666373Z","last_seen":"2026-04-20T13:08:03.893693Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":623,"receive":497,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539147822274444982%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539147822274444982%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 22:33:02 GMT\r\netag: \"1a74b-63b2d1b8c2380\"\r\naccept-ranges: bytes\r\ncontent-length: 108363\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teD0JXHIwGF5o7xyzq5b43XHH4xe%2FSYo5cSy%2F2rXnFabV532d5uIYR6VXdMp1YcmGWeTOLrauH584LL3c0GslgfmoOUd6E%2FEzKCL2mKpXTDCL9iCDRS44W2WypS1eLMonz4o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d4e5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108363,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"50d578468974adf12535ddd39e1cf71c","sha1":"e28c2d31c38a9c53b94b761bbddfd169a56e91da","sha256":"38b2a1fe32dd17dd85f09fe076b87c825baee0e87bb28a45e6498c46705d5afb","sha512":"879454336c9af1930165b79f515fa86850fe4d4c30d8035fad6f8e214ffbd8f183ef2bcef4d7f0101a8c1eb94cf309c7270355f7d0e2295b93d82d6707a1d75c","ssdeep":"3072:NH+0D6ddFkhD9qWf84sSwd3p2UFLz0wSdvfMw:g06d6x9qWf84cr2Y0wSSw","tlshash":"44b3027ed2a82241ec47ebf68249cf2a634ac3f7333e6787029367b146974955c45a32","first_seen":"2026-04-14T14:36:39.518318Z","last_seen":"2026-04-14T14:36:39.518318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1754308166WhatsApp%20Image%202025-08-04%20at%2012.14.51%20PM%20(1).jpeg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1754308166WhatsApp%20Image%202025-08-04%20at%2012.14.51%20PM%20(1).jpeg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 11:49:26 GMT\r\netag: \"db5d-63b88b30f9d80\"\r\naccept-ranges: bytes\r\ncontent-length: 56157\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsKgxKfiK1Fx%2FEzZgqEMh%2FofAhpeP1rVTi1ovozyJXbFxC8Tz6V1Txi9Ow%2FOdbAipuakzFcJlRuJwe3x2nxd8GBz6%2B1np49C3WQbZZYAfzIamOq8%2BckRnqZvcMVwTEcglaZE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ead565693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56157,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1192, components 3","md5":"ec972ba29b6f5f043aec47a697508099","sha1":"7c469eba8aa94b4eaa4985cd6787b483462e09ee","sha256":"2226e839ee84f329476189fcaeaf16cb5b44ce42e88c896bd9f2ebb45926ff3a","sha512":"2a81591ad79610b02c7afcb0ec581bd688ae28a14e74125373151f61fdb6980dbba16485ee4f793e72b8d5a9b64bdc649165468a2c7b04b8708761d998f1d720","ssdeep":"1536:/8IEeUv8X9562SsuK9ukztjLmg9TrzZtXqQL52aPlGPNL:BIvY9o2KYLP9TJtz4R","tlshash":"1f43d0e695e118a9c4d893b58c172223ead0ad8cc1ea9537e1d11c762e1f7333d81ceb","first_seen":"2026-04-14T14:36:39.547142Z","last_seen":"2026-04-14T14:36:39.547142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":748,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17540852682178023288%20(1).jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17540852682178023288%20(1).jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:54:28 GMT\r\netag: \"7a57-63b54cd4e0d00\"\r\naccept-ranges: bytes\r\ncontent-length: 