{"report_id":"5014913a-197c-40e9-bbea-db632ecc10e2","version":0,"status":"done","tags":[],"date":"2026-09-05T04:49:04Z","url":{"schema":"http","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"ip":{"addr":"54.168.99.55","port":0,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"title":"タダデアイ","dom":{"size":11315,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (480)","md5":"a10eca56b58329a30295fef20912407e","sha1":"f69eb20508613a1a9eda23d32e2eff580342a530","sha256":"140898f02cc9aaab56d8aaef5ec9e5b072a8b013a3fb62ddf2560cdf848012d0","sha512":"d0a24136339a6f7675a2ad535a18cfa1252788e527aa02b4fd91aa22ca164b869e663c625fd833203117db7d3210295b1d28a7d6ef25ae499336ef6f18f0f9a0","ssdeep":"192:IVLMWiV/dejgMdp4Rssv7Mn/Iwj3lxyB4iRjTdy7UQkLmqmg6:sLMrxde8RJjypkPs","tlshash":"5f325426c944cd33055262e5b43bf71c80ab6e2edb52986d55fd812bb680fd8cf03a6d","dom_hash":"domhash4383c83f740459452929dfdcaa4a4c56","first_seen":"2026-09-05T04:49:15.78478Z","last_seen":"2026-09-05T04:49:15.78478Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"ip":{"addr":"54.168.99.55","port":0,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T04:49:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.hm99-free7apo.gift","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.hm99-free7apo.gift","ip":{"addr":"54.168.99.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2024-07-10","domain_rank":0,"first_seen":"2026-09-05T04:49:06.66976Z","last_seen":"2026-09-05T04:49:06.66976Z","alert_count":1,"request_count":1,"received_data":9017,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-30T23:05:19.421151Z","alert_count":0,"request_count":1,"received_data":6560,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"coffer.info","ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"domain_registered":"2022-05-06","domain_rank":0,"first_seen":"2015-06-23T21:23:10Z","last_seen":"2025-03-28T13:41:40.502774Z","alert_count":26,"request_count":26,"received_data":3343927,"sent_data":14395,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-08-31T08:43:22.767816Z","alert_count":0,"request_count":1,"received_data":87643,"sent_data":508,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-08-30T22:54:14.488664Z","alert_count":0,"request_count":1,"received_data":551,"sent_data":951,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":2,"received_data":870418,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/js/wow.js","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"e99e8ba7f607d82d6b952918282d2fff","sha1":"0f4ba04b905158d6d1fa30be6f12d92cd7837347","sha256":"9c9da3742b8945678f7b8832f25355a6eba9af8b010dfc077b9309bae0de7688","sha512":"12d40cd31acefe017ce1b90970feab69c47681545a1dbd0f23114d734aa58d86b228283f040c167e517128e8f19ca369496e7a272a26c3c5ef23a9a9d4f12d5e","ssdeep":"384:i0eg5rUHJM+rrWgRiP6MudxY9RUP2vcG8TS2Si3CpkLoRn7wwxAKj:i0e72JEZ7TS8CiLoRn7tAK","tlshash":"b77230896a1920618e37b37ecf1f8109fb76053b1141c5687dac9ad46f7092583eaff8","size":16941,"data":"","first_seen":"2023-03-08T13:34:05Z","last_seen":"2026-09-05T04:49:15.815101Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eac3c72434a0945b92dd4a01f7b6b4e","sha1":"7767b356530e39cd76ec259320b0b2774b4097a8","sha256":"ac3f3a757bfbfc9d92bc8f5e6e6362e5d4ae41dbf3cebacdda9b8f71afc82e5b","sha512":"6a199264a0294c335dde056ea8be534373014e3f2d2f9a76b58574e57c7371fbbafde72fb750348fab5fb9d486055bad792a1344ca8c9636df754d20d9e0cd50","ssdeep":"96:uBm7aaOr8uroJzDV6u3R3zd4j6zp4tSZCHjuwE9nCDTVpWR:p+aOr8ur83V33R3hq6+uwLvy","tlshash":"f1b1108a71f17719539133f011ba205b729dace5260e5804e8b9a9897c7b27c87bbc6c","size":5555,"data":"","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-09-05T04:49:15.821076Z","times_seen":6467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MR58BKW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f55fb8efbc459e71bf8f24ac5a8013c3","sha1":"019428eadee2e273b0c023536e977260819ef819","sha256":"3f1276b40dcb6b687fe4cf874d9c823416ad684c0d8d390c96bfcee4bba3e09a","sha512":"8d7c282a7bb073d124c981e1263bd1e7addea350de136b6dff9b62443c5d000244bdee2f1fb3878ac4706732b3757a868db9dc32dc94a57fd31419b96a6f3cf1","ssdeep":"6144:iH1l3PRfPXrrzudf1UZyc3DR/dEpv3yg6KSQMldsdfp:0RnqHghKSndA","tlshash":"039409dcb3d6746283a3b674903f014bb27a69a2f84cc894f286d8d42d34a5a5177f7c","size":421877,"data":"","first_seen":"2026-09-05T04:49:15.818149Z","last_seen":"2026-09-05T04:49:15.818149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-744169823\u0026cx=c\u0026gtm=4e6921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"808dd743b383e5f5134b7bcf0d6e29d1","sha1":"cbb244c99c6f09fd277e8d9f11a838341f762b38","sha256":"411abfcf8ad74ec73c4b25253ff6636a43674853aad96dc5be45c93745dcc889","sha512":"96d9cd5846e87d96f0eeff7c696c9c7d5a035b99f0e50b82773e89221a6a4d3da558e15f21a283935fa6dce5ebaa5e094eb73b91d1723e0e59fe5684288406b3","ssdeep":"6144:VH1lHPZfMXrrzudf1UZyc3DR/dEpv3yg+0YSQMlCep:FZkqHg90YSnCs","tlshash":"ad9419cd73d674228392f674903f018bb27a69a2b84cc899f289dcd42d3469a5177f7c","size":446902,"data":"","first_seen":"2026-09-05T04:49:15.803234Z","last_seen":"2026-09-05T04:49:15.803234Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"ip":{"addr":"54.168.99.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"e62bd66ba0dc21ebc77a1e84859a0d12","sha1":"f09b1347a8edbf4e94d7dc8a2167d26eb900f337","sha256":"c809fcf029b58363c08144b80085c1e0397369172f8bafe992c73a7e7a3dfcbb","sha512":"24fbed0c92fef02523275074600b189afe0c4920e420bea0a7b159480e80dcfb09d1f5f314d79de6a77fa860dfed42ef8e1605d8c7404721a3e2c40bab3c3aff","ssdeep":"","tlshash":"b8e028db78110c7174ed05f533b5b1287193110868091d23cdfdcd1429585c78c135cc","size":341,"data":"","first_seen":"2023-03-10T04:07:40Z","last_seen":"2026-09-05T04:49:15.823114Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"ip":{"addr":"54.168.99.