{"report_id":"550f6613-a89d-4492-99f1-0612e1ede4a1","version":6,"status":"done","tags":[],"date":"2025-12-27T04:32:13Z","url":{"schema":"http","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"title":"مشاهدة وتحميل مسلسل Stranger Things الموسم الخامس الحلقة 5 مترجمة | ايجى بست","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-31T04:32:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":13}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"bvtpk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"midgerelativelyhoax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"midgerelativelyhoax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"midgerelativelyhoax.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2022-01-19","domain_rank":1776067,"first_seen":"2022-03-21T07:23:05Z","last_seen":"2025-12-26T12:26:51.588294Z","alert_count":2,"request_count":1,"received_data":108865,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2025-12-24T20:59:21.717877Z","alert_count":3,"request_count":1,"received_data":530,"sent_data":762,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.182.60.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2025-12-23T21:54:17.105331Z","alert_count":0,"request_count":2,"received_data":716,"sent_data":934,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b7510.com","ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-03-21","domain_rank":0,"first_seen":"2025-06-19T09:08:24.947983Z","last_seen":"2025-12-25T06:42:00.379705Z","alert_count":0,"request_count":1,"received_data":826,"sent_data":587,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":2,"received_data":92340,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":1,"received_data":124580,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"agybest.com","ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":421252,"sent_data":9708,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick:1.8.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"preferencenail.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":20606,"first_seen":"2025-07-08T12:55:47.271261Z","last_seen":"2025-12-24T19:08:33.595887Z","alert_count":3,"request_count":1,"received_data":85956,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-12-22T14:29:29.510192Z","alert_count":0,"request_count":1,"received_data":834,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"weirdopt.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-07-01","domain_rank":37519,"first_seen":"2025-07-08T12:55:47.272157Z","last_seen":"2025-12-24T19:21:20.505106Z","alert_count":3,"request_count":1,"received_data":377,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":433917,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bvtpk.com","ip":{"addr":"104.21.5.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-03-16","domain_rank":37068,"first_seen":"2025-05-21T11:34:02.786268Z","last_seen":"2025-12-25T06:41:59.726957Z","alert_count":1,"request_count":1,"received_data":113622,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/wp-statistics-tracker-js-extra","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f49b858dfbae220ce33175dac7fca8e2","sha1":"1c64b573595ebbfb3b929ba105a3e98d07e16201","sha256":"8cbe792686d9e0213278bc503675798403ad6995615e332be4f18dd00c7c2af7","sha512":"3733190ee0523d2b8f05ef9299e1beb75a48258e7a4e956a1cff0aca8a86390153776a275d596186d56ca3e4c9273189d10d02974b5e4b527b48f6d724c3d1f7","ssdeep":"12:OYEzzkoHUvGJhNrTkGesSmKRod/uvU0O/KfW+8SSgJC8PfNrTLvrsSmKRoKRjDeG:4kowWTTZEe/llO5RqeBTrYELFK/NY","tlshash":"5ca15469fec05da508e16bf4811c7e2515939853d4148b64d2b89e4e06edde8735630b","size":4918,"data":"","first_seen":"2025-12-27T04:32:19.828484Z","last_seen":"2025-12-27T04:32:19.828484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/js/core.js?ver=1.12","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8faab1a71efa3d9353ebed94d1e17bb","sha1":"c724fd6a269556a817465a13110e5b3bd3b1c7e7","sha256":"3363c187ff16b0d1925349c43710389667ca1d70558cb5dc85931d46518b0845","sha512":"83d3369009a15281c5266fb0e8c64b3b5b47ff263b26c48127bfc2ad35ee064bcf88924666d224e17402f20c30f1f585bd368f64023b1c08973936e3f60b118b","ssdeep":"96:+URlJlEkXz/WCuO99DYYT23V6edx0UETzP0z4LRBTLghHrUOKGKDWBkZJY:+m/WCuO7cYi3V6gRETzPXDIhLjKDWK6","tlshash":"aa02720eb02051f9447f77b9aa7b6514fa73422792018b017d7c88d41fb2468a7a6fbf","size":8887,"data":"","first_seen":"2025-06-03T00:02:28.42786Z","last_seen":"2026-05-02T20:48:32.362788Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.js?ver=4.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"483a3731bbe7046c1da3163da76dbe98","sha1":"5e96500865da826f8509334f034422be7662b46d","sha256":"9baa573e4378873b7ac81ccb1d954ce9bb2b1a933947ad3012263ddc604d8505","sha512":"58d67055e6d08e14b1133c1b7adb46b90816c5ba587682dfee61fedb903bb1f41b6f129e4b9490f5005ff7bcce6389ce970b64b200c0fdccd24e67e3e0350489","ssdeep":"1536:0XWVBuGGI2R7R+FXDyMibroAPoJATv2UsWNuJ:0XWVLGI2R7R+FTyMibroAwJATAJ","tlshash":"4a93ed0b55e6131294a731bd6bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","size":88955,"data":"","first_seen":"2023-03-07T12:10:10Z","last_seen":"2026-05-24T14:32:10.682703Z","times_seen":943,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc27408e08599d2318487d81d2f4a5df","sha1":"2b83c84d3d44f3c7380bce18ba2dc976ea77bed6","sha256":"d31da4b8adbd6e651faa89fdda7f28708bf23ae0f432110c6c7692f320338325","sha512":"4dbdebbd556fd93c0e6621aee7ae92b32c8add6e33309ef9b6192f028a603e882289eeaba76242d3b1dd90b1430bcedfe6bbe7d5f849cdfe09df17725dc0e077","ssdeep":"","tlshash":"6ec0127d382867340c7914aa7036d7a97db370147a526810805dcc589a74ea74c52c59","size":189,"data":"","first_seen":"2025-06-03T00:02:28.43103Z","last_seen":"2026-05-14T21:20:09.515964Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/plugins/wp-statistics/assets/js/tracker.js","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b050265900235acf7f4a1b156a0fd86","sha1":"fe894e0c4a20f9f03ca87c6c15171fc2fb82c2a1","sha256":"82b3766b135f3f126344c940a540edaee8584c48c91717aecf2565704a7f8845","sha512":"1bde4fb3431134e5c98fdfe1b06e37058b164257ee02f95da3a7166d8d92a4157ab5413691d845a08e828a47505af19b478803828b46ad82f8f037e39f555805","ssdeep":"96:aOXnn9aAS8rEvAO0zrElsLFYgdOnGWdOZPhq0holdQl+RWAsgYRnQAqMDmny:DnQv8gYO0HElsLqWOGAOZPSeIWAYD","tlshash":"42f175467ac256f2c8f23468152a3b3d75ab0dd23602e270a82cced3441c6c6d747f7a","size":7577,"data":"","first_seen":"2025-12-01T17:12:46.060694Z","last_seen":"2026-05-24T06:49:36.913813Z","times_seen":933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2025ed30a0f1379ad17a71d26213348","sha1":"7f461688cda7abfc779c1aae0028f72865e852f8","sha256":"bf17c82deac65bf9945ccb06dc38b673239a4a02df9bf2526ccb45796eb05b05","sha512":"f3bb12efb80c2df6f298fdf4e69196588d9cdd7967cac67db067c7698c256a652aa2b18bfc7a55545a62f4f900ec1eb087907e784e081ddb9f4d7bdb22c0edc0","ssdeep":"","tlshash":"4f01231b276105f141b34febabc3a96079315c435085fd11b45e43004fc0515aa7bef8","size":853,"data":"","first_seen":"2025-11-24T20:43:42.553868Z","last_seen":"2026-04-21T19:39:41.568503Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/js/jquery.min.js?ver=1.11.1","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27ef0cf5b0aad238d1db627eeb3e267b","sha1":"975c4d7e65f82e15203ca553a5ba51c016a939d2","sha256":"3d65f9e788f7ef78d0e1e40bdce42caf85b1c2b18d8eb1ecc358b113d01265d6","sha512":"2bdc53ad1a5b25057eb246745493939e732e485f690ef65b652b3523ed90032714912b73faca829c24665fe2ca10f404a3d4de9d58168b6b46e2189ca0cf47c3","ssdeep":"1536:YP1vk7i6GUHdXXeyQazBu+4HhiO2AEeL/FoqqhJ7SerN5sVI6xcBIPv7E+nzms9t:74UdoqhJvNPqcBQ7MfWWca98Hrp","tlshash":"3093d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","size":95844,"data":"","first_seen":"2023-03-07T01:12:03Z","last_seen":"2026-05-19T10:01:32.072417Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdc3f1f15e9606a8db5a349be2e4cfb1","sha1":"8558554ae01429d0f9b5f99edf6ff8add8096577","sha256":"52124a10efee54057da25be6deb92e07b54287126dc5de6c7847d153776ddc50","sha512":"f31abd299252fcf31d530973afccee110940ffa3e39f59bbed47015f6a2a06f782076f420f293d093569a8db256faa9878ea392733a9b07ad8548ec79bd52be9","ssdeep":"","tlshash":"e611107e113305390a5f98d77a92a3c53964804bb400827479bc67062fdf861d660bde","size":981,"data":"","first_seen":"2025-11-24T20:43:42.555669Z","last_seen":"2026-04-10T16:33:56.529775Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/bootstrap/js/bootstrap.min.js?ver=2.0","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa4447550b446ac73a77aa6c7582476d","sha1":"44fb7da919b5c169af65fbba84114c6b8233f704","sha256":"81106ddb86f999330c3dd90e9f7315f7341ca70e74f1b129e98ce66767c7a825","sha512":"06dac937d85031a2217f420e88306218e85305bcd940abde94de4557b7a5148bc672ec6502fdac2f8c8bfc5bbc7fe881bb601399986e745d86dc141bdcd8fe80","ssdeep":"768:p8LJD27UwlNAMlbWqXYR+jS1s8ep0smQirXf8u8GfpZZSQ:2Y7NBS1W8v8UpZMQ","tlshash":"f8f29546b270316107efb1e5415f020e72396a6ee90690bc78a5daf63db9c48317bf39","size":35282,"data":"","first_seen":"2023-03-10T19:54:32Z","last_seen":"2026-05-20T10:21:37.713475Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/owlcarousel/owlcarousel.js?ver=2.0","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db4c9c39a3af9343842156df81f25d08","sha1":"36af2c0bc454462355584a535897ca5ec6371f3a","sha256":"e04e2b4e27ae9881b1e161954cc00ba16c8c3a0ce73a179824756353efd6c481","sha512":"c402feb4cc9c11a4d2d30c8abf9f4f316e4115c1ce8cdde6df4645a904b5a864eeed249d372cfd52ee0d9def6fe50734d87f4ff4501b477882ef4708d65f2a68","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc79ThcGP:1cZelJ78m2cw8","tlshash":"70038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","size":40402,"data":"","first_seen":"2023-03-07T01:36:39Z","last_seen":"2026-05-24T08:21:56.912882Z","times_seen":1612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"104.21.5.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","size":112428,"data":"","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de2665a5a7973e34a79f2433a2150568","sha1":"354a2905845a90a436dd99b1eb6dba2f8b234464","sha256":"e871a9e963c7f1db2ddd50e89c3b80ac1fc3162433474693abb9235827f118c2","sha512":"dfbefee44d865268ae0bd69625e513e5a34ac5257e723e5feb00d91868c84cd9be1891861f58dd78109981be0b00eb03a2eff10de9acc5d7d07eaab1ce60bdda","ssdeep":"","tlshash":"48115469bec05da508e16bc4811c7e251593985354048b64d2b89e4e06edde8735630b","size":948,"data":"","first_seen":"2025-12-27T04:32:19.842923Z","last_seen":"2025-12-27T04:32:19.842923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31ad016334845921bf716dad93b35fa1","sha1":"2b8b1c52bc7889afcd0b177167353c2c65954633","sha256":"17c26d0f1e9c74c773f9594242deecd0f1f56881b7a611fea187d489fe46dc4a","sha512":"d0eab833a211f54b72792daa2da5646dd79eb11e29dd85a58df56c365ceb1fdbb1470a0465b05a137b5e378642cfcfc6360d2db5617e365b1a0eee25397e8035","ssdeep":"","tlshash":"54c02b8c210a0c7051f72740cf3fb600b003322494d07e72880a23044d30e03d744c10","size":153,"data":"","first_seen":"2025-12-23T17:04:11.51188Z","last_seen":"2026-01-16T13:01:45.279711Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-24T17:13:38.624155Z","times_seen":16880,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midgerelativelyhoax.com/23/a0/75/23a075760b7ad3396d398e78c8e72783.js","fqdn":"midgerelativelyhoax.com","domain":"midgerelativelyhoax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"92c29ef5ba6a574686e708597924bbfe","sha1":"2a079590e39827c6de657aeb0e7619761586481b","sha256":"fbd96d07d4acb6236c2f0e476b7c70fe02501e5ec8a04eed120eda71cb70a5ff","sha512":"9e287a8a21af92fd3e6a415597342c80eeb2b486be4388b0efec78d64ccad1267897dc4bccecceffbe281edde3747441335dfa33f547f60fbb9e920b1f638317","ssdeep":"1536:yDdqQzFvkdWY4wWobxg+kH+pNmE+LbMTEhBuvuQwOM4uYU9vgyZatNBYPSQE21g5:8LkdTUwMb92","tlshash":"82b3e68c7f45f1ac12b6b033323f952ef41a4d9548ace5cce213e4e8a9a8b17d539b54","size":108016,"data":"","first_seen":"2025-12-27T04:32:19.826979Z","last_seen":"2025-12-27T04:32:19.826979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8X9FVCDM8V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1d5058c80f966920a2e4961b838d387","sha1":"b673b5a29be039565944dcca129fe1f3d9cd920c","sha256":"42c53522481670d4b6483079989ca14534564a78e41850859784675d2b9c6c2c","sha512":"3b9304ebff1b8bfb58f508fbe3a9bb9477ea25d1625dc314cce6ff11ef21a99db7962252326d19560e0dcb0f8c339535e5cd4c5ceec2c1d2b69479ef555fa579","ssdeep":"6144:3827nTmlObujKYz1U95efDHHYOyQFzvnsdRiCjFW5ajaJddpC1xY:3VTpbuNz1cEVnsdrpWjNpb","tlshash":"9c941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42e7469a4237f7c","size":433313,"data":"","first_seen":"2025-12-27T04:32:19.811251Z","last_seen":"2025-12-27T04:32:19.811251Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/img/user.png","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/themes/EgyBest/components/assets/img/user.png HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 10960\r\nlast-modified: Wed, 24 Dec 2025 20:08:31 GMT\r\netag: \"694c483f-2ad0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 200996\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0Aw33ampKzQt5V6ilkeLMZYcT0q4QhUIJh3DBVSnxCWSUnw7jRK6d92v7LGgDidUYIqgF3MJimRc7tk7RzCzRaoXDuuWiUFyxRi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b461734cb42120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10960,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGB, non-interlaced","md5":"84ca8ea52904ffa7eb23b4d8ed1c3c4d","sha1":"209279ae0a03d1358a06f075bca1159cf7931ada","sha256":"a52b05742a3298f9bd9dda94233308604369649ef04e77f578ae44d6fd216a36","sha512":"f7d64c97501c4b1d8fbb798910c68497659e30cad3f3fd755d46ed60b2902d80de7bc365eb79fc067e5fe0a823f5506fb873a7003d6d0e649dbae748e542f6d2","ssdeep":"192:1IW4inrWUNWtaZ07Hnv3MiF0GpWECR7EmsHx/MtEEM8iQfx1h7YUOuhaUpnlVMfF:1ImnrhW97v3MU0GwbRQmg/0EEzii7YUM","tlshash":"4532ae6f812f69eacd8e3a69a8030cfd65a85811fdd599f1e2439b3c417c5d60ed9030","first_seen":"2023-08-26T10:52:18Z","last_seen":"2026-04-10T16:33:56.524664Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"preferencenail.com/sfp.js","fqdn":"preferencenail.com","domain":"preferencenail.