31319\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCDqwEnCXMnEv2Mv%2B%2B5%2BDH4KekFP5fm2uIx%2BsNOnWeeAgqZei%2BkLQraDRSt3T38e0t1gjm1yGYUZQb7zz4RS90Nayg7bX2ruwG5YRgrrVHAyiskes0frmMAvdJKQ9KS%2BFhvA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ebd585693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31319,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3","md5":"35815923d1b5ee14527a0a2d582c6732","sha1":"4aafc360b8b611be97c8087b637142dbd637e7f4","sha256":"6d8222ef6bc3f61c2f5e1a5ca81eb18ac8a129fa35d72da75d4833d7ead7e535","sha512":"ec0147498e0c27bfe37847d0777e455c54679c2ef882c38c3be71604f88594a9936145eef4bd9003c883bb0047237aa8c07059aadedde52ae36d5229fd1ea064","ssdeep":"768:2GuGEycUWus+A1qURoSv2xJXp5nKIcPFKRmrUTxpRHDFx:mutAFRoDxJXpsZGmro1b","tlshash":"52e2d1b0ab589c79c9706e7d429b360fe3bea1d131c06b962c66378c07e14d7478e297","first_seen":"2026-04-14T14:36:39.494825Z","last_seen":"2026-04-20T23:55:40.717097Z","times_seen":3,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/js/bootstrap.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/js/bootstrap.js HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"2390d-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 29621\r\ncontent-type: text/javascript\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuMseWzsb0ACAzGeXzXSyJZaiYLRioAPVDRIO6StNFVmhMjPhyR9IE6ykzElvmSF%2FtOEid9eX21DjwxqsJ1rU32d4D8%2BSGfhfC28LuZHOoPRbjpW2Ae%2F1flvZLVITzJ531Zt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ec37090ada55693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145677,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (620)","md5":"565113dc4ee4110c542c2c5e3ca0e8a5","sha1":"46f7f7b8d5b48c3e276e34fde25008f95be9f6ac","sha256":"2c4265c7d6c4deff87bb159422d0d4c842f8cab5edef1a76774e7c31a7f18f62","sha512":"90ea152af7fca040d1c4a97d14b5da4f94697a189750f197238a7f9fcb8a34ff139a5d2fdf5567a4064d6e931500eadbf3618229e10136c94d9db38867cf5979","ssdeep":"1536:8dv64JKF0vIAsK/NfPlWyO+J+ppSQGUl7hsg/ohrw10/Mm7V0b+Q:8yI0ZpEQPYf/Mm7w+Q","tlshash":"08e352093efa2463456be46e4bab4156f225408b350ade987d5c0bcc1fe983051ffbe9","first_seen":"2023-03-10T10:42:20Z","last_seen":"2026-06-28T23:41:27.577603Z","times_seen":8,"resource_available":true,"data":null}},"time_used":744,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":645,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17582999341431597871_white%20(20).webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17582999341431597871_white%20(20).webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 16:38:54 GMT\r\netag: \"9692-63f2a1af98380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 38437\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5mPR5qbIha2wfn9cyO%2BMzJiC5UTt3TllTYBcjkaAYFwlzHgAhYpLcyll2FDQmosb%2FnwNMUVRVyH3nX2C27BF99mLeQmMXDwi7sO%2BySpO%2FYx7NsrIE5UZoEFzxTXE%2F69TdAC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e7d3d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38546,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec0a5772480e56d185b4f40c05a25b1f","sha1":"60baedb50b60c9eaa8bad5447eb6168e60add594","sha256":"44607093190f54d0afd9460d92496b09f03527f7c1066340d4b87164b21dbfd5","sha512":"afbed767965eea153f4ecb3b6a21811c3621bbb940669186e94228ae01dd36dee8637ecbb1a1f12a40aa56d04ce97b8d75688319531c5fc7409639a003502792","ssdeep":"768:q2e43CodfsdzUyTdbAVBinIKrvflOY6KyUdIhQnX7pPa9oOqk0kt:7ZsdzUyT+2IKbpvKhudPa9o40kt","tlshash":"fc03e1f24a54943ad96866f71bc6fb760b77f0817ee66eac8b010ec0e494f0a53345d1","first_seen":"2026-04-14T14:36:39.476029Z","last_seen":"2026-04-14T14:36:39.476029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17538983232630185166.