{"report_id":"5dd500ba-f831-4163-b33a-d2ebc85b7461","version":6,"status":"done","tags":[],"date":"2025-09-28T01:33:56Z","url":{"schema":"https","addr":"eligibility-ofc.site/","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"eligibility-ofc.site/","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"title":"OneFootball Club Pre-TGE Portal"},"submit":{"url":{"schema":"https","addr":"eligibility-ofc.site/","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T01:33:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":1,"received_data":761320,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1.1.1.1","ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2012-05-30T07:40:31Z","last_seen":"2019-03-28T08:40:04Z","alert_count":0,"request_count":1,"received_data":585,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"eligibility-ofc.site","ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-09-25","domain_rank":0,"first_seen":"2025-09-28T01:33:58.234929Z","last_seen":"2025-09-28T01:33:58.234929Z","alert_count":25,"request_count":25,"received_data":8336268,"sent_data":11383,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"eligibility-ofc.site/","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"586bb1bf886e18059d6ff760c6db8b62","sha1":"73518ddc404b8b4d7f24653f13e5fadd3eaede79","sha256":"ab7172987ac259caf6c2172c1093d67d707c4d3bbfabd222059def32b5b9e0b5","sha512":"876f96186eec185191a201e375e509caf299701d651860f0b68bf8675fd8a352df266b3a93cc2fab2b778373ebfa59d510b94e1e6d0f84e62c3e97fc01b8af84","ssdeep":"1536:/gJWohLFo3j63Mzd7kRahi0FK0sFVK2kQtCrad0Y/X8Y8fTz5M5OML5LRlB/jUl2:/goohLFw2MlkR50scbjE1ySXFvDF","tlshash":"3a3483ad378b11238380221d58e5fff897d0baa5424818749f523f5fa985ef1d2f1b62","size":231994,"data":"","first_seen":"2025-09-24T14:16:30.234244Z","last_seen":"2025-10-02T14:10:05.062581Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/modals.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","size":52833,"data":"","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/fpbundle.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","size":45503,"data":"","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/bundle.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29681f25e1e25a870bd6656b8d48646f","sha1":"7b8c8d1c3af639b6ec50c84660a9e9f0a3a2d3a3","sha256":"969be4f64afdeaca0568779c3b0f7291bc9a7185cc983a5104fbd90e4f901039","sha512":"69c94d52b83c5cfc9b4d86e042cf6b99ab9d00c1b9f417ed35f789a41b2d21a92606bef9e1a7a02e64622e31feecb9cdb451ed23f8fa7a69392a0575944867e9","ssdeep":"49152:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNrl4G1SE0BuuJpxHiRo6r3XOWxYrowVpaz:Qg+wyBgSxUKZTRbUajO9U7","tlshash":"abc56d907395a46c03b352d458771101f339684aa40d80ecf7ecd9e7afb998a897bf39","size":2510372,"data":"","first_seen":"2025-07-20T10:23:41.470184Z","last_seen":"2026-07-10T23:25:47.381877Z","times_seen":709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f68e784a0312a878ed45aac4ceb8d1a6","sha1":"52f4c53a1debbd31d7282cbe64d6d5ad56cf078c","sha256":"cd36a991a7d553482798d4a9d5db7b10fd90e1ef140d60bf0f9ae7e936107123","sha512":"234bc9dac62b99288008582c53eb60d60a6650c10c05720454f6aa274a9e61743ca76268f64af3fe9b0f3d178bcb8855d63431d05ba940da9fc6732dd36ca491","ssdeep":"","tlshash":"37e02b286f6651f926b33595c71f7280e86000735042c801fe1cf64a4f80f1938b0fc9","size":334,"data":"","first_seen":"2025-07-21T04:20:59.807781Z","last_seen":"2026-06-04T04:08:18.207034Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/main.