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"preferencenail.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 23:40:35 GMT","end":"Tue, 27 Jan 2026 23:40:34 GMT"},"fingerprint":{"sha1":"AA:22:33:AC:0A:FC:0D:31:C5:9F:92:99:20:7A:02:E4:46:E3:08:8C","sha256":"72:5A:79:00:74:D1:90:EF:9A:D3:3F:01:E6:E5:14:1D:41:4F:F2:28:D3:FD:4C:AA:70:DE:D8:BE:C2:15:3F:EE"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: preferencenail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 27 Dec 2025 04:31:51 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32181\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nAccess-Control-Allow-Origin: *\r\nVary: Accept-Encoding\r\nHost: preferencenail.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 040e1fafe95da92797e317b0422af80d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-05-24T17:13:38.624155Z","times_seen":16880,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":62,"dns":0,"connect":17,"send":0,"wait":21,"receive":21,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"preferencenail.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"172.64.146.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 17:37:04 GMT","end":"Tue, 24 Mar 2026 18:37:01 GMT"},"fingerprint":{"sha1":"05:4F:CA:93:1E:46:6C:B4:A4:49:3A:2A:0C:AD:DB:CA:8C:CF:BC:9C","sha256":"81:B0:0B:B9:30:D8:5D:FE:11:36:CE:28:36:04:4F:41:74:05:00:57:EE:04:F0:1D:44:B3:B4:6F:A6:4F:D8:FD"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://agybest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://agybest.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=0802ac29bd8a47a6e7d38dd675d7feac; expires=Sun, 27 Dec 2026 04:31:51 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b46173ac977723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8e8ee2ad417e2d5bee673df3fe7d5f15","sha1":"3770d262a5f4439747c6e0cb5902a8f96e6d1ccd","sha256":"a691bfab24ca7dc77e3a9b275dde07ae4fd79a4440b48cfe5385712bbbc7d676","sha512":"0ead05fbcf0b44f7736f20a36230b11fc4d565fbe84691404851a9b0dc6e50087e7328897c4a91482e5505fcbf0ba696cd590e391ef45df436c81fd960710c34","ssdeep":"","tlshash":"53a0228000280fc800020a0ccec3838a800c20820800ab8880c0a00230eb28c0008ba8","first_seen":"2025-12-27T04:32:19.804861Z","last_seen":"2025-12-27T04:32:19.804861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":21,"dns":1,"connect":2,"send":0,"wait":28,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.60.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://agybest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nCookie: uid_id2=032c236a-e38b-47d2-8004-f8cacaab8b25:2:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://agybest.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5326a8773b677e3f7c4d3073fa714e8a","sha1":"e56fe8f5d98cdead2346ad8f3f4c0b6dfffa9b41","sha256":"cae8480e4a680260964beef115f51fa3104ffebdb2559399e35fb6cfda308bf4","sha512":"b6a04c34602bff4659499f0c4e16532a9d4387c95083e8ef8b6c93f7ae849f682a8eda6b9ed32558b8c1f0efc4eae9b59e4de3dfe3b6d31c322344fbde1cf7f4","ssdeep":"","tlshash":"33900434c47710515d44374d1d405141005455071f5015cc5c03ddd114fd0043551405","first_seen":"2025-12-27T04:32:19.806737Z","last_seen":"2025-12-27T04:32:19.806737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b7510.com/5/8880518/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802ac29bd8a47a6e7d38dd675d7feac\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0","fqdn":"b7510.com","domain":"b7510.com","tld":"com"},"ip":{"addr":"139.45.197.115","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:52.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b7510.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Oct 2025 05:16:54 GMT","end":"Mon, 19 Jan 2026 05:16:53 GMT"},"fingerprint":{"sha1":"D4:41:24:3C:CF:C7:8C:56:F0:95:50:DF:63:59:AA:07:08:41:B7:48","sha256":"DF:09:31:9E:FB:30:04:94:33:7D:77:61:1E:14:8B:26:7D:32:A7:F7:3C:CC:ED:BD:06:FE:FC:B9:E7:52:70:5E"}}},"request":{"raw":"POST /5/8880518/?oo=1\u0026js_build=iclick-v1.1670.0\u0026userId=0802ac29bd8a47a6e7d38dd675d7feac\u0026dmn=bvtpk.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: b7510.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3829\r\nOrigin: https://agybest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3829,"data":"{\"sync\":\"TBtSUh8cJhwUBWcfHEsSAwEFUA5MXwMBbAIlKz9KWUBcHAtKQ1AVSQZbGgxbGwkEVkYLASoQTktDAVdGTBkCRExXBA8fFA4eFkpPUhRLDk4+HQY0BV0ZMkBQW2kNHCYfDD1RESZOBwkxGBNcMR5fZkBBJRcYHyoBTzYaUUNQX0dQQB0yU1xHUxkQHAxXWAhFW1MSHw9JSARCT1lJbEYeRkNaWUBQABUbW1tfR1BBBwkVAwMaWAALDldYCEVbSQ1IVFteFgAKFQMDGlgQA0pPUAtFW1cDSFRbXhYADEcbCQZWRgkcV1gJRVtcFwsCSUgEQk9fWhEMS0hbDBhAAllVGxMeGklIBEJPVFFsWRgOW1JFThoHDmYWDkxRQxhMAkRaQ0NYXklEVwpRDR1cD0hUW14WDQVoVlFcJQ0XDBAaGlNJFUMdBwUtXwsURGZfUxQDDQBXWAlFW1oOBgEZLVALHUNREQxKSFseEAxcBgsbW1pCSRVVAwhHWFdFWF5IRFcMVDYXVRJIVFteFg0CW1ZBaR0FFB0BQAJbVRsRDAJJSARCT1RKWhRAVFVKFg5MS0MJTUgEGAIWVFwbG0NYDkZDWFlASAcLWkNQX0dQRAIMQ19cRBc7HQ0BB1sdFktDUFtHUFoLHhUDAQEHSFsaHEACSxVVFwceAgJRTEEVS0UUQEY0DQYDGkVbSxEaTFFBGEwZTVYRDEpIWx8CQAJYSwFRRkwcGhZUXAcLBxpYExAfV1gJW0EJTUgZAhoWVFwHCwcaWBMBSk9SFEsOQENQXkdQXRZPDQkfFA0CGkpPUBRLClgJSFRaQgZaQRVKWxRAVUlaQU4aGg4bW1tcU0IYTB5WThEMS1ZBWFlATBomXQQeCwgGUQpPDQkfFBAXDAlXWBokFkMIBgIKXQFAXRcRZF8UABYfBkJ2PVkIUUReUFJjBwMBDQgWAlJNU1UQTlNIClVEXkJScwsOXFYcBEpVSVhEUglJP1ATDwgEChtfXgMXAxRWRhcYV1gJRVtJBUhUSRtaGghFV1JaVxQdDlgUUQwOXBNQBxgifVUEWU1WRBQFFUUFBl5ED1AEHQsZSF0dPX4CWlgOAQsGFA4VGR1fTBwHDgVRHFdeSmN/QQ0XHBAQVggVFBEOCEYEXQsaUksJXwk0MFMcDEwMC1cABkMbFlJDG15cRFMIXhAbJSsDS1UbCQMCSUgFQk9CUFcUQAoMBBlOGg0LX0NQTEleFh4BFQMRXg4QCRtPTRcIHkADDx0fXFcBABgcdw9fXExNMVodK00cJVJLKkURKlQSAQQTPlxcKTNHfFFceFhHSy9LEVZVEn0LEzslXCxNR3ktXH1YT1ZeV3BXSA94FnJDQUFcWEd8UFwBVE8qU1d2XUhzABYOTkE9UFAgC0w9AERSWkYBQBwMWV5WRFcQEQEbBUtEXH1ZTy9cV3BXSA8NFnJDQUFdUCYBTEEBRC5WTjAHSykOHAsDV0E9UFAjD0w9AERSWk42DEsschx3Dl8lTk0xWx1RTBwlUkspQRlbQhUVEVgdRkNYWUBME1sDQz86KFAYTANVGwkHVkYXCQVAAksuUA9ZXEleFh4ZFQMDGlgBDwkZQAJaThVDAg1JSABWQRVdXhRASUhEVxBMHVsDTFtCSRFcMQJVUxEMSkhbBgJAAlhVGxYOTFEUVQIeUhURWQkHCR1XWBolEFcUEk4TSgIxWwMbHxQSDR0MEAwaUx9YDRkLR1BXBjJYW1lpEwodDQ1AAkRIFUMdBwUtXwsURGZfUxQDDQBXWApcTBVDCQEHHUYxCVJJR15YXktcWUBODBddDhhMUVAWQk9QWF5TCgUdG1dYCEVbVw1IVEkXWkM4ZBsfFBQICkpPQF0HVGwyRgsFUBhMDlhVXEQlAxgFABYaU1tKEw0MSV4WHgtbGwkUWEhbCxkWGlMCRE1IBBgCFlRcGxtDWA5GQ1hZQEgHC1pDUF5HUEQCDENfXEQXOx0NAQdbHRZLQ1AVSRtHMQxZXUFZEwBbUhMDVBocFUMDHTQGRgcJUldHFEACGAQGBxRLEEo+CQYZHVkHGFpmCwAlCws3GwdPDAsbWwwPBwFRQk9eSmxVEhYWBRwXVUtDXwAGHQ5eFgceaFxXUR9GQw4UDksMVRsIGTEMF1cFAhUDR0QPAVVKHBFnHhxbPgEHH1AOCAxbSlYaWA0KNwIHWjYSUBU1WFtEawEfaFdWQR8WW1ITA1QaHBVDAx00FlEdBkNWQ2kJBR8JBwsaUx9YDRkLR1BdHTJUUUFZFw0MBSoNSAwLWENQCAoeRwsQGxtdUwlGQ0pGWgxdQQtYU1dTUBhMDltQVlgOOxAMV1gaHBdSDwUZBVAYTAxRX1paEwUNDSoLXEtDG0NGTB8AVQgLXlpsRRURCwsQPVENWwNDSEJJE1AYCEVNWkUfFiYBEUACS1sVQwkPBgJVBwpZZlpSWF5bSllAWxwKTQ4HMQIWa19PDRsRGlgHDBsBDVU2EF0+WExRUBZCT1RVWlUROxAMV1gaS1UbAgUdH1AOTE8bG15TDgwWDFdYGgMKTQANTEdQRjEYXl0RDFhGVUoaA2cAHRtbSExHUFUKCV5NWlkUBRU3HAZLS0NiPBc=\",\"async\":\"TBtXQwgXW1IOQFoIDRtbWEJJGl0AGUQbCQRWRhsEAQoaU0sVQwIHDxZRADJeX0FXFwFbUkBVFEsNVhULAklIAVYQGxtRVw5GQxNXC0s2G1gVSFRbXhYNBVZLVF8UA1tSRU4aChFYEw0HBRVrGgRaXBEMSkhbDBwRWwEYSwYDAAwtQAcAUhsJBlZGFQ0DB1RLQwkcRkwDG1oaHhUDSEtWRhsEAQoaUwIbEh8eGx1GGghTGwlQGwgKDVlAWR8YUA0LDAcXFlQLVlVAU1ZGCw0UEVcHWwNDBAFGHFUYBFBYR1kISRsEAAdMBhZNCUgTR1BcBwlTXF1pEwILCRgHGlNJFUMJAgIXWhoyXl0RDFgRFwMbDU8HWxVDCwgNG1gHDENcbF8eRkNKV04aHQtYBwwHCC1HARhFWlZpEwBbUldAFEsYXRcPHB8bRwsfaFBXFEBGW0RXAVkECVgIDQA0G1BMVxUbHxQZEQocGg9nAB1mUEhUSVAYTA5CSkdZFzsQDCpQGlNbG01IDQcbVwUyXl0RDFhGVUoWDUsdWwNDSEJJH1EaBVhdEQxYDgocFAUaRVtLPh8HD1AOTE8bG1xXJQ0dSk9AGkVbWAUOBx8bWwAMW2ZaUglGQzMoHw==\",\"quality_options\":{\"hil\":1,\"jsp\":1,\"ng\":false,\"ix\":false,\"pt\":false,\"np\":false,\"nw\":true,\"nb\":true,\"sw\":1280,\"sh\":1024,\"pl\":\"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\",\"wy\":0,\"wx\":0,\"ww\":1280,\"wh\":1024,\"cw\":1280,\"wiw\":1280,\"wih\":1024,\"wfc\":4,\"sah\":1024,\"navlng\":\"en-US\",\"drf\":\"\",\"wgl\":\"llvmpipe\",\"tb\":false,\"btz\":\"UTC\",\"bto\":0,\"pnt\":0,\"pnrc\":0,\"bml\":0,\"bmi\":false,\"vsbl\":true},\"client_hints\":{}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 27 Dec 2025 04:31:52 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://agybest.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":72,"dns":14,"connect":26,"send":0,"wait":29,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"weirdopt.com/ad/advertisers.js","fqdn":"weirdopt.com","domain":"weirdopt.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"weirdopt.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Oct 2025 01:14:37 GMT","end":"Wed, 28 Jan 2026 01:14:36 GMT"},"fingerprint":{"sha1":"5A:67:AA:88:D5:BE:C4:00:42:86:CC:4E:FC:E7:73:FE:CB:85:71:60","sha256":"F5:6C:A4:39:AC:04:F6:11:7E:DB:94:93:4C:93:FC:EC:A2:B4:4E:A4:FE:19:8E:22:C0:D8:D4:84:67:37:70:C0"}}},"request":{"raw":"GET /ad/advertisers.js HTTP/1.1\r\nHost: weirdopt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 27 Dec 2025 04:31:51 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 0\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: da68e2654fe901ede472b8edbc5be716\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":57,"dns":0,"connect":17,"send":0,"wait":17,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"weirdopt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-27T04:31:50.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/ HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-pingback: https://agybest.com/xmlrpc.php\r\nlink: \u003chttps://agybest.com/?p=9748\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2wSz1B3G2kMABAId%2B%2Fv6O%2BMHPl9MfYgXyBASgJNRiSWqBT92pPwdKFdClUWd43Kmc86ZaYE%2FQgEpW45Sf7TAL%2BL45vKPKy%2BlkT%2B\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b4617324fed0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Slick:1.8.1","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149902,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (857)","md5":"6aec210426926eb792766bbacab70489","sha1":"bfd6277773f91ca8418d01f0664fd0348f7431d9","sha256":"1ab304174b97d13d04e29e040264057f19e5b7ffba3f260523fe86d1b8621cca","sha512":"ff6195884ef86f5d817191b1dd7635aadb51adaa2ee5bd122a947765e1fb35b5c8e7a08bf9e4eb1b5c269864c9b456d6f12c8fdb453917d10fc2f2f08de92d30","ssdeep":"3072:R5HhvIYUwEix1d0wJIUbJsyI2Q6gfXLFY3uSo6HHr0CorPL2bvm:R5HhvIYUwEix1d0wJIUbJsyI2az+bvm","tlshash":"88e3e6e25a6a10622407d59d6f617b4db3565007eb0eed2877fc225c8fc7ee284b238d","first_seen":"2025-12-27T04:32:19.809846Z","last_seen":"2025-12-27T04:32:19.809846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":21,"dns":0,"connect":2,"send":0,"wait":186,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/plugins/wp-statistics/assets/js/tracker.js","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/plugins/wp-statistics/assets/js/tracker.js HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 20:29:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694c4d0c-1d99\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 200996\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7EN5ufE6bB6dsP68yJqJ3G8ykTFiv%2BxOuR2o4IdnGT8u4GbcHeh6c3sLf5p5t8y0Jj20%2Bo%2BLl3JdBN3nk%2Fl1yLkV%2Fclts%2BDLQk0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b461734cb43120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3110)","md5":"0b050265900235acf7f4a1b156a0fd86","sha1":"fe894e0c4a20f9f03ca87c6c15171fc2fb82c2a1","sha256":"82b3766b135f3f126344c940a540edaee8584c48c91717aecf2565704a7f8845","sha512":"1bde4fb3431134e5c98fdfe1b06e37058b164257ee02f95da3a7166d8d92a4157ab5413691d845a08e828a47505af19b478803828b46ad82f8f037e39f555805","ssdeep":"96:aOXnn9aAS8rEvAO0zrElsLFYgdOnGWdOZPhq0holdQl+RWAsgYRnQAqMDmny:DnQv8gYO0HElsLqWOGAOZPSeIWAYD","tlshash":"42f175467ac256f2c8f23468152a3b3d75ab0dd23602e270a82cced3441c6c6d747f7a","first_seen":"2025-12-01T17:12:46.060694Z","last_seen":"2026-05-24T06:49:36.913813Z","times_seen":933,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8X9FVCDM8V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-8X9FVCDM8V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\nexpires: Sat, 27 Dec 2025 04:31:50 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143148\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433313,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d1d5058c80f966920a2e4961b838d387","sha1":"b673b5a29be039565944dcca129fe1f3d9cd920c","sha256":"42c53522481670d4b6483079989ca14534564a78e41850859784675d2b9c6c2c","sha512":"3b9304ebff1b8bfb58f508fbe3a9bb9477ea25d1625dc314cce6ff11ef21a99db7962252326d19560e0dcb0f8c339535e5cd4c5ceec2c1d2b69479ef555fa579","ssdeep":"6144:3827nTmlObujKYz1U95efDHHYOyQFzvnsdRiCjFW5ajaJddpC1xY:3VTpbuNz1cEVnsdrpWjNpb","tlshash":"9c941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42e7469a4237f7c","first_seen":"2025-12-27T04:32:19.811251Z","last_seen":"2025-12-27T04:32:19.811251Z","times_seen":1,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":240,"dns":3,"connect":10,"send":0,"wait":30,"receive":34,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/js/jquery.min.js?ver=1.11.1","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/themes/EgyBest/components/assets/js/jquery.min.js?ver=1.11.1 HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 20:08:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694c483f-17664\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 200995\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWMMQusXf%2F4aBqQqNua%2FNlcf1jxpC4oEIMTjEhpZLMcYgOIv48g6xW7bDl4XDZPRkQ9%2BVpQwTRkA69bvQuCnHmrBMTK8OCegcj2T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b461734cb44120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95844,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"27ef0cf5b0aad238d1db627eeb3e267b","sha1":"975c4d7e65f82e15203ca553a5ba51c016a939d2","sha256":"3d65f9e788f7ef78d0e1e40bdce42caf85b1c2b18d8eb1ecc358b113d01265d6","sha512":"2bdc53ad1a5b25057eb246745493939e732e485f690ef65b652b3523ed90032714912b73faca829c24665fe2ca10f404a3d4de9d58168b6b46e2189ca0cf47c3","ssdeep":"1536:YP1vk7i6GUHdXXeyQazBu+4HhiO2AEeL/FoqqhJ7SerN5sVI6xcBIPv7E+nzms9t:74UdoqhJvNPqcBQ7MfWWca98Hrp","tlshash":"3093d8d9b7d67062977730b850bf510bb13a98eab80c4c60f1a4d8e47e74a89507bf2d","first_seen":"2023-03-07T01:12:03Z","last_seen":"2026-05-19T10:01:32.072417Z","times_seen":195,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.182.60.117","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"traffinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 19 Nov 2025 00:00:00 GMT","end":"Fri, 18 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:9F:BE:35:27:7B:7B:85:C9:B3:FF:0E:CA:F6:0D:13:B0:A9:A0:BB","sha256":"81:A4:38:32:0D:BC:66:C8:7B:6D:08:BC:93:91:76:73:A2:BD:D0:53:3C:BF:2F:FD:B8:87:00:C6:EC:3B:6C:77"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://agybest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://agybest.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=032c236a-e38b-47d2-8004-f8cacaab8b25:2:1; expires=Tue, 25 Dec 2035 04:31:51 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5326a8773b677e3f7c4d3073fa714e8a","sha1":"e56fe8f5d98cdead2346ad8f3f4c0b6dfffa9b41","sha256":"cae8480e4a680260964beef115f51fa3104ffebdb2559399e35fb6cfda308bf4","sha512":"b6a04c34602bff4659499f0c4e16532a9d4387c95083e8ef8b6c93f7ae849f682a8eda6b9ed32558b8c1f0efc4eae9b59e4de3dfe3b6d31c322344fbde1cf7f4","ssdeep":"","tlshash":"33900434c47710515d44374d1d405141005455071f5015cc5c03ddd114fd0043551405","first_seen":"2025-12-27T04:32:19.806737Z","last_seen":"2025-12-27T04:32:19.806737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":170,"dns":46,"connect":21,"send":0,"wait":22,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bvtpk.com/tag.min.js","fqdn":"bvtpk.com","domain":"bvtpk.com","tld":"com"},"ip":{"addr":"104.21.5.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bvtpk.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 20:07:09 GMT","end":"Thu, 05 Feb 2026 21:05:30 GMT"},"fingerprint":{"sha1":"D2:20:C9:EE:4B:2D:3A:82:43:E2:14:9E:C3:25:30:01:9F:8F:BB:C3","sha256":"D2:57:0B:6C:75:32:2D:6D:C0:F7:1B:32:FC:56:BA:06:7F:64:4B:FC:95:E2:29:A1:4F:59:5C:DD:D3:8D:37:7B"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: bvtpk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: 4bbb9964d268cf1900cb76f3a5751a05\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 724\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 27 Dec 2025 04:19:46 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkUPi2uwXcVWjD%2BFz83n%2FNr1%2Fd4WZjQeGfs8WHj1cipBgdufYjx%2BLPp1Owj52p8sCHz%2Bh66AsIKg%2FTcwa12mYWcH8DuvMK0%3D\"}]}\r\ncf-ray: 9b461738cbec56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112428,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6105483638bf5e8a75281fe5e1724593","sha1":"eda0189eb558b183b96f986dc5d19383f38d0cef","sha256":"14de16fbe0c19c617049209624382077fc976dec843e4c62b49ba9ad492231f0","sha512":"13b76442e6e3e2af5315da9b98e1ae6902c966521edf1b12373e7fc488902639d73b5fb515c085c6ee0c6e666ffbf4adda3acfb8ed8f5353fbea2cdec7771133","ssdeep":"3072:tXki1TG8YlAVRzIqwL76WJHpYx85/MVzUL:6WTGvlVqw5JJdQza","tlshash":"7db3295673a277d21a6e60d42d57d60573fd8c80488f8867e3c8787972d081cd3abbea","first_seen":"2025-12-18T11:35:07.715482Z","last_seen":"2026-01-08T09:54:56.313421Z","times_seen":771,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":50,"dns":20,"connect":1,"send":0,"wait":7,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"bvtpk.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/uploads/2025/11/cropped-egybest-192x192.png","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-egybest-192x192.png HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 10133\r\nlast-modified: Wed, 24 Dec 2025 20:08:40 GMT\r\netag: \"694c4848-2795\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 200996\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cm1508hxlt1ZsWSqHILiVQjqJC4CacivJAkH32h%2FTq21kWmjKa0eiBtLd%2BTzsomG6rcCtNeJWKfPxfsoDDbGYpZXAjUPjwh6%2BeLT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b46173b8bb3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10133,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b5b99a0e9f4af30a1d00a14a4a12a94a","sha1":"21b7695ba754fa685219085427f8cadd3b56c73d","sha256":"42fbc4c17edba350ef01b87e44c650889d5a52ad526a109fa3d4b0a71c4aa340","sha512":"ad1daa155b9a38aa908ff37ac8f153ddd7bd7572b4ba11fc8afac9a005f27db9579d5e50adb2d92fc627bd2f039067ef8ea2e0b2c323e295dd4fad85be8725c8","ssdeep":"192:gAoSkT1HBlwd9pZtOveJOqryFrxbx07f0VHkn0f3js9zlP8CEoHRMZ1IHKOSgIvU:gAojdMd9MeJDryt0yHk0fzwmCtGZ1IHt","tlshash":"e522bfbc8aab9d81f95b9031549b3480a5f58dcf53afc9f4085aa7870a11f5db0ea142","first_seen":"2025-07-27T15:12:11.622749Z","last_seen":"2025-12-31T20:08:30.266377Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/uploads/2025/12/egybest_logo2-5.png","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/egybest_logo2-5.png HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 7724\r\nlast-modified: Wed, 24 Dec 2025 20:14:44 GMT\r\netag: \"694c49b4-1e2c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 200995\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rEdQTC8cizS%2BnMspAFdrEGgPWIL%2B%2F8c6T8XvyaQKwgdu%2F3POu3zkRUZlGFUKzKppGnaUv9sr59eHeDaK5Cny1W1AI5MNuE5z%2F2K2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b461734bb3f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 195 x 53, 8-bit/color