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17538983232630185166.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 17:58:43 GMT\r\netag: \"18c08-63b294683bac0\"\r\naccept-ranges: bytes\r\ncontent-length: 101384\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcYHlV7XgGZ0nu3HiLr2iFPsVjUm4YCcQJzN7nx%2Fmn9kfLDpEoxTsg1i4coCsm7%2BffVHg4tLm0ZH8SrR2UTe7v1OWaoV9AsB9z0FdhM0iOfzNKx4ug2uHfdLyNmTav4Wnzli\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d505693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101384,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"76d712e9d732eb2b7954a2c5287f01fd","sha1":"ee83416b25cb1d87ba9f2f3e889ce06a8e921b79","sha256":"85907aef3005008bbe9b0e9a837f510d76d19cea5d6c4f75e0ddca5e7a24cbae","sha512":"ee9136eff2754746dbbeb17c1e11a7d5e1271a3aacc62055dd6570b6791c864387fe4cd206defce17f386f0b8fe301c30d09985579eb82278e45e448e5efcbcf","ssdeep":"3072:Mj+230R9Y/hKGchaXfZUwWi6OfKQvmUQ/Lgw:a+m0XSkjGKwWi6ajvmNLgw","tlshash":"a7a30236df2eb0b2cae3017169923d55f92a50a777aa4723858200324dce5b4df5ae1b","first_seen":"2026-04-14T14:36:39.498547Z","last_seen":"2026-04-14T14:36:39.498547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17540849092518880587.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17540849092518880587.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 01 Aug 2025 21:48:29 GMT\r\netag: \"7e67-63b54b7e82540\"\r\naccept-ranges: bytes\r\ncontent-length: 32359\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XU1u%2Fao4z3DqxvZKQ6nqhQd5IcimZljg4kD4bqFcUUTuFc%2BiqZTbDfvcyI8%2FfEHJeheApO%2Fa1QpUh3tlgwO0xYCLoOlmkjraKeUR188wQEpz1YWJQTU3vMuLnl28%2FT5ZT4%2Bh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ebd5c5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32359,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 768x768, components 3","md5":"2614e6556ad5a1d2c5a3614f04cb9722","sha1":"582a5e6c6af51d32d2bdf8d8107b7553d59dcfeb","sha256":"053a356c10a593eab562df27d1f4ec9cd2285eec6536aa90e1cb0b57978556ae","sha512":"bfc79ea429ab0df262affcfe592bf969c5f2cbb1e2f5569e307c9a266f568f6ca2c89fd5aea824861f46dc559a3fda7194d0b8aec111ac13a86b80c4d4d54c59","ssdeep":"768:mRwqjvr4x0CiiSz6EoNOMYmpEBfM3b4SRqxG6UK1s:mRl4x0CiiSnefrpsfWC71s","tlshash":"87e2f08ae39a3930ce4fd2bb640d3115a5895c0782dafbd501cf685ebd93029bbc8f15","first_seen":"2026-04-14T14:36:39.491189Z","last_seen":"2026-04-14T14:36:39.491189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/ajax/libs/slick-carousel/1.8.1/slick.min.js","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick.min.js HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 25 Sep 2024 08:24:50 GMT\r\netag: \"a76f-622ed5b065880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 10442\r\ncontent-type: text/javascript\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3QcVnX7ZpUHdYyawriURR9cYt4qo2JttyKuvpNgJt2mGDnbcUyENY%2BJUs2UZWVT2j%2BIMG9jMAJf1ywLuc%2Bvsd%2BlkD0Dh9WLCBDRON5YoO99jObdD0T0iVpUf2wJnQcBka9i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ec37090ada45693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-10T16:51:54.684667Z","times_seen":110941,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17538981812687679638.