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52349c92d9c5d60645eee2ba3e4b279","sha1":"7959a26efffd8ed32d632ff7186b66bce051dc5f","sha256":"36eab1b07d51081ff4255722384606b8d9ccf84a367cc7b2cc5ed8a68c6374d9","sha512":"f3e8294c1c2882d229a77e81192ad5b9f73d0a8be7d960ab11d18ecb6c16ecc4ac5ed8bcedf8397ef5561cda0ca7db9e0c9c83023a5e6448f9e3b2d7842b1528","ssdeep":"","tlshash":"f6600000200b08330000802c2200220020030202033800000020808808b0080a320808","size":17,"data":"","first_seen":"2023-03-07T01:24:37Z","last_seen":"2026-09-05T04:49:15.824827Z","times_seen":1937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"ip":{"addr":"54.168.99.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6ff8307f968c71d435256333a3e1907","sha1":"84c732b394462ccb353d397175a136655a72a124","sha256":"f2be4e68bb59402c2ae5158c0bf05164f98b98588f0d45304235bf681242badf","sha512":"828c39ac344c01a962e3fe054e30fb359d9daf5896144009a4c26f2721750d15a2257d3b3195956f8fd8c47cd086e509d04b938d8b7956d663dd6e3f9be9aa50","ssdeep":"","tlshash":"e7a00218a5dd2599b0ad7654dc3f83d830571802364128c5463a0971d7946355411d8a","size":64,"data":"","first_seen":"2026-09-05T04:49:15.825448Z","last_seen":"2026-09-05T04:49:15.825448Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86659,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-05T06:00:35.512273Z","times_seen":100622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/js/jquery.scrollFade.js","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"100797f308a8bd8f8f3003304a860661","sha1":"b5db99c03c82d182ab3e1c559e7dbab7ebcc14fd","sha256":"323645ee6766ab3b48d9e68aaa943702fb3e270cba8428163f1a9659e63c71a0","sha512":"29f002b35a806878cd386906b0fa1232346b728889a164fcc287644df4204b8adf47af1f13b067111a1da178c0a3bc7483225dc405227384254dbf89fbeec0a5","ssdeep":"","tlshash":"30416598334c826f44b93391b2bf62a8e63cdff13115505cb04ea24d2f846364372de4","size":2108,"data":"","first_seen":"2025-06-27T07:42:24.276506Z","last_seen":"2026-09-05T04:49:15.790012Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"ip":{"addr":"54.168.99.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab15f345fe34fed8732efc6a05bdb30e","sha1":"a07bc29eaa828f57b14103359e735dcc03bdc381","sha256":"2afbc6e745f81ff1a4e30ce594091c2bd70a967fe8e5250e023ec6682bbbf50d","sha512":"5ce71380c4485c13ac62ad043308ad29e917c32917d1c8fa34b2a02a66c6c383d0733e9f43c849468c744f9c0b837ba07d653b08e08b9992e789fd67365feffe","ssdeep":"","tlshash":"b6e0a3191c1eb42227b42968e677851930d5120125421659c797c4543970cc664c5a4c","size":423,"data":"","first_seen":"2023-03-10T04:07:40Z","last_seen":"2026-09-05T04:49:15.826817Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/mail.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.645Z","timestamp":1788583711645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/mail.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 19198\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:05:34 GMT\r\netag: \"4afe-6690ab8e-c343a7c15bca9818;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19198,"size_decoded":19558,"mime_type":"image/png","magic":"PNG image data, 760 x 129, 8-bit/color RGBA, non-interlaced","md5":"80f25937a20622e79c6f7e564414a60a","sha1":"d4b09cfff66fd42de15d17b6988a5a0f2c4abebe","sha256":"95f6a2a24b42ea4915b374aa403be3a7cd8edaad6714704026ee67d1ceea8a71","sha512":"b266b120e6183a912a92aaf9f1d34503e6f5d4b32732736d9d6c38b3dc18e7cfa4a3a1c1839e7b76eac3d50fc0d1780af14976eb3da545dea4f06bb9906832aa","ssdeep":"384:Wpu7F4LP309tO8e0vg0yIHtrgugwIJC+cfR4794bbd2trnop:WrL58BvgWN0uiJCLJ47ibbdG+","tlshash":"6682d089e5399d455ecccd0a7c98c0820e4c8820c59ec7b2ffde1d922c16e6d9ed06a7","first_seen":"2026-09-05T04:49:15.786105Z","last_seen":"2026-09-05T04:49:15.786105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":1249,"dns":0,"connect":0,"send":0,"wait":256,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main3_next.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.651Z","timestamp":1788583711651,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main3_next.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 6614\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:28:16 GMT\r\netag: \"19d6-6690b0e0-ac676559636d6a0d;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6614,"size_decoded":6973,"mime_type":"image/png","magic":"PNG image data, 115 x 100, 8-bit/color RGBA, non-interlaced","md5":"70e32f28e9cd16264e311396990c995b","sha1":"8b2268123920fba8074eb6a87cfabaa13ba1a9a0","sha256":"84d81b9b9fd72acaef7ce787a56855d3787bca7441dd1d3644c4805d6f88b373","sha512":"9e2c821e72424bd41137c4fcc1ef65f3f2149f30b08d8f22b16e3d95f722d8053ee01c3e1440362ad6d307f6420fc22db77a34818add622e5e7f9713790b9ae3","ssdeep":"96:Mv4yb18ciQ7mg5Ok+tnYS24hwa5+uI/CN3JcQB1DIQqcZa7shsZPwm:Uhvmg5sA4ua5+uIq3uQB1DIQq7ssZ9","tlshash":"efd1af81d150ed04ee8fef896eb825235b135d45a616318c3bde95d309302be9a9838b","first_seen":"2026-09-05T04:49:15.787629Z","last_seen":"2026-09-05T04:49:15.787629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2428,"timings":{"blocked":1237,"dns":0,"connect":0,"send":0,"wait":936,"receive":255,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/img/icon4.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.654Z","timestamp":1788583711654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/img/icon4.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 7424\r\nserver: LiteSpeed\r\nlast-modified: Tue, 25 Jan 2022 07:07:21 GMT\r\netag: \"4b44-61efa1a9-4d8af7955f3bfdb5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T05:58:36.054699Z","times_seen":18287339,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.621Z","timestamp":1788583711621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30306\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:34 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:34 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 