RGBA, non-interlaced","md5":"c319e29814495590107ad824c65066dc","sha1":"21a591e18e8b9351caaaf21c9aec3f4d7d9ea284","sha256":"4b7e7145389d99abfcb280903eca3ed54a5421f061bcb82afa231f47e134e793","sha512":"0bc6af017e824efaeaf8a839ee952c64d95867fec5ecab13c7855e6a7af65882b32d62efd0ebfb81a1ac4e9254f57146dc5c856019b1bd2d7fce56fc9032cc13","ssdeep":"192:gShFoqNMSC1s4eyQYu2OZAB2Po2B4vi4FDr64PR0mmHU:HXoYMSHN/VBo0mmU","tlshash":"eff1aff42229c9e54d23316352282b70171fee3b4fe42d4a9c7b9dd611d3060abd8052","first_seen":"2025-06-03T00:02:28.425717Z","last_seen":"2026-05-16T09:57:34.079714Z","times_seen":27,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 394\r\ncf-ray: 9b461734e98eb4f4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65999b45-18a\"\r\nlast-modified: Sat, 06 Jan 2024 19:26:13 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 698399\r\nexpires: Thu, 17 Dec 2026 04:31:50 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Co7QcIl23iH1kJq4Jfd3EJn%2BL8zHYTdHU5clrEtIws0jA06SYbDMwFAJMFAgVRNqQETKXkWFmHOtZ%2FXiTCTYVgJ0mYubOTzohjCuBELSHHusFi2tKSweYYAxxo64AYCnPDPSlWC9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1369,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1327)","md5":"6a62ad0f300504c583e7797c79c2d8ab","sha1":"e6e4f113fc2d008516d21228dac93bb6a2fcbb53","sha256":"50ad448a8a5720bf8a5617db15af31ae60163de06331576f60c6244c012ffc72","sha512":"c879273f5fc0c11fb2c76e9c075cb4723bd050cbc46b63c5cedd5cf4b952e29450e4d39364559b8418a0f97f46f5e616ffc9b4ff8397371f29c49eb3e7bc7477","ssdeep":"","tlshash":"c2219d551496115a4027d3125ed3da9a38ebf1525c3607cef7408305ce8fbae2dd29e7","first_seen":"2023-04-05T14:54:49Z","last_seen":"2026-05-24T16:42:27.729277Z","times_seen":18165,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":13,"dns":0,"connect":1,"send":0,"wait":12,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/uploads/2025/12/src-default-new-5.jpg","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/src-default-new-5.jpg HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4720\r\nlast-modified: Wed, 24 Dec 2025 20:14:44 GMT\r\netag: \"694c49b4-1270\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 200996\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kD%2ByQ0r%2BRrxJcrQqKUo9J7SiTeg9Cv%2FCC974D05OHqS7SCTOxaASyNU1EeQQNyFex5vSzTgEGXzDHPmrZsFx9emau0UVnCQHQF7Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b461734bb40120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4720,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 175x263, components 3","md5":"a73a1de4af8cfb202312b296abaa61a2","sha1":"48b06803630e5d00f0d953db31240912b21b8a75","sha256":"1f027dbbe363187f01f1b007afc3607aaf7bf85db270b3b32ac4e2954e4f8282","sha512":"42342a241bc04caf712dec03de9c08ebedc573d6abc0a5141c117cd36014707ec6d8f90774e1337799415b7e9237d514605c5b4d5b693bb8c6896dd444ca439a","ssdeep":"96:GurV5qBWBZFt0bHQH4Hj0PMJRCvUnR1r/hfJgu1vQG3msflZ1BcVXCvP8nPBe9:hrHcId0bwHa0PMi8nfhfumvQG3Nfl72U","tlshash":"59a16cd06fa24b15dbfa20f4c85ba3ceab99d3d3f670b78136144b06e7c97198060658","first_seen":"2023-05-07T18:44:58Z","last_seen":"2026-05-13T21:05:45.192904Z","times_seen":75,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/owlcarousel/owlcarousel.js?ver=2.0","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/themes/EgyBest/components/assets/owlcarousel/owlcarousel.js?ver=2.0 HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 20:08:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694c483f-9dd2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 200996\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buSryl0QC1PiwAgYb4ekWMQ%2BLCavoJUMuboed0njJw8I9StTtba69VmLG20mjppjOm%2BtwmXxBkJGRtAaLRxhOYnRNiFT36Yb%2Bj%2F4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b461734db46120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40402,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32068), with CRLF line terminators","md5":"db4c9c39a3af9343842156df81f25d08","sha1":"36af2c0bc454462355584a535897ca5ec6371f3a","sha256":"e04e2b4e27ae9881b1e161954cc00ba16c8c3a0ce73a179824756353efd6c481","sha512":"c402feb4cc9c11a4d2d30c8abf9f4f316e4115c1ce8cdde6df4645a904b5a864eeed249d372cfd52ee0d9def6fe50734d87f4ff4501b477882ef4708d65f2a68","ssdeep":"768:MCcZ1I6+gyfJ78tKOGOrnepjMzZG+uluJe+KSzVc79ThcGP:1cZelJ78m2cw8","tlshash":"70038446b3302d2a8a9b91b0663f020bb13b241de415947d797d9ade6d79c4c213fbb8","first_seen":"2023-03-07T01:36:39Z","last_seen":"2026-05-24T08:21:56.912882Z","times_seen":1612,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-json/wp-statistics/v2/hit","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"POST /wp-json/wp-statistics/v2/hit HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 405\r\nOrigin: https://agybest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":405,"data":"wp_statistics_hit=1\u0026source_type=post\u0026source_id=9748\u0026search_query=\u0026signature=13882534f3c02755fe145fb6e2aac77c\u0026endpoint=hit\u0026referred=\u0026page_uri=LyVEOSU4NSVEOCVCNCVEOCVBNyVEOSU4NyVEOCVBRiVEOCVBOS0lRDklODglRDglQUElRDglQUQlRDklODUlRDklOEElRDklODQtJUQ5JTg1JUQ4JUIzJUQ5JTg0JUQ4JUIzJUQ5JTg0LXN0cmFuZ2VyLXRoaW5ncy0lRDglQTclRDklODQlRDklODUlRDklODglRDglQjMlRDklODUtJUQ4JUE3JUQ5JTg0JUQ4JUFFJUQ4JUE3JUQ5JTg1JUQ4JUIzLTUv"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nx-robots-tag: noindex\r\nlink: \u003chttps://agybest.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\ncache-control: no-cache\r\nallow: POST\r\naccess-control-allow-origin: https://agybest.com\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2wSH4aAlYvxZxtTHfP9BpN4zoftYFFUDQUnWEFRgWX802kKF0DHOu5WLDeZmmsW8MFPrNGgS8x72eay9IQhiTvxLhepm9%2Fk7ynv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b46173aab99120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"28ec1eee5f4049e3c4f2135069c1d2c8","sha1":"3505519507ca1c2a089c46e100b80408ca278421","sha256":"edc48cd3b0bc4fa7ba23aad40b8508a17d370ca38be174bae2a2f64634e65a2b","sha512":"f71618e40ebaa14ab6d523a2341258c0da264b545388f8fffd14c31c64b35f94b21eb633316c4d77afcd864aade1db588ef6387ee0c4787e6f7770db0abc1183","ssdeep":"","tlshash":"f06000020000002088800a000220aa302a200a20080a0080000c30200020080800a002","first_seen":"2023-04-06T19:00:00Z","last_seen":"2026-05-24T16:17:53.337262Z","times_seen":11032,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/uploads/2025/11/cropped-egybest-32x32.png","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/cropped-egybest-32x32.png HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 896\r\nlast-modified: Wed, 24 Dec 2025 20:08:40 GMT\r\netag: \"694c4848-380\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 