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17538981812687679638.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 17:56:21 GMT\r\netag: \"193ad-63b293e0cfb40\"\r\naccept-ranges: bytes\r\ncontent-length: 103341\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vo3dBe8UpiyOLzDzxL3OPVAEBgA4wHWJpYJnhaiQn2TZMvKRe%2BEdIpXrMPJNwh%2BPipC1EN5BiTmVYj8CUe1NWt52e14dQ8uoaOm05inF2MtIxZjSxL%2FqgAqCPUXz10dSr5RE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d545693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"38ebcda6f4a7bd8166ec59418588f070","sha1":"0fa15e04e7d1b8494f30c0aa4533d440892f6508","sha256":"17bbfa7a412ed6de5fccefd461f93918c3a39537992e63232776dd7fb366ebaa","sha512":"320a43b239c19fadc2c2b880c0b05283fd7c0147890e5257769f394d94d6cca7aa8425b64d0d1e4ba3982a34900083edae885baf06acd0b7ba256f3afdb6daac","ssdeep":"3072:RkLcXM9naWUaFtDpxsgcTh1SHrsI0hIhlO//2:ZUnaWztD4h1SAI+IG//2","tlshash":"e7a301ca3b2da678cdce5e31108b182ff96f140b9a39405c4ed046f675a276b763e41b","first_seen":"2026-04-14T14:36:39.549696Z","last_seen":"2026-04-14T14:36:39.549696Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/1754308389b28decc3-0163-41c1-9634-d3ff9244486c-1000x1000-5pTblzMJI66evw0zzX7GZZtmIavUROq2IX3NXSvF.webp","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/1754308389b28decc3-0163-41c1-9634-d3ff9244486c-1000x1000-5pTblzMJI66evw0zzX7GZZtmIavUROq2IX3NXSvF.webp HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 11:53:09 GMT\r\netag: \"738a-63b88c05a5340-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 29065\r\ncontent-type: image/webp\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GP3ShTxDEMw7%2BWy4PjQS7DCzE2jwR0KDK92T4ZLTMRpnO17v3NPNvHe4UZ8%2B9H87stz2PkLyjnQAF44Cm6dlkmf%2BWg4YrpMuna9g9VqD7quo4UwJBVFCGbw%2BHy%2BpUSPE2xqT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ecd605693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29578,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"68205e8b49c7d5c7724666a29a7d9272","sha1":"9fb936cbac34876f46cfd930ee20e3332594d3df","sha256":"488b2eb5a8acec2440626d52e4cca9c18afb48379e7f48e37ae791c9e7701791","sha512":"52f296c81092bd54976858c80491c2e4e637d0f212278828fa5500e04ddfa367c8e7055c6abef2304c94355e7f64a305af214971d93eb54e9a9ed92c95eed9f9","ssdeep":"768:4kHq5ICPkaoA6h/udbUF+EgSrm1XQ0x5/s:4kHkxPkaof/sbmWp1hx5","tlshash":"e0d2e147936cb55bf02c18f408d3aa93c27594020a931ae57958df7f42e10abb61d8ef","first_seen":"2026-04-14T14:36:39.550649Z","last_seen":"2026-04-14T14:36:39.550649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17743385331764263112Pnf266NkeXd8lYDw3A0sbsPtIbV57su1l66Ca5Sm.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17743385331764263112Pnf266NkeXd8lYDw3A0sbsPtIbV57su1l66Ca5Sm.