238617\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86659,"size_decoded":31290,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"c9f5aeeca3ad37bf2aa006139b935f0a","sha1":"1055018c28ab41087ef9ccefe411606893dabea2","sha256":"87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82de","sha512":"dcff2b5c2b8625d3593a7531ff4ddcd633939cc9f7acfeb79c18a9e6038fdaa99487960075502f159d44f902d965b0b5aed32b41bfa66a1dc07d85b5d5152b58","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9","tlshash":"4483e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-05T06:00:35.512273Z","times_seen":100622,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":17,"receive":15,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/js/jquery.scrollFade.js","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.626Z","timestamp":1788583711626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/js/jquery.scrollFade.js HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 938\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Mon, 13 Jan 2014 20:09:00 GMT\r\netag: \"83c-52d447dc-914b5a8eef75b5b8;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2108,"size_decoded":1355,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"100797f308a8bd8f8f3003304a860661","sha1":"b5db99c03c82d182ab3e1c559e7dbab7ebcc14fd","sha256":"323645ee6766ab3b48d9e68aaa943702fb3e270cba8428163f1a9659e63c71a0","sha512":"29f002b35a806878cd386906b0fa1232346b728889a164fcc287644df4204b8adf47af1f13b067111a1da178c0a3bc7483225dc405227384254dbf89fbeec0a5","ssdeep":"","tlshash":"30416598334c826f44b93391b2bf62a8e63cdff13115505cb04ea24d2f846364372de4","first_seen":"2025-06-27T07:42:24.276506Z","last_seen":"2026-09-05T04:49:15.790012Z","times_seen":4,"resource_available":true,"data":null}},"time_used":2452,"timings":{"blocked":-1,"dns":558,"connect":245,"send":0,"wait":1142,"receive":0,"ssl":507},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/icon1.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.646Z","timestamp":1788583711646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/icon1.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 7021\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:38:02 GMT\r\netag: \"1b6d-6690b32a-af27549e92bd31a5;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7021,"size_decoded":7380,"mime_type":"image/png","magic":"PNG image data, 163 x 163, 8-bit/color RGBA, non-interlaced","md5":"be4f869df5d413e6bd11f114cfce616f","sha1":"75acf4567a35333c5341f1c463280851d6317602","sha256":"1a539ea431e0751da884ea4111033c7ac964d567a0b6d10d06c574e31b824286","sha512":"c3a1e34b95a9206f577cbdee15c3c2400e0d569c2f1c659d186132610d3172dedf1e57aa883d0590e06a7b9b783484f2a2066dade7d497421099a1a79ebbfc2d","ssdeep":"96:+dA/AeYWaQPsSwuxi2F4y/m9GNma+k+OJk8c0+3qL7q8HesIIutC1pFJ5BVXM:zuQPpjxm4XCK+3qnMIuQ1DBVc","tlshash":"c2e1ae4be7e25f131d84185424b080b6895b295047b46cd8fcefd5f3d9b0ab904af2c7","first_seen":"2026-09-05T04:49:15.79119Z","last_seen":"2026-09-05T04:49:15.79119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1740,"timings":{"blocked":1250,"dns":0,"connect":0,"send":0,"wait":475,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/img/mail.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.648Z","timestamp":1788583711648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/img/mail.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 7424\r\nserver: LiteSpeed\r\nlast-modified: Tue, 25 Jan 2022 07:07:21 GMT\r\netag: \"4b44-61efa1a9-4d8af7955f3bfdb5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T05:58:36.054699Z","times_seen":18287339,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/top_bg.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:34.121Z","timestamp":1788583714121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/top_bg.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coffer.info/tadadeai/shinsa/css/base_pc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1386787\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:34 GMT\r\nlast-modified: Fri, 12 Jul 2024 02:52:30 GMT\r\netag: \"152923-66909a6e-f71c985b301e1519;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1386787,"size_decoded":1387151,"mime_type":"image/png","magic":"PNG image data, 1920 x 1200, 8-bit/color RGB, non-interlaced","md5":"75a6f0f56ab07bbd313a99e31e78a9ba","sha1":"08227c58ad85cb7eb45516dc48b259caef5c56f1","sha256":"01ff002c1a567582d451aca72f7592426735b6d02c0c11ed2993c20ffd96b821","sha512":"01ef0b55b776a39e12d521567d5902962ec3a112dac077f66c0d462ec238a51ae2dabd28eb4f9340a154ef036e917751f1c333d0eb63d82b7409b84847b43b88","ssdeep":"24576:GIBmIiGbq8h999LSV/TEPpTEra7v/NmjM9b07slTUuuHmoi6jJ:or+39LasTEra7v4jMmgqrmH69","tlshash":"6325334073613e0b997a96898de37e83a2cdb5d8cb1f9e717e0631c9a4d9e0d8413c5e","first_seen":"2026-09-05T04:49:15.792591Z","last_seen":"2026-09-05T04:49:15.792591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":660,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/css/animate-min.css","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.618Z","timestamp":1788583711618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/css/animate-min.css HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 3471\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Wed, 05 Aug 2015 01:33:00 GMT\r\netag: \"d0b7-55c167cc-ae48c22813a0c9d7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53431,"size_decoded":3874,"mime_type":"text/css","magic":"ASCII text, with very long lines (53270)","md5":"55009d64191e6f9e712a841773ee6611","sha1":"5f120f4be43d67152bf4bd8f63cca0e027d25a57","sha256":"b48f9a7031474a0f73f92f2e6cbbfad730b5466cda96d86a4459c06efc986173","sha512":"f1aa3a98c4d707119968893b50a8afb85583c3ddff428e6a4b1b7b0d5724e133c030f54a5cbd4ac057603a3a57d870190fcdd8aae29e2aa606ddafd95a456e52","ssdeep":"768:vkZlIbIg6UIsIuIvwO1CA5kiDb3CyQ5xrQe/0STfs2sb:vkZkIvwO1CA5kiDb3CyQ5xrQe/0STA","tlshash":"7933f5af5891228991674f6283dc5e68872dc67714621cde33817c4b8f87fae33da607","first_seen":"2023-04-05T04:43:33Z","last_seen":"2026-09-05T04:49:15.793592Z","times_seen":2707,"resource_available":false,"data":null}},"time_used":1531,"timings":{"blocked":-1,"dns":566,"connect":234,"send":0,"wait":242,"receive":0,"ssl":489},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/logo_2.