198431\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2Ia5bLISKzMDobNl7PctzFcQON%2BrojM8Oa2vHFcCEKMeH4ceB1hn4kJzeLx2gT2wk%2FcfE6sEMNu606mdZjv0PQY58Svvq5zyl8h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b46173b9bb5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"08f5cc5bf00cd9fb3b8fb2647e6ef33e","sha1":"73f266a49755a65137b74eff0fb7632de5b0e2d0","sha256":"442dd0fc9bb62e8c7feae2cb717d03049abdd2e69ccbb1132643542cd203ef93","sha512":"ce5a4dba755296187392aab6fe91176df163a9dfc505f260728e1c7449053b301a6ef8e5b2d989fe8974a9757709f5d4623ce04f5e8346a16875bcf6039a0556","ssdeep":"","tlshash":"2511b796c10871389b23413328087825969a0ca88d8265f4f7b3d41003feccd0c84bde","first_seen":"2025-07-27T15:12:11.614884Z","last_seen":"2025-12-31T20:08:30.272224Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/bootstrap/js/bootstrap.min.js?ver=2.0","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/themes/EgyBest/components/assets/bootstrap/js/bootstrap.min.js?ver=2.0 HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 20:08:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694c483f-89d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 200996\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOjOJPjp1v0fmmuxOwMrj5PHbvD6zS9tzbNswCQJ7Aax1ltKhB5eIPcZS7zXvSCjCLp%2FLoasEQx2OuznLy%2B3T5GyomshZnDKpcxu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b461734cb45120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35282,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35282), with no line terminators","md5":"fa4447550b446ac73a77aa6c7582476d","sha1":"44fb7da919b5c169af65fbba84114c6b8233f704","sha256":"81106ddb86f999330c3dd90e9f7315f7341ca70e74f1b129e98ce66767c7a825","sha512":"06dac937d85031a2217f420e88306218e85305bcd940abde94de4557b7a5148bc672ec6502fdac2f8c8bfc5bbc7fe881bb601399986e745d86dc141bdcd8fe80","ssdeep":"768:p8LJD27UwlNAMlbWqXYR+jS1s8ep0smQirXf8u8GfpZZSQ:2Y7NBS1W8v8UpZMQ","tlshash":"f8f29546b270316107efb1e5415f020e72396a6ee90690bc78a5daf63db9c48317bf39","first_seen":"2023-03-10T19:54:32Z","last_seen":"2026-05-20T10:21:37.713475Z","times_seen":184,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.8.1/slick.js?ver=4.1","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/slick-carousel/1.8.1/slick.js?ver=4.1 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 12637\r\ncf-ray: 9b461734f990b4f4-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65999b45-315d\"\r\nlast-modified: Sat, 06 Jan 2024 19:26:13 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 3023780\r\nexpires: Thu, 17 Dec 2026 04:31:50 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2DrmiagqDJ9tvLznhGK51GusNWR4gingp6b0mC%2FXfCBwMn7plgA7NAGU9qEEBcFf0d1nW%2BOpuEEpDhVbeJRQmsdMke4tiVhWQL%2FU8BKWilgUDPLjrwUDQe39AiNs8lhcb9ZTlGW7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88955,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"483a3731bbe7046c1da3163da76dbe98","sha1":"5e96500865da826f8509334f034422be7662b46d","sha256":"9baa573e4378873b7ac81ccb1d954ce9bb2b1a933947ad3012263ddc604d8505","sha512":"58d67055e6d08e14b1133c1b7adb46b90816c5ba587682dfee61fedb903bb1f41b6f129e4b9490f5005ff7bcce6389ce970b64b200c0fdccd24e67e3e0350489","ssdeep":"1536:0XWVBuGGI2R7R+FXDyMibroAPoJATv2UsWNuJ:0XWVLGI2R7R+FTyMibroAwJATAJ","tlshash":"4a93ed0b55e6131294a731bd6bdfc028b3ba91275504ed9cbccc4385afd45288feabe4","first_seen":"2023-03-07T12:10:10Z","last_seen":"2026-05-24T14:32:10.682703Z","times_seen":943,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":7,"dns":3,"connect":2,"send":0,"wait":10,"receive":1,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/js/core.js?ver=1.12","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/themes/EgyBest/components/assets/js/core.js?ver=1.12 HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 24 Dec 2025 20:08:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694c483f-22b7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 200995\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eq7jNPcTmZLbLQ3ey%2FX40ClXGh30ilkw0gkuOGC0pY%2ByHhWXItcBxDUg9ioJOwbM%2FzATCfmQ58KjiPhe%2ByGduYRmQWUlIiz%2FKNF7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b461734db47120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8887,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (762), with CRLF line terminators","md5":"e8faab1a71efa3d9353ebed94d1e17bb","sha1":"c724fd6a269556a817465a13110e5b3bd3b1c7e7","sha256":"3363c187ff16b0d1925349c43710389667ca1d70558cb5dc85931d46518b0845","sha512":"83d3369009a15281c5266fb0e8c64b3b5b47ff263b26c48127bfc2ad35ee064bcf88924666d224e17402f20c30f1f585bd368f64023b1c08973936e3f60b118b","ssdeep":"96:+URlJlEkXz/WCuO99DYYT23V6edx0UETzP0z4LRBTLghHrUOKGKDWBkZJY:+m/WCuO7cYi3V6gRETzPXDIhLjKDWK6","tlshash":"aa02720eb02051f9447f77b9aa7b6514fa73422792018b017d7c88d41fb2468a7a6fbf","first_seen":"2025-06-03T00:02:28.42786Z","last_seen":"2026-05-02T20:48:32.362788Z","times_seen":19,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/themes/EgyBest/components/assets/fonts/iconFont.ttf?ee5en0","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/themes/EgyBest/components/assets/fonts/iconFont.ttf?ee5en0 HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16520\r\nlast-modified: Wed, 24 Dec 2025 20:08:31 GMT\r\netag: \"694c483f-4088\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 192201\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjhadUHFNTYMQhbHXbI88FgBZj1v%2FKWv5iqOHfzvnS%2FZeXOoh%2FhdHzPtPuTehj1t0EWsdz8kauANtqxIn%2FKYuyYuGmnkT1%2FJzDrY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b461738bb7c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16520,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, iconFont   ","md5":"057738122a1b94148b1952e4192bce84","sha1":"4a1396fd39a2b086fe4191f094600a538ac92aa2","sha256":"12ad92323f058c828c477d4b4c4a4d0a833a630e03a3212b5ddcf819454fba26","sha512":"355240f3c7daff3b01eb6e56c1220bb59460a15ea8ca0de621a2e37794d17240e235851ff7200b235444891a78fd9b7b5a0f9d230f6fa842c0c75c3b42ff7828","ssdeep":"384:BzS0xsF9SXJyamZ3A3nm6AN+MZZZAdZQXB/EqP6a:BzwF9S5NBm6E+MZLAdisU","tlshash":"69720a079f4bdf6fdd2bc2754d9753601fea8a21d73de3cb54862c8498094e40c29396","first_seen":"2023-12-25T22:12:36Z","last_seen":"2026-05-02T20:48:32.398436Z","times_seen":68,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agybest.com/wp-content/uploads/2025/11/MV5BNjRiMTA4NWUtNmE0ZC00NGM0LWJhMDUtZWIzMDM5ZDIzNTg3XkEyXkFqcGc@._V1_SX300.jpg","fqdn":"agybest.com","domain":"agybest.com","tld":"com"},"ip":{"addr":"172.67.149.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:52.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"agybest.