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ec8134973bad32d7b86b7a97b71fece","sha1":"d4483f40b76ed1f10075d207eb2e85dd5256b7d6","sha256":"4a2816fe23d272d39f21606868a6d498e8fbb0ffeaa93b6ec3c4e02fb5a24ac2","sha512":"73bcfb12cde8294a6cad6891f4cbceb644d52ba4bf151e63677110084a017d35f39f695316b9c9eaef278056bb8f976dea244a22c087d68489fa3e380d6de562","ssdeep":"3072:IAEN3SADfEFISLNXuFC+yRP086uQbWHwAJNd/ZEK:IAENSOsFISj+yRFTwwn","tlshash":"bd3482ad378b91238380261d58f5fff897c0b9a4420818749e52bf5f6985ef1d2f1b62","size":236152,"data":"","first_seen":"2025-09-24T14:16:30.218346Z","last_seen":"2025-10-02T14:10:05.046205Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"eligibility-ofc.site/main.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 25 Sep 2025 12:57:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 49068\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":236152,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2ec8134973bad32d7b86b7a97b71fece","sha1":"d4483f40b76ed1f10075d207eb2e85dd5256b7d6","sha256":"4a2816fe23d272d39f21606868a6d498e8fbb0ffeaa93b6ec3c4e02fb5a24ac2","sha512":"73bcfb12cde8294a6cad6891f4cbceb644d52ba4bf151e63677110084a017d35f39f695316b9c9eaef278056bb8f976dea244a22c087d68489fa3e380d6de562","ssdeep":"3072:IAEN3SADfEFISLNXuFC+yRP086uQbWHwAJNd/ZEK:IAENSOsFISj+yRFTwwn","tlshash":"bd3482ad378b91238380261d58f5fff897c0b9a4420818749e52bf5f6985ef1d2f1b62","first_seen":"2025-09-24T14:16:30.218346Z","last_seen":"2025-10-02T14:10:05.046205Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/base.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /base.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4632\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4632,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8722b4eb8e41254ca621ba37b456983f","sha1":"5cd876ef502f49a0ede363cf737e31bcb825c7a9","sha256":"c6cf6513fba97c22192d0b96ffd2be74608559017a4c41ebf4457b65224a7070","sha512":"e640a1dc0ebd11704882ed3cfb79596d9963bb03abe77ba550898733687f18aeef36437ca929f24cc10adb330caa7f7b08f0adfdd62899cf22f568e24b8eefb4","ssdeep":"96:X894vVXFFN99999sBBKluuAE5krWYxxLNyjiv0ZQ:siFFN99999sBBKluu/0HxxhyjivT","tlshash":"8ea1cbc387eb51c6f0093f778cda822ad6615d08caad96afc55a8c592e0f1f09a941c7","first_seen":"2025-09-12T17:11:17.729944Z","last_seen":"2026-07-20T11:07:14.754373Z","times_seen":23,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/FIFARivals.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /FIFARivals.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40806\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":40806,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"1a1119127064316c3308dc83109c2e28","sha1":"c99a800f1dcd2aeed514ad04f430132653a450af","sha256":"84f2489634cde1a8167aa64a07b7bed7dd3cf320dc3092c41b04887b613ecea5","sha512":"ce92cb09bf997238e3f71ed7e5173b012d5ab316d4c2fc776d162c0e58d10c345315f6c0d7acaefd02274d207b9f828f1645a995cb485250e94b6c719d500740","ssdeep":"768:Mnp9W588RPezD0VAIol/Ms/O4loNjbLxYc1Xqcx84YJrFJGYcji8L3y:H88RyDNXl/Z9lq7xYqXrq4YJr6vy","tlshash":"0203f2e331b87b12c0cc9ef19c0b50e5d326a5bc58d98bd0f4688a4d327c66a684d9f8","first_seen":"2025-09-12T17:11:17.731403Z","last_seen":"2026-04-12T13:13:22.362473Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1328,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/bg.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:36.