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 24 Mar 2026 07:48:53 GMT\r\netag: \"95b8-64dc06204798a\"\r\naccept-ranges: bytes\r\ncontent-length: 38328\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i35I2Lql%2F3v0E%2BG00nD%2Fa4xCcZ4Mf1YX9zz3a0Whwb1trQ9FOYJG4IlSKT8xuehzhcCR2Ln72191uLmFBBjL92PpbCwWToFWA99nXFmlYoHDhHN84DY%2FbMiDFEQT9D58qz%2FI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e2d1d5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 160, 8-bit/color RGB, non-interlaced","md5":"8d36f73c3569ba6dc874b39a9954775f","sha1":"afac51950a37c5dd17244078e38f1634e132669c","sha256":"84be06f741ee8a5f9e3496afe5e10706ad1ded0b9d1bb29fb1abd88cf0932db2","sha512":"fce2d4a4dd4e7c4cd05cc61b19650ef06f1cdffa8e582e1ca5820fc1778a56b794abce25206fb0201f712637ac2b78515c8c77e09ed2e022e270d2f27211ddc4","ssdeep":"768:6A6qD0//277xadoWfJpX6HFNF5KWNz/FR+v/SHvP0e1i8R43glEsqtMMU7Sx1/b1:iGxadoiyFNSW1L+kvP7I8RYttVLb1","tlshash":"6803f1d112b89ef3ea51bc3274aac25b16dd4d474743b6f05b02c4653170bd535be8a2","first_seen":"2026-04-14T14:36:39.470021Z","last_seen":"2026-04-14T14:36:39.470021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17538983722605240978.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17538983722605240978.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 17:59:32 GMT\r\netag: \"1b6c1-63b29496f6900\"\r\naccept-ranges: bytes\r\ncontent-length: 112321\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SiwzvIDwIlLgFCb91SRgeuXDcB22%2FjJ%2F%2FKFqslvKjLzzQgw7T%2BfmfXKDQTwF8cVxFGI%2FXa2nhr%2BJ4KBEzrqy29orzWEPGJr1mSfX7mtvxEDKSPtuXhF3rXqMCkxdfnWUM%2Fo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708e9d4f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112321,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x1200, components 3","md5":"d3b36265b0b10063f118e0a73fa99bdb","sha1":"17b3918c88802192b8e11d91347a968e03688cf5","sha256":"231d1b08581a56a0ee4c5b4749d3ee16d59976c595da88c7b6fbe14c8c140a54","sha512":"43e5de87014cec792e6b84521268eae2d2cb7538176c623d12133f3f2e29ad4f70ba1bcfc036d44b18ab2b67abea189edc9cb85a35e89f2eb16a912125e91a93","ssdeep":"3072:qfiTfIxMx5IXw4nIAM0QL5K+2DpO2JR7gGMsQyFyWmFgrn:ImQi8Xw6IqiEPA2JdrMiAWFn","tlshash":"09b302755b000ff0e80b96f2f43c5fa479020c5e3a66ceecaef8669114e7ebb9445185","first_seen":"2026-04-14T14:36:39.540636Z","last_seen":"2026-04-14T14:36:39.540636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/uploads/altra25.jpg","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /uploads/altra25.jpg HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 04 Aug 2025 08:29:03 GMT\r\netag: \"1ca67-63b85e66f31c0\"\r\naccept-ranges: bytes\r\ncontent-length: 117351\r\ncontent-type: image/jpeg\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLlXZRErPOyRsaNXJThyZamOv1ddA9hfGuSfPyB3gmRyuu6lO7BfKO0cG1F3%2FhHaQB%2FQxkK7eN%2BxGD5XklNfJhS3Fx6MkOJIeRwqWG83CUvDuyF2aQt%2FMUmGvVDJ1rGUmfi0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708ead555693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117351,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1001, components 