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.639Z","timestamp":1788583711639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/logo_2.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 52429\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 09:54:46 GMT\r\netag: \"cccd-6690fd66-45a0b55031b4a819;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":52429,"size_decoded":52789,"mime_type":"image/png","magic":"PNG image data, 960 x 672, 8-bit/color RGBA, non-interlaced","md5":"a3fdbb5df2d697a4ddd1ae34f2779c36","sha1":"9695d8128e1404034e158c8c017abd13d9db5e7f","sha256":"95f20153dbe69eaa4ebdcbfca7e66c701d35341c1c51bad3c2fad4170b90fbf1","sha512":"ea4ea368a8aa18301818d1dd74e4161d63ee613222c247a82979bb8d21a4f339d2cc1a4db3df8e5d33be931ab8198972c8884ffeb1577f82e4331fa264346e74","ssdeep":"1536:hictpn58xFKOlru884lgw8uRTr0TZlFiUU:hiS4TKeku+M7","tlshash":"0c33cf186446abc7ecb58b7825d66b17bfda0a424233c34fe704505f7d626a87c8b7c2","first_seen":"2026-09-05T04:49:15.794172Z","last_seen":"2026-09-05T04:49:15.794172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2898,"timings":{"blocked":1251,"dns":0,"connect":0,"send":0,"wait":1170,"receive":477,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/text_appName_pc_2.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.644Z","timestamp":1788583711644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/text_appName_pc_2.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 82626\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 03:23:06 GMT\r\netag: \"142c2-6690a19a-47d8a3b08e661ac3;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":82626,"size_decoded":82987,"mime_type":"image/png","magic":"PNG image data, 960 x 195, 8-bit/color RGBA, non-interlaced","md5":"fb71013867dd231eb8d3e566cdb2e2d1","sha1":"b736b1ccf9be6811582c4b37b50c0b294d445a31","sha256":"a98353f84707401bfe72370facae7a2cc5c96deb76e2ebbc41ee0d90fdc9d1ff","sha512":"11cb2fcec140c91d65eba52d85f915babca7c0a40a95973f7a009ba138d060b3bd865d2248fae31dbb24b97dfe163afebd8050b47cfb4e959192859dc9f0022c","ssdeep":"1536:RXUHyNVEfLF8PwrJnsCRqqNnHQUQ1JPQNjRFWx9jSRwK:pUHbLF8Sx9n+IZRE9jVK","tlshash":"9c83028a4b0ed1e2d58d6db3f401060eaab50693d098cb4059d76c8cecd5daa49ff4bf","first_seen":"2026-09-05T04:49:15.795616Z","last_seen":"2026-09-05T04:49:15.795616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2904,"timings":{"blocked":1251,"dns":0,"connect":0,"send":0,"wait":1170,"receive":483,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main3_pic_3.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.653Z","timestamp":1788583711653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main3_pic_3.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 444582\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 10:01:58 GMT\r\netag: \"6c8a6-6690ff16-e473726d3d40641c;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":444582,"size_decoded":444944,"mime_type":"image/png","magic":"PNG image data, 900 x 320, 8-bit/color RGB, non-interlaced","md5":"ca5b759dff09745f828bf1bf1b208a52","sha1":"1d9f369f473d61c667239f9767c2d2716eb79242","sha256":"be4c470eddb3c383a184151bb58af75736f9665bd10f4a2a897d68c29e454ee7","sha512":"56c988dbbb695ae1715bc6f0943e913d690e76fddabc784139c5c13761fe58c7d94b87b3bf0962a35bf1211c93d0eda8cb9385e894f7b19d4f37406f54ed50fc","ssdeep":"12288:7RttPqaxxEn3AaJj0bqpnXRZBfN9jSBcA/fuBxrdYuiGN4x0xumtuQtu:VnzEn3A+QbqNBfN9O7mnFiGO0x74QI","tlshash":"649423ea5aa2bd0961d13719c4646a161cbce687bcee34b9057d1ca3b15c03388effd0","first_seen":"2026-09-05T04:49:15.79674Z","last_seen":"2026-09-05T04:49:15.79674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2914,"timings":{"blocked":1237,"dns":0,"connect":0,"send":0,"wait":1170,"receive":507,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main4_pic_2.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.656Z","timestamp":1788583711656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main4_pic_2.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 79119\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:56:30 GMT\r\netag: \"1350f-6690b77e-aec347b14f7ba307;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":79119,"size_decoded":79480,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"b9b7abffac3d9604a7c10f9cbb1d93c8","sha1":"df84ec662f368047ab74ec657b9b12be75063560","sha256":"1d19596a1aefc9db7bd384ae2d784216cb635143d63dffe43a6bdcaed9c3aa14","sha512":"fd05623409bfdb2527d0423909d49933d88bfb8fc5542c00cb4502f35ba5ce638fdf180f9a317a786a31aa191f343618b2ff00d192944c8cb01c365cd65972f4","ssdeep":"1536:rpcSxOTAme+LgoDeqjDJopHJ8Xrpu5quHRN4e/LLuxHQhmkK6DXtI:FcSAAme2zSkpu5ZH1LuCIlGtI","tlshash":"017302060ac0f37fc3c6eb1973125da309120195da4962afed67be257819dc0a5face7","first_seen":"2026-09-05T04:49:15.797754Z","last_seen":"2026-09-05T04:49:15.797754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2880,"timings":{"blocked":1238,"dns":0,"connect":0,"send":0,"wait":1170,"receive":472,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main4_pic_3.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.657Z","timestamp":1788583711657,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main4_pic_3.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 80778\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:55:40 GMT\r\netag: \"13b8a-6690b74c-3757a3f4de402353;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":80778,"size_decoded":81139,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"6d6a3406b2251e90ce890d154eef2408","sha1":"9e2dbe7cb3653be817d5e2b8face87403fd6dbfd","sha256":"40ca35bd8210137a1bbc191704ffd56fac922b6de24b4e96ee678d06e39fd7b9","sha512":"1f78aeaff47380307f0a108cb2318918a3eda8b37b2a1b304cff417a4a15271999a0ace53b669f35950ce108a454780eb17e6b3a1fa6f8fb8f57fd2cd45c292f","ssdeep":"1536:3BjEvcciy7wFXDZXHhl0SfYOneNEpnP/RmHd7S8xX2bfYad1:xSccigmxuCZFpnPo97S8xmbfYA1","tlshash":"ec831256b7c43b00f43a9d102c6d420e2add2cfd4bfae06459b778aad114df2a9b0d67","first_seen":"2026-09-05T04:49:15.798854Z","last_seen":"2026-09-05T04:49:15.798854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2884,"timings":{"blocked":1238,"dns":0,"connect":0,"send":0,"wait":1170,"receive":476,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/img/mail.