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106374\r\ndate: Sun, 28 Sep 2025 01:33:36 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":106374,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"b59f5b5309f2e170a565638ff57993c4","sha1":"bd473779a6985e338b971d8f2620c828dd1a157b","sha256":"9cf815bbce698e2f1f1cf1eac1e6f6e47c1378687e12115239b93c6be67c1c49","sha512":"6d97870f653e99a0a70efea704fd30e50e3d0860dc1c397dfa070be155d4855a034a2fbf494cfd016871d1b6ee5627cfae491df429d292536b18818165345682","ssdeep":"3072:q6RxPefb97IjT3niqt7t4xI7Ffu+o/nSIx8:ZRxWfpMzt7eGc+8ns","tlshash":"51a312a23fbe9aa4d77e323f81f6a4547a2f40f284575bba047167014a00f71d3acb58","first_seen":"2025-09-12T17:11:17.715872Z","last_seen":"2026-04-12T13:13:22.355585Z","times_seen":11,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/a58bd103dc6bb26a.css","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eligibility-ofc.site/index_1.html","date":"2025-09-28T01:33:36.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /a58bd103dc6bb26a.css HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Sep 2025 12:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13911\r\ndate: Sun, 28 Sep 2025 01:33:36 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89094,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"f90230e8fc673d46ab80b347cb42b68a","sha1":"4426c5e29b08cf5acd41842b5150c53b06d0688b","sha256":"24f397acc68bceef19c09fdb38dfb1524ebd29983a494dc9c2234304aa516dbf","sha512":"0d31583667108c4a43e449cf24fd2ce056e78d47c58ec89f5ec44c8be956f34dc2b6d351d94a790444a2721e1c6d15ede61c112c3c9071718976eaf5532b7df5","ssdeep":"768:9G5wS9fb02MgL/4LNVZNUrcujbePUtufJrSWxDhbU:9GN0Dw4LNIjbePUtufJrSWxDhbU","tlshash":"3c932d1db762003f3c2384f9e29ce9ae911675c4ee3a6ae7bd822201cbd57e75c93154","first_seen":"2025-09-08T07:41:36.506342Z","last_seen":"2025-10-22T19:06:30.174769Z","times_seen":10,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/bundle.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:37.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 25 Sep 2025 12:57:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 01:33:37 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2510372,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11784), with CRLF line terminators","md5":"a579f43be016af96b1d14b0be3ab2239","sha1":"eb0403b0e34d6943a3242206f9845843fab6d225","sha256":"9b2c009690d8d43f3a351bc36362316b6474ce1fc03c24fdd1cf2ce2da5b2509","sha512":"64befe664a2fbf04844b475a8b918dd5feed48a9c77110963a9f589be8e19e04d3a98233a44ae343b1efe20fafe18770dc18dc10e39402e822bf37c63d081619","ssdeep":"24576:LREHMe8DbdUW4HlHZg+dY3yBgS6cUKZd3NlNUQ4G1SE0Byz5o:LRIMXDbdUW4HlHZg+dY3yBgS6cUKZJNW","tlshash":"60254c9072a6f07603a755d864761101f2385854700d90ecfafc9debbfa988a867ff39","first_seen":"2025-07-26T22:48:52.272458Z","last_seen":"2026-07-10T23:25:47.366161Z","times_seen":671,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/css2.css","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Sep 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 545\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4596,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"15f65d1ad2d1cbcc697a80c509c19a9c","sha1":"fa6b4b02d37d9bf6bd7f4f71ec6c158b32e13f84","sha256":"bbea19e8286ff56ccaa098916f6de9809a73a71c23a9ae13cead50647b619a6f","sha512":"daf8962276ee6dba36cb413fb0faf4ba56a0abc7e46a9cb6b719e8a0528866ddefa0cc419565ad5a502f7bbcf7bcbbaf7147b9b2b6a2fd49dabceef930504eae","ssdeep":"96:nOdayJc+uzOdadNDYg4a/qYg4afFZHYg4aAYg4at3vYg4aNYg4ayJc+uTYg4adNN:1acky/fy4yByt3gyqyaVyw/xsbt3UOa8","tlshash":"1d91ab90046b5004ea876cd237cf7f33ae5db2846045da786ffd1899acded2253a0b4d","first_seen":"2025-09-12T17:11:17.719798Z","last_seen":"2026-04-12T13:13:22.367486Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/animocabrands.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /animocabrands.