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 18:47:09 GMT","end":"Tue, 24 Mar 2026 19:45:36 GMT"},"fingerprint":{"sha1":"8C:44:61:0B:97:8B:C2:5F:DB:63:2D:FD:95:C0:D0:1E:AF:D1:6C:78","sha256":"DC:28:E8:28:E6:4A:E2:32:34:CF:C8:A7:14:99:29:91:BD:4B:4C:32:E8:D8:1A:62:C8:84:B0:09:0D:EC:35:16"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/MV5BNjRiMTA4NWUtNmE0ZC00NGM0LWJhMDUtZWIzMDM5ZDIzNTg3XkEyXkFqcGc@._V1_SX300.jpg HTTP/1.1\r\nHost: agybest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=032c236a-e38b-47d2-8004-f8cacaab8b25%3A2%3A1; _ga_8X9FVCDM8V=GS2.1.s1766809911$o1$g0$t1766809911$j60$l0$h0; _ga=GA1.1.629565326.1766809912; pp_main_23a075760b7ad3396d398e78c8e72783=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Dec 2025 04:31:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21718\r\nlast-modified: Wed, 24 Dec 2025 20:08:43 GMT\r\netag: \"694c484b-54d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 40287\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjIefIqt3yES1b%2F3KZNdu8osePQqDK621W76jwi05uC8RNfhdKytgFAwhZsNlWPZTEVzJyxuAlD18KTXwCMSi48tKJlh9%2FJcLqXx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b46173e1be3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x375, components 3","md5":"0df2a019d8fec148c2dd0b547f449044","sha1":"96a15971feda7850319960fddd47f50ae301c15d","sha256":"f08497575cf0c68c924a55d1f8f4b87a702e5e3101b692c16f86373da21e5afd","sha512":"6a5f21efb8c311598566b57b51b885250ea3a7ea9f21711d0fd07db2eda34e7f93adb3b6451564c58e7e7591e49639b0842d384e0bfc5784a644a33bf7c189fb","ssdeep":"384:6HDPj+Teci+gIE/c6dobNbLJdZx86yVsJQTsi13ztYomh9z+Slh6qqsEUf/5tSpI:Q7+TgIE/c6ujDx86sCQT91Dlmzplh6mF","tlshash":"5aa2e1a57b7bcf82dc0435fc33a17d4ce593c74179f2299ca0c6661b65036cd9a420c6","first_seen":"2025-12-27T04:32:19.825832Z","last_seen":"2026-03-14T16:55:34.501794Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"agybest.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"midgerelativelyhoax.com/23/a0/75/23a075760b7ad3396d398e78c8e72783.js","fqdn":"midgerelativelyhoax.com","domain":"midgerelativelyhoax.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:50.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"midgerelativelyhoax.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 22:11:20 GMT","end":"Sat, 31 Jan 2026 22:11:19 GMT"},"fingerprint":{"sha1":"38:11:04:45:AF:57:EB:BC:B8:92:69:EC:C0:B1:CE:B5:CD:E2:8B:F1","sha256":"72:29:EC:5B:46:B5:88:FD:30:BF:DD:AF:80:3E:C1:15:C5:8D:9A:04:00:0F:39:2D:3E:9E:56:DE:16:E1:64:29"}}},"request":{"raw":"GET /23/a0/75/23a075760b7ad3396d398e78c8e72783.js HTTP/1.1\r\nHost: midgerelativelyhoax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 27 Dec 2025 04:31:50 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 38430\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: midgerelativelyhoax.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 9d172b16c7b6bd12fc2004b40744a189\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":108016,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"92c29ef5ba6a574686e708597924bbfe","sha1":"2a079590e39827c6de657aeb0e7619761586481b","sha256":"fbd96d07d4acb6236c2f0e476b7c70fe02501e5ec8a04eed120eda71cb70a5ff","sha512":"9e287a8a21af92fd3e6a415597342c80eeb2b486be4388b0efec78d64ccad1267897dc4bccecceffbe281edde3747441335dfa33f547f60fbb9e920b1f638317","ssdeep":"1536:yDdqQzFvkdWY4wWobxg+kH+pNmE+LbMTEhBuvuQwOM4uYU9vgyZatNBYPSQE21g5:8LkdTUwMb92","tlshash":"82b3e68c7f45f1ac12b6b033323f952ef41a4d9548ace5cce213e4e8a9a8b17d539b54","first_seen":"2025-12-27T04:32:19.826979Z","last_seen":"2025-12-27T04:32:19.826979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":322,"dns":51,"connect":91,"send":0,"wait":98,"receive":92,"ssl":187},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"midgerelativelyhoax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"midgerelativelyhoax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notokufiarabic/v21/CSRk4ydQnPyaDxEXLFF6LZVLKrodrOYFFlKp.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:51.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/notokufiarabic/v21/CSRk4ydQnPyaDxEXLFF6LZVLKrodrOYFFlKp.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://agybest.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 123744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 12:10:29 GMT\r\nexpires: Sun, 20 Dec 2026 12:10:29 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577282\r\nlast-modified: Wed, 28 Feb 2024 18:56:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 123744, version 1.0","md5":"b1f84c27d543c09247b81cf9080f3b5d","sha1":"6ffb96f6f28e2cd093117ee27ea85d752f638da8","sha256":"737f7f4e69b415ccc1b9d751dbf85b3ee04adaf36a1bd84105e03282cb77e780","sha512":"8d7854b9975c7c8b3d15e5c7b34f47cac4e648b695606e18b6dd54a4320fdfc9072555b991c50d109d4eb7f2e039e819d87f5b407b244bbbc8a715b6790aae03","ssdeep":"1536:4tipLj51mgdAP1jxhWFFODd2cZOU42IYr8IR9PtLI3aa9Y1QZTBu3ljuYZEMJgUk:pnGP5KIAcEV2IYTR9p2oaZNu1lNJLqhL","tlshash":"69c312c587cdfe96f647c894c4aec25b606147f98a16d62adcfd36beb0d4084be909c0","first_seen":"2024-04-21T18:18:42Z","last_seen":"2026-05-20T13:12:31.495128Z","times_seen":108,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":149,"dns":4,"connect":10,"send":0,"wait":9,"receive":20,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=032c236a-e38b-47d2-8004-f8cacaab8b25\u0026eb=827a263eb28f23810b5c1b7200426bdc\u0026te=769e9f68043c8e1dae5459103f54e1a5\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=23a075760b7ad3396d398e78c8e72783\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=4","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.253.132","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://agybest.com/%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9-%D9%88%D8%AA%D8%AD%D9%85%D9%8A%D9%84-%D9%85%D8%B3%D9%84%D8%B3%D9%84-stranger-things-%D8%A7%D9%84%D9%85%D9%88%D8%B3%D9%85-%D8%A7%D9%84%D8%AE%D8%A7%D9%85%D8%B3-5/","date":"2025-12-27T04:31:52.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"flushpersist.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 22:02:45 GMT","end":"Tue, 27 Jan 2026 22:02:44 GMT"},"fingerprint":{"sha1":"F7:0F:08:42:86:24:7C:1B:49:6E:E0:01:4D:B6:85:C3:51:09:E9:4B","sha256":"57:4B:E8:D9:F8:CD:FB:C3:56:16:42:88:21:1B:6A:B3:83:F2:4E:B5:2C:AC:2C:6B:0E:46:6B:15:51:D1:3D:17"}}},"request":{"raw":"GET /pxf.gif?uuid=032c236a-e38b-47d2-8004-f8cacaab8b25\u0026eb=827a263eb28f23810b5c1b7200426bdc\u0026te=769e9f68043c8e1dae5459103f54e1a5\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.3095\u0026b_frame=0\u0026pk=23a075760b7ad3396d398e78c8e72783\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=4 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://agybest.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 27 Dec 2025 04:31:52 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5892be98d17f7eedca81a7fb769d8223\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T17:07:59.023654Z","times_seen":15665480,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":279,"dns":1,"connect":91,"send":0,"wait":105,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-26","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-27","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}