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:34.118Z","timestamp":1788583714118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/img/mail.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sat, 05 Sep 2026 04:48:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 7424\r\nserver: LiteSpeed\r\nlast-modified: Tue, 25 Jan 2022 07:07:21 GMT\r\netag: \"4b44-61efa1a9-4d8af7955f3bfdb5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T05:58:36.054699Z","times_seen":18287339,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/css/base_pc.css","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.616Z","timestamp":1788583711616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/css/base_pc.css HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 1489\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Tue, 16 Jul 2024 02:15:05 GMT\r\netag: \"2055-6695d7a9-737d91081672f5e7;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8277,"size_decoded":1892,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"03926c862bb4aee7b6221cecbcad7d2f","sha1":"5b86b6a981501365cf0a2797e83a1fabe49e6c7a","sha256":"010704743e8b0fd79c3f90b11fc0a098c71678a54da7ab12069af53918469e60","sha512":"62a02280ebf894f87808ca56b5fc09b9870202aa0705c4a0c6bfd7cf2091b35acce4ba7f5f87ab73283ebd6cfa57c7251d072eca4b643e589d7a191ab8879f65","ssdeep":"96:am9QJbpOaIfmoPFzZK/h8QeS4NuSHmvLJLVsEHLe4Dt4Yx4bgb7mOy1YlKoqvvko:f9E6fmoPFzWZnDemvlZsFO+YlKbvv0ju","tlshash":"32029d26af816c49d54fd498ff6687c8c76e08603f0fddbb50493268c18e456a6fea4c","first_seen":"2026-09-05T04:49:15.800248Z","last_seen":"2026-09-05T04:49:15.800248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2463,"timings":{"blocked":-1,"dns":567,"connect":247,"send":0,"wait":1136,"receive":0,"ssl":512},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/icon3.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.649Z","timestamp":1788583711649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/icon3.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8306\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:39:52 GMT\r\netag: \"2072-6690b398-ff9ccbccfcc4e86c;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8306,"size_decoded":8665,"mime_type":"image/png","magic":"PNG image data, 163 x 163, 8-bit/color RGBA, non-interlaced","md5":"572df4b1554c8ff925ab1903e32a2b73","sha1":"73904a48c00b20349846c1a170ff235f1df3832d","sha256":"910e0f2bc8dbce11c65e103843aebd1df830149879b41066e33a5e5ff2fcb575","sha512":"98637563da615bd6400c79b4f9611384d6cea5f5ad7f314052089833ebfb9dda19e2cb6e55a58211e4fe3272f5e9a56b14955a837201b65e9c67078c37be08d0","ssdeep":"96:+MDAJAghiJV5TeT673wp8xV9scAsURwhj6Lt/PH5vz7AEoqHsLGJarYTcocCxrOq:ujh8XHxV9scAsURwsv5b7gGGYTc655r","tlshash":"4c02b0858543e8c88c98c07206fa4d716c7773b054ace7deeab5c9c678b31e444ed28c","first_seen":"2026-09-05T04:49:15.801957Z","last_seen":"2026-09-05T04:49:15.801957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1958,"timings":{"blocked":1250,"dns":0,"connect":0,"send":0,"wait":702,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=12\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=776452984.1788583714\u0026dt=%E3%82%BF%E3%83%80%E3%83%87%E3%82%A2%E3%82%A4\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.hm99-free7apo.gift%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=144677646.1788583714\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6921v858452048za200zd858452048xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~120385423~120469145~120469153\u0026tft=1788583714230\u0026tfd=4508\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.156.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:34.232Z","timestamp":1788583714232,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /ccm/collect?rcb=12\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=776452984.1788583714\u0026dt=%E3%82%BF%E3%83%80%E3%83%87%E3%82%A2%E3%82%A4\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.hm99-free7apo.gift%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=144677646.1788583714\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6921v858452048za200zd858452048xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~120385423~120469145~120469153\u0026tft=1788583714230\u0026tfd=4508\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.hm99-free7apo.gift/\r\nOrigin: https://www.hm99-free7apo.gift\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ndate: Sat, 05 Sep 2026 04:48:34 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.hm99-free7apo.gift\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":551,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-05T05:58:36.054699Z","times_seen":18287339,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":2,"connect":24,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-744169823\u0026cx=c\u0026gtm=4e6921","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:34.248Z","timestamp":1788583714248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/destination?id=AW-744169823\u0026cx=c\u0026gtm=4e6921 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 04:48:34 GMT\r\nexpires: Sat, 05 Sep 2026 04:48:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 154004\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":446902,"size_decoded":154993,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5009)","md5":"808dd743b383e5f5134b7bcf0d6e29d1","sha1":"cbb244c99c6f09fd277e8d9f11a838341f762b38","sha256":"411abfcf8ad74ec73c4b25253ff6636a43674853aad96dc5be45c93745dcc889","sha512":"96d9cd5846e87d96f0eeff7c696c9c7d5a035b99f0e50b82773e89221a6a4d3da558e15f21a283935fa6dce5ebaa5e094eb73b91d1723e0e59fe5684288406b3","ssdeep":"6144:VH1lHPZfMXrrzudf1UZyc3DR/dEpv3yg+0YSQMlCep:FZkqHg90YSnCs","tlshash":"ad9419cd73d674228392f674903f018bb27a69a2b84cc899f289dcd42d3469a5177f7c","first_seen":"2026-09-05T04:49:15.803234Z","last_seen":"2026-09-05T04:49:15.803234Z","times_seen":1,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main3_pic_1.