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15972\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15972,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"b04c80c2b4dc2f353556261cbcb7a1e8","sha1":"5a0da5c607805bb1facc4dee3fc37f6d9dac5535","sha256":"960fd2fb71b465948cc6bd6b1d62cf35965590e0e2de4c9443e5796e66230a10","sha512":"a09f92a2992aa27f73b72b5110540275607bd49a3a9d210f63c4414f1691e890c231b8dc65df556b3083933b8615d9d17fdc0239d45adce98e31bbf7e7c37c12","ssdeep":"384:sXPQyeivpLA8bSL3I5IOubuG+k1v/L7keqROufnLV8:MPteivpL3eI59u20vk53nLi","tlshash":"c672bf6e1b1c8274d21f47786d888772f0906f2a569e9a3bf32029a033bd67019760df","first_seen":"2025-09-12T17:11:17.737719Z","last_seen":"2026-04-12T13:13:22.356116Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/megaphone_hq.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /megaphone_hq.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4323\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"5672670bbd685cd9bd0ef4d2dbcf25e9","sha1":"957723e41e541c228c35a19192ea62ece25d5860","sha256":"04d6f6c7b324590c7b5e1ee228619a433d30d3ab3bebdd0f103b9d73d4eed3a3","sha512":"577f10d04ff4cfbcfca0fc59e5fd71c0c82102d86b1be091a1de43589b9d7f520b2321fc94a22bd4b640b3ae3cd9204a6ccea2a37820a18a9aedff0689255d45","ssdeep":"96:y7Sea7DQXDrUITjDETraUKR7uDbzzclua:sSfDGrjjDEfaU3zwl/","tlshash":"c19141668c5a84b7b9334df11a31958860b3088d3ef5052a1ef73679527ea0bca6e096","first_seen":"2025-09-12T17:11:17.724955Z","last_seen":"2026-04-12T13:13:22.356652Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/andr3w.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /andr3w.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38343\r\ndate: Sun, 28 Sep 2025 01:33:36 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38343,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"755d9489dce1f0418ccffab60dbc1354","sha1":"9a5883488fb2e8377284bb58a38f85ce4040a8fb","sha256":"301ea238d0e55d7b9481ca43daa09c3267058ee5938f8c7ce0f9d2135f2453cf","sha512":"8826c9519eab281b767a1da7ddcec6cdf5861e8e579295039b9e6d5d964c871f959391bd50f17d037f2e8830899f4b05b6a340363b7d2766ec3be7e119c7f1bd","ssdeep":"768:RXM6PFNaYdO3qEgpWPACqJ18G13vDfPfKHZLov6/vjgBBS5wZU/HeFVc:ZPF4YAbYr/p13D+Lovi7gYF/HMc","tlshash":"4703e13be73aaf4afb9e0f70241a0424489ad8599af1cdf1ccc5839ed60c4e59a534e5","first_seen":"2025-09-12T17:11:17.714323Z","last_seen":"2026-04-12T13:13:22.353363Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/index_2.html","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://eligibility-ofc.site/index_1.html","date":"2025-09-28T01:33:37.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 25 Sep 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 142\r\ndate: Sun, 28 Sep 2025 01:33:37 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-07-23T13:59:00.910994Z","times_seen":482,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/onefootballheads.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /onefootballheads.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5904\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3","md5":"40e7067e37ad96edae419522da3fa055","sha1":"b923a10ed7c0657122cd4878dd86b308b73040ec","sha256":"9f73907b120c0e72fa89d4aa49bc9123e49c85a16b286eac5f4fc8558695e4e4","sha512":"b20982ea736d2e5c82474078c64fa92b6eb1a4594372ec58523f5e6d388534debd074e67da18ad6362c676461de9374fc971f511ee802f89ccfeb97259f12084","ssdeep":"96:4EfHHIhcN0PhbC6/TW5uj0jw9eqD42PyFT5ekrD0KDIt9Obqfr9eMtTl2ZOCmAG4:4BhVdS0j08hD1PnykuqfxeTZR","tlshash":"b5c15dabb5259e824c36d3fc3f8b021bd7426e459490769e24739335baf0291768de09","first_seen":"2025-09-12T17:11:17.745235Z","last_seen":"2026-04-12T13:13:22.360807Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/dnns_eth.