3","md5":"4446dc57c726030422cc1b21732c29cd","sha1":"e58de591d529256fa394a187a20ba961aa2e7215","sha256":"9c29b06edc43fecf59303167e3264514c47129a8f41985d67d4163ab5c001202","sha512":"21e5a3c0886268d91e3200a0b111d3aa1ef6a50c58822d2b2d61daaedcb41e9c94dc00cf71d27bb9283348f3b8331967019d59d404ad63073d15c7a18b8d154a","ssdeep":"3072:xVvSEdmqaw0kdogEcRVuDnwZVAslht2KMKCfIGeGN3C:/vJmtw9oDZ0Zmsl/ZCfT5Y","tlshash":"ebb3027717624eebeba87376482512331641cfeccd9a826e04e59d38b0d3e254f4a4d7","first_seen":"2026-04-14T14:36:39.551627Z","last_seen":"2026-04-14T14:36:39.551627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":934,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connects-ksa.com/assets/images/17539058732605666587.png","fqdn":"connects-ksa.com","domain":"connects-ksa.com","tld":"com"},"ip":{"addr":"104.21.2.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://connects-ksa.com/","date":"2026-04-14T14:35:54.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"connects-ksa.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Mar 2026 23:02:32 GMT","end":"Sat, 20 Jun 2026 23:02:31 GMT"},"fingerprint":{"sha1":"E6:D8:30:CB:AC:9E:60:C4:E6:43:BE:D8:9F:29:0D:62:86:A4:BB:DC","sha256":"F2:86:F6:2B:BC:33:5E:F9:34:9A:FE:00:2D:EA:04:07:BD:DA:0C:FC:80:5A:60:8A:BB:36:B2:B9:57:FF:72:4A"}}},"request":{"raw":"GET /assets/images/17539058732605666587.png HTTP/1.1\r\nHost: connects-ksa.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://connects-ksa.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik05YVUzVytqdkJmVUhrUGRMR1Zvd1E9PSIsInZhbHVlIjoicGwyYmFQOW9KNHhrUGhjS0ZlU0ZjMC9iMndqbzhDak9TMzdwK2F1TkZJcHcvNmF0bCtvL01tWER2b2F1Uk5YcThvWFBSYkZ6dUV2eTVwckhOT3c3SWZSNVRwVUdrbU5talFidTBNdGg1NXFJc3VoMzVoTHgydko2UVRURUJ0Q1AiLCJtYWMiOiJhODRjYjQ2OTE2NGFiZmExZDEwZjhjZWFiMDI2MjAxMzcxM2M0NDMxNTQ2YWZmYjMzZWY5YTdjYTZiMmM1NjlhIn0%3D; extra4me_session=eyJpdiI6IjZlelZMSDB6Y2tReHNqcVdqZS9PYVE9PSIsInZhbHVlIjoiRDhwbmZ4YXZKQnp3UmJMMDF0TzZxNWk4dTlnMU9yN2VmWG5mQzRGTUIxZVhSMWNBMkpidVNuWlZ2S1JqNHVybGFGRjNCTHExcmN1azZXY3pITU1ZdFF3bjE5STRQNXZ0YWxwNk1VR0V3ZVR5UElpN2xMeVMrWWNoc0lmalBIU2wiLCJtYWMiOiJiM2ZlMjRlMTdlODA2MTFlZjMwMmViMjBjN2FjOWVjYTcwYjA5MTA2YmU1NTdhZDY0NjAxNDFjOWU0NDlhZmVhIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 30 Jul 2025 20:04:33 GMT\r\netag: \"1f1b7-63b2b08879640\"\r\naccept-ranges: bytes\r\ncontent-length: 127415\r\ncontent-type: image/png\r\ndate: Tue, 14 Apr 2026 14:35:54 GMT\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEdMplCgwdpfgk1ffGcEvK3%2FFjOsULVvIVMME9PBZAHvGv3InUu7pTxok1GcXZb2aW%2BjRClEfFLxa245V6kXcfxolK%2B%2Bds%2BowdplEBDlgYX4iD8OuYFi8jQ6LdarXdoVpRaN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ec3708f1d805693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"b388b9d5473553c45458c22cf54c49f8","sha1":"8a41e41d5902f4e57e2d2052293486ebaa955365","sha256":"db9abc2bf7038d9b852638dcff2f611115a2b4e5a64de0bdaa5bdbec9028f17c","sha512":"e1eb88847c2085e7bb472a87b1aab0f0a5f88de4762d83d1cb615ca97859c90a427dc3f36a56cc20d753e31f62b5f23ad702759dca35f5ca52922ef370c52f48","ssdeep":"3072:q1e3MH3dwmv1dKJJM7oKi5JlRdCD5Sgwd3g7NbDjRQ+FJA:wHNwmv1SJkoKUJI5Wd3A7RQ4JA","tlshash":"d3c30298b7aae471c85fd3b5608e45d9f7315328728ae449fe2793cd0b01a49d3daf80","first_seen":"2026-04-14T14:36:39.552921Z","last_seen":"2026-04-14T14:36:39.552921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"connects-ksa.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