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.650Z","timestamp":1788583711650,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main3_pic_1.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 320245\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 06:13:16 GMT\r\netag: \"4e2f5-6690c97c-856084f05207db90;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":320245,"size_decoded":320607,"mime_type":"image/png","magic":"PNG image data, 900 x 320, 8-bit/color RGB, non-interlaced","md5":"a45a24d26e8008611a861ff6372e36f5","sha1":"3e18f262af490507386195caa01aa39dfdb46d9c","sha256":"7da227fcbe35fc8e9dca8b5eeb55d90cc0b66356c721a451d4350da6153c7237","sha512":"e12c029181141a82becc426013378db8eaa586b5074ff494e8be6fff19194580f291df9ff06a7a8b34f94cee33b2c42912df76f081d102b6e534081d269246a9","ssdeep":"6144:eaIi8uNqUUHXKIjo46BtpErqAUwZqLs+KLOrWivVOVEeC0veSkg6BCpZ4SAxnq:bX8uEUUH6zBvErqiZqdKwWkVO2edetg1","tlshash":"3f6423c82703edc48fe51bd16fc7469a4deaa5d8c4982dc9a698cbe3dacc04b414d5ac","first_seen":"2026-09-05T04:49:15.804437Z","last_seen":"2026-09-05T04:49:15.804437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2904,"timings":{"blocked":1250,"dns":0,"connect":0,"send":0,"wait":708,"receive":946,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/top_hero_pc.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:34.124Z","timestamp":1788583714124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/top_hero_pc.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coffer.info/tadadeai/shinsa/css/base_pc.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 155654\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:34 GMT\r\nlast-modified: Fri, 12 Jul 2024 09:42:54 GMT\r\netag: \"26006-6690fa9e-9ca6cc10414d6571;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":155654,"size_decoded":156016,"mime_type":"image/png","magic":"PNG image data, 960 x 850, 8-bit/color RGB, non-interlaced","md5":"701d5dc421477f38bd3eec7622649da6","sha1":"9a12136d39d23cf2d7b946ac789a3030600868b8","sha256":"55d2ed7d7c1d0f7436e324820e9d4230ea92e7612184aa3c604ecf4f53eaf4a7","sha512":"39b5cf0a654ad7e9fecb2b0fd2769fc93aa2c4a1cbf7952d1643aecf2469427d0618ea66dec9133d981315a502a02b1510249896af630622dde732fee54c94c6","ssdeep":"3072:oZck+u4d+es87HLofjmWE6LZWJ1sy5PpE9JDoXw4ToolOOuqULtSUxbcqY:Ybet7MfjmWE6LWu0AihlTuqUM39","tlshash":"0ee3129ee82e1901f7ecb53be88149451e24278d6801414b275bd3becde6b46874eff2","first_seen":"2026-09-05T04:49:15.805776Z","last_seen":"2026-09-05T04:49:15.805776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":659,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/favicon.ico","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:34.821Z","timestamp":1788583714821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/favicon.ico HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:34 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9662\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:34 GMT\r\nlast-modified: Fri, 12 Jul 2024 10:03:50 GMT\r\netag: \"25be-6690ff86-18815c29c05781cc;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9662,"size_decoded":10024,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"60f64e094aa393e23943037f585a24aa","sha1":"a42db89f8eae780560ec89878fd7d3f241d9d9bd","sha256":"e73bdcc0f8e92c7f20744c4928b33a745f311e2d64f67ee8cb6c8fcf5fb4e9df","sha512":"91b24a94e5e7795c83850f83504781b7ce637e9d871665d0ad4b3d14c8699c122605eec42c5b5f25fc0297575f0cde242d41ef9b5940b377e26770c7e4625fc1","ssdeep":"96:92JUdv8hQ9Y3YbMNpUeThUSHc+7/Onvi1KtciEIod2:scg3iiUUc+avi1z9Iod2","tlshash":"371272c5f801c278e7615ab1e81a8df05a5b7c2acd60244b3189bf5f3a372d7a572c1b","first_seen":"2026-09-05T04:49:15.807033Z","last_seen":"2026-09-05T04:49:15.807033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/logo_pc_2.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.641Z","timestamp":1788583711641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/logo_pc_2.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 53200\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 09:55:40 GMT\r\netag: \"cfd0-6690fd9c-75d5d53886b6d254;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53200,"size_decoded":53560,"mime_type":"image/png","magic":"PNG image data, 960 x 510, 8-bit/color RGBA, non-interlaced","md5":"312dab2424a7c03986ecb6844769cea0","sha1":"162d9d299f37881698167efa104775fe5cba2f60","sha256":"adc04f8ab3d57650cfd6fa9eb6f81cd3296f563bfc0a469f58c6e6aaa195a86f","sha512":"2cb88adf8edeedd6ba2157eff24d90bb9ff6153c8fd0ee2916ee42b02637e8b54ae982618017d70075cc2c34b1bb0053d4b297815ca79a4aaef388419bb57a31","ssdeep":"1536:EuDa5IDXWs2UWU7GY0072XK0w4UKZgBY7:cZs2UWNHaMK0w1y","tlshash":"6133e129867165eed868c47a24cf0b4e7ac06e824150d72b5ec1b91f3af12fcdc55ba3","first_seen":"2026-09-05T04:49:15.808333Z","last_seen":"2026-09-05T04:49:15.808333Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2899,"timings":{"blocked":1251,"dns":0,"connect":0,"send":0,"wait":1170,"receive":478,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main1_h2.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.647Z","timestamp":1788583711647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main1_h2.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 8401\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:22:08 GMT\r\netag: \"20d1-6690af70-2083d3060856c12d;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8401,"size_decoded":8760,"mime_type":"image/png","magic":"PNG image data, 1000 x 106, 8-bit/color RGBA, non-interlaced","md5":"6b99af00a1e738cc7135624575487bb2","sha1":"63e093b6ded8e3726435b60e0f7440ce9e13cc3e","sha256":"eda48f39913aa3af18d65731d0030a6368458ca01e8504ff3ea36c39cc5bbe25","sha512":"c1faf5bca832282bc7ea0af4bf5d6735bd17bf9346bb342f21940d2ef792c344ce7a0b3e759ecbbccf7dc06b52c494d75cbad2140100dcdd59bb73005fe46234","ssdeep":"192:6WWKUC2tafEdGht7ZDj2MJEwTs/U6Ja/bof1w2rikaR:uK+iWYhFaUlof1w4VaR","tlshash":"f5029e0885812575e851c9b821e648b61baa0d50f8e0ea231155c58bdc3e5fd9d2a6ef","first_seen":"2026-09-05T04:49:15.809703Z","last_seen":"2026-09-05T04:49:15.809703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1951,"timings":{"blocked":1249,"dns":0,"connect":0,"send":0,"wait":490,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main3_pic_2.