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /dnns_eth.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129149\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":129149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"132d116571ed15a654c3e793278fd463","sha1":"d63e1ce11963cdc2c00dc029cae6484bd4a2b76e","sha256":"f7469dd8ac1ec17995e99eaf0f7d7c6a079d80bab230ada9fce3300c3651fe94","sha512":"a6489b48d7c97d711478aec0e5a8012e547bf1f0425264e6be4ac72ab2436a6e2b9d2e3452e846046f26f60a23cd0b49c3579c643587d58ef2b5011996471ea2","ssdeep":"3072:Uku8smU579OIqg/1TlEymotFmFmILa+8HhJuejDAlXPfsC2km3Aa4YPBu2:6mw9ftzdmFmID8HzuejD4sexDYPA2","tlshash":"41c312628a283030e6c5597bc1dd4aa5981b5c678bf3c4202476ceb5d8fed9bec79334","first_seen":"2025-09-12T17:11:17.723598Z","last_seen":"2026-03-31T16:15:45.236253Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1105,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/index_1.html","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:36.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 25 Sep 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 642\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1431), with no line terminators","md5":"c4ee255062d86635dbfebfa8a0100d12","sha1":"d71519ddd25541064acbfa75c0e3ca549a737c51","sha256":"7e9c11d8b4f62e6f0605a4014af59cd7c484940f7c3ce275d8e4620193c52fec","sha512":"fc0aad730be5f03bbc5d3d2c7e4c110942c4188ef7daa15573367e2ff2d68258d6b1104994bda107e93935f22218a23cc4a64dfa1e91bdd334d2464e3332b901","ssdeep":"","tlshash":"0421b6f2ac12dc189007b3959cd9a00e9443fa1edb011cc8bedda81d89bda3d252998c","first_seen":"2025-09-12T17:11:17.726514Z","last_seen":"2025-10-22T19:06:30.340512Z","times_seen":7,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/logo.svg","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:36.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 25 Sep 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1506\r\ndate: Sun, 28 Sep 2025 01:33:36 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d80128a2e42a3569b3cc75616f76320e","sha1":"01a822884e413a91a52501516820627d260882e7","sha256":"9e25cffeb082694e2899c4bdfcef9a9c36c58c14f5f6213419633069d4d82fab","sha512":"c17265cd06f9b99d419112b54342786cca9a5903945064218eed6a23d627c0d0c6ff817cdd84826d34be7eb05f89eeba716ab54265b4386d108eb17f897f822a","ssdeep":"96:MqkRpLkRVwa/HYGDCUVcwV6YNciYW0UYGx0BhIYp6KsIFbY:Mqkvkoa/HDVVV61RWVrOBhIq6bKbY","tlshash":"829197e3239851e8f10127f8ca1b5cd612363dfa331fc4868bd53914b81e16e69649eb","first_seen":"2025-09-12T17:11:17.732867Z","last_seen":"2026-04-12T13:13:22.366035Z","times_seen":11,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/ethers@5.7.2/dist/ethers.umd.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:37.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/ethers@5.7.2/dist/ethers.umd.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 01:33:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 168432\r\ncf-ray: 985f7e643f771525-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.7.2\r\nx-jsd-version-type: version\r\netag: W/\"b996b-tlFUVYf2JXNF3D3p3apESxDe3z4\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220026-FRA, cache-bma-essb1270056-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 110\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ODBDlqahNaEJnfH4Drjo4dS8iv%2B9pGiFUEDjilpwulCAjua4CTjb8eXXC0sFFi9tO2fTmslqgc7%2Fnv6YiBFdbHMUNaEvVWBbxJs2ooDZHxJ6gPITeke5gM48IAR3JbRHuBA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-07-23T05:25:55.400593Z","times_seen":3707,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":30,"dns":1,"connect":2,"send":0,"wait":10,"receive":3,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:37.