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.652Z","timestamp":1788583711652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main3_pic_2.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 367141\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 06:22:50 GMT\r\netag: \"59a25-6690cbba-c3a3305cb0fa5b1;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":367141,"size_decoded":367502,"mime_type":"image/png","magic":"PNG image data, 900 x 320, 8-bit/color RGB, non-interlaced","md5":"d0dc3f4f569fd1ff6060aaba02f48f1e","sha1":"da64a11020daeea8c0ecca6d32c69034e2a488a3","sha256":"e0fbf4f1e7dc0d56af9ac9e6758c6b19840b226d5fece84c3968db24c1edabb8","sha512":"942098152abab4779c681ce9f62a9a23ce640535a0d14fcf15de1fa5edb53ad5f91194b149244c2e01a8a1c80709fe8eeac310e96a683fdbc9ff8b2446876428","ssdeep":"6144:mlqfK4i6BK28aTPy/gw791r2e8GHndnktmW9MqZYRaMZZk:4qy4i6I0yoQ91KqnkX9MKuD8","tlshash":"0674234ca4ec560ed46b2a6fb4393c872bd82d92fd5c844482f106b9cdd52229dc9bf7","first_seen":"2026-09-05T04:49:15.811603Z","last_seen":"2026-09-05T04:49:15.811603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2896,"timings":{"blocked":1237,"dns":0,"connect":0,"send":0,"wait":936,"receive":723,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hm99-free7apo.gift/","fqdn":"www.hm99-free7apo.gift","domain":"hm99-free7apo.gift","tld":"gift"},"ip":{"addr":"54.168.99.55","port":443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T04:48:29.754Z","timestamp":1788583709754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hm99-free7apo.gift","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 11 May 2026 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D5:61:D3:76:3B:42:41:D4:63:1D:A3:9B:A3:E0:40:11:36:D6:68:49","sha256":"A6:97:28:45:DB:BA:0E:9F:5D:F1:66:4F:61:29:82:F1:DF:74:B8:F4:B8:75:C4:3C:EB:99:17:15:B4:93:E3:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.hm99-free7apo.gift\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Apache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nfileetag: None\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":8730,"size_decoded":9017,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a29fb0a118a898be3a30ca1c5127db58","sha1":"3361a2a1549678b62aa5c5c9d88bf96ea25a4645","sha256":"e59044370f63e4fb6cac394371b87769add64192f03fedf074927b04846709ee","sha512":"d44489963e1d27e6b41efc1ba4503232811a80b306dbd0bd492ce1f814926287dbd45522b09f4db8e07f3837138202c5e4287a43bfce6deb231ef5b1337e734c","ssdeep":"192:7LMeiV/dejgMd31yg110nXgm/BZ//c9JsfKdjNdy1:7LMTxdefWIFy1","tlshash":"4e02441bca888d37014111e9b827f75c90eb6e2fdb43d95a80fec157a6d0dd8ce0696e","first_seen":"2026-09-05T04:49:15.813469Z","last_seen":"2026-09-05T04:49:15.813469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1443,"timings":{"blocked":-1,"dns":91,"connect":260,"send":0,"wait":307,"receive":0,"ssl":784},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"www.hm99-free7apo.gift","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/js/wow.js","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.622Z","timestamp":1788583711622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/js/wow.js HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3940\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Tue, 04 Oct 2016 11:29:00 GMT\r\netag: \"422d-57f3927c-d12dc52a9d60b58e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16941,"size_decoded":4359,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e99e8ba7f607d82d6b952918282d2fff","sha1":"0f4ba04b905158d6d1fa30be6f12d92cd7837347","sha256":"9c9da3742b8945678f7b8832f25355a6eba9af8b010dfc077b9309bae0de7688","sha512":"12d40cd31acefe017ce1b90970feab69c47681545a1dbd0f23114d734aa58d86b228283f040c167e517128e8f19ca369496e7a272a26c3c5ef23a9a9d4f12d5e","ssdeep":"384:i0eg5rUHJM+rrWgRiP6MudxY9RUP2vcG8TS2Si3CpkLoRn7wwxAKj:i0e72JEZ7TS8CiLoRn7tAK","tlshash":"b77230896a1920618e37b37ecf1f8109fb76053b1141c5687dac9ad46f7092583eaff8","first_seen":"2023-03-08T13:34:05Z","last_seen":"2026-09-05T04:49:15.815101Z","times_seen":98,"resource_available":true,"data":null}},"time_used":2457,"timings":{"blocked":-1,"dns":562,"connect":239,"send":0,"wait":1159,"receive":0,"ssl":496},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/main4_pic_1.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.655Z","timestamp":1788583711655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/main4_pic_1.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 60724\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 04:55:12 GMT\r\netag: \"ed34-6690b730-7c5da489a684b8ae;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60724,"size_decoded":61084,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"aa1c422da3b239da7df642cf62b14963","sha1":"e9a35cf7a27c161234729bbe8249d17d8402013f","sha256":"66fd34dbb3cbe04f42b24142b10855458dd4ee31b8c8f1b9eab9e7687b09f935","sha512":"ba0559f311b19b9999238bad3d4a1637d1a3c26fdfc33042b59f87e000bfc5e67e8ac15c294b2978624619e35654c312877056e18ad0a21a097601c6a515851c","ssdeep":"1536:9b+G/DCewpOWsBrlcGItrHCW2aQMme2P25M:Z5/DzwsWsBR1PUh2OG","tlshash":"9e5302bd375150c5cc5adf419be7c89978bbfbe5b90c384e60a4a7511aafe14600ef80","first_seen":"2026-09-05T04:49:15.816632Z","last_seen":"2026-09-05T04:49:15.816632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2878,"timings":{"blocked":1237,"dns":0,"connect":0,"send":0,"wait":1170,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MR58BKW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.678Z","timestamp":1788583711678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-MR58BKW HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 04:48:31 GMT\r\nexpires: Sat, 05 Sep 2026 04:48:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 05 Sep 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 148539\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":421877,"size_decoded":149189,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4899)","md5":"f55fb8efbc459e71bf8f24ac5a8013c3","sha1":"019428eadee2e273b0c023536e977260819ef819","sha256":"3f1276b40dcb6b687fe4cf874d9c823416ad684c0d8d390c96bfcee4bba3e09a","sha512":"8d7c282a7bb073d124c981e1263bd1e7addea350de136b6dff9b62443c5d000244bdee2f1fb3878ac4706732b3757a868db9dc32dc94a57fd31419b96a6f3cf1","ssdeep":"6144:iH1l3PRfPXrrzudf1UZyc3DR/dEpv3yg6KSQMldsdfp:0RnqHghKSndA","tlshash":"039409dcb3d6746283a3b674903f014bb27a69a2f84cc894f286d8d42d34a5a5177f7c","first_seen":"2026-09-05T04:49:15.818149Z","last_seen":"2026-09-05T04:49:15.818149Z","times_seen":1,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":54,"receive":71,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/css/base.css","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.614Z","timestamp":1788583711614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/css/base.css HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 1462\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Tue, 16 Jul 2024 02:14:38 GMT\r\netag: \"1e9b-6695d78e-4ac111ddc5542d4d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7835,"size_decoded":1865,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"ed8254d68e5e6324f7f9d546d9252162","sha1":"cd60e1d8d6911944c54c245dc272072b8e5a21d2","sha256":"7619c08e2ebcb40a634be41fa64c35c849f260536422214a1757c3fd98fb25e9","sha512":"f173a76d79bb16f66225f254f6aea148d4c5ff89829a95399bf56f6cb621c668e82578ff28e8050ddc3f6f3c881b3d2fd061d9d51ce9977f45b22dc779a24a77","ssdeep":"192:QAEbfmoPVnEWWcBXey6iOedYlKI27OFSQ:QBfmoPVnEWWc4DiOeu1","tlshash":"aef17611af856c48e44fc4a8ff66a7c8d6ad08607f4fcd76a11a3275c48e0516afeb4c","first_seen":"2026-09-05T04:49:15.819534Z","last_seen":"2026-09-05T04:49:15.819534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2464,"timings":{"blocked":-1,"dns":569,"connect":247,"send":0,"wait":1146,"receive":0,"ssl":502},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-easing/1.3/jquery.easing.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.624Z","timestamp":1788583711624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery-easing/1.3/jquery.easing.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:31 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1507\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3128787\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:45 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YKz1Afjf8FjUELIu1iNdfLVyOe6TJLXn3Ly1AvU9FpSGsuJSc0okw3wNlnF2wcQd51QQQGL2PIMI%2F3P1piTZ%2FUXkgWC45Uc%2BrtedX%2B7%2BBfyz%2F9Je7U52%2Bi8z%2F2DPOY1A5IeDDAz%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a3629a25bff432fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5555,"size_decoded":2512,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (3601)","md5":"3eac3c72434a0945b92dd4a01f7b6b4e","sha1":"7767b356530e39cd76ec259320b0b2774b4097a8","sha256":"ac3f3a757bfbfc9d92bc8f5e6e6362e5d4ae41dbf3cebacdda9b8f71afc82e5b","sha512":"6a199264a0294c335dde056ea8be534373014e3f2d2f9a76b58574e57c7371fbbafde72fb750348fab5fb9d486055bad792a1344ca8c9636df754d20d9e0cd50","ssdeep":"96:uBm7aaOr8uroJzDV6u3R3zd4j6zp4tSZCHjuwE9nCDTVpWR:p+aOr8ur83V33R3hq6+uwLvy","tlshash":"f1b1108a71f17719539133f011ba205b729dace5260e5804e8b9a9897c7b27c87bbc6c","first_seen":"2023-03-07T01:07:08Z","last_seen":"2026-09-05T04:49:15.821076Z","times_seen":6467,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":13,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coffer.info/tadadeai/shinsa/img/text_appName_2.png","fqdn":"coffer.info","domain":"coffer.info","tld":"info"},"ip":{"addr":"163.44.185.210","port":443,"asn":7506,"as":"GMO Internet,Inc","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.hm99-free7apo.gift/","date":"2026-09-05T04:48:31.643Z","timestamp":1788583711643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coffer.info","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Jun 2026 19:41:27 GMT","end":"Thu, 17 Sep 2026 19:41:26 GMT"},"fingerprint":{"sha1":"12:94:D2:2B:A8:5C:AE:B0:D1:64:70:5A:C5:C5:3A:43:9F:B3:1B:52","sha256":"1C:2A:C6:CA:57:5F:8D:91:F5:B7:A1:18:8E:3D:90:7D:FD:7D:E2:EA:FA:5B:11:70:17:6D:EB:18:08:96:43:00"}}},"request":{"raw":"GET /tadadeai/shinsa/img/text_appName_2.png HTTP/1.1\r\nHost: coffer.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.hm99-free7apo.gift/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 05 Sep 2026 04:48:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 103289\r\nserver: LiteSpeed\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 04:48:33 GMT\r\nlast-modified: Fri, 12 Jul 2024 03:22:02 GMT\r\netag: \"19379-6690a15a-6ac539bcac481fa7;;;\"\r\naccept-ranges: bytes\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":103289,"size_decoded":103651,"mime_type":"image/png","magic":"PNG image data, 960 x 336, 8-bit/color RGBA, non-interlaced","md5":"42ec5dc12e750b1cd69502eb27ecacd2","sha1":"6fa5dd55b1b51f3038034d68140b7472e28ce520","sha256":"8f1e412d51f1f764c79759db4424bc1ec04313dc9b2a2bae2abec22bf895112e","sha512":"dd60661b89d02ab887a1f2f82a7b6ebacd33a9cc7d025173a34f6d7962b103b96becb9d4f42a36abb7c95fbfe2a2f11118b4f07ba8f349418e122aa030e1cc95","ssdeep":"1536:mU973o/GENguQ4ADYlvusXqyHDzyNfsiSLjRqBsiRneg2I1DlyX8xnu7bs2:ylCuxb6yHnySiqlqPR9pbxnu/s2","tlshash":"88a3126bccd14a9fc19dc90f3ed6e4a8f5aa9433f2496b56a484109c0b7d0e5d1ce0be","first_seen":"2026-09-05T04:49:15.821692Z","last_seen":"2026-09-05T04:49:15.821692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2901,"timings":{"blocked":1251,"dns":0,"connect":0,"send":0,"wait":1170,"receive":480,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"coffer.info","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}