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligibility-ofc.site/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 25 Sep 2025 12:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10710\r\ndate: Sun, 28 Sep 2025 01:33:37 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T01:33:34.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 25 Sep 2025 12:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10710\r\ndate: Sun, 28 Sep 2025 01:33:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":54003,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16044)","md5":"3596750e40c11460ce93f3e422cc3aeb","sha1":"30f904821ac545a3ebe78e40b7f4b3d96f4e7ae2","sha256":"327dc1832bbe8c6299d1a00955e06f6962551ea946debc93095e1f8f84656922","sha512":"6e98f6185069fee2dc90d405c38a486799108bd94d149ed6d84bc8666e3625d30e03c66f1e972c035803d28170abde065c74deb43d2197a246cf4df9093f87b8","ssdeep":"1536:Gebx/c64Jysq7vi2cBwf/IaMEvE30n8SSc0S:GecEsw8q","tlshash":"a8334ae1b114017a6a0fc29dfaa9ef1cf212f041de265934b98d0149cbcafe159b27d9","first_seen":"2025-09-20T16:15:29.710576Z","last_seen":"2025-10-22T19:06:30.184973Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1412,"timings":{"blocked":545,"dns":1,"connect":161,"send":0,"wait":320,"receive":0,"ssl":384},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/_viN040.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /_viN040.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 143201\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"a871521e85f8520c2c1314d9304b779b","sha1":"6d1880505c1e4afb363f6cdeae71b8b479dd2e66","sha256":"20fb5059b017a9beb8f4371b30b623ff3f3c87df680fca8e7fc194fc66bf02ab","sha512":"190dc9f9b6efca0cc347ab44366d96640cc4823a3063f23e8c092c0e6dd32f878e3bc177cf7bdd4bf983187b29f2d28f51d4e5cb4de86fb794c60f4bda41973f","ssdeep":"3072:H8zH13nqp+f20Dp+0j1lHjUHl2gZOerSk6u2JMlO5UpGVBUY4O6U:ivf20Vvj19jjgZguBOWY4M","tlshash":"70e31294c4a3ce0194d2234c1582b973aef31d471d0646aa4df0a3a8d7fefbfa9d5864","first_seen":"2025-09-12T17:11:17.728496Z","last_seen":"2026-03-31T16:15:45.199692Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/waleswoosh.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /waleswoosh.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20933\r\ndate: Sun, 28 Sep 2025 01:33:36 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":20933,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"b8236a6ebd8b141d26b27ac72afe3d35","sha1":"dac8b71c417801d8db64694741b9e13a2b860742","sha256":"ad5479bee3017cd408d5b1802d8b9fccc0ddd285ca492ddbde7b6a5f44b5b886","sha512":"d1312ec767372619b0d971b3ff671ccce02323af01de76dfb7076bd9151b18baaa9aa51c1b23badaee20b1022440140757ff14f0420bd6c1e6c9ba4c5e30b4b9","ssdeep":"384:srNdFHvELKOZMhY4Rj2W3cHcrbfiCKQ+9qUWwB104Nfx:WdhI6hbh2n8rbilT710S","tlshash":"8992cf215bb69fcbce0f3d710e9842617e1f5a67dac89323326ac580d7776009d14aaf","first_seen":"2025-09-12T17:11:17.746908Z","last_seen":"2026-04-12T13:13:22.357244Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/fpbundle.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:37.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /fpbundle.js HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 25 Sep 2025 12:57:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16474\r\ndate: Sun, 28 Sep 2025 01:33:37 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":45503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44961), with CRLF line terminators","md5":"1c59909ad8d56060bf239a34a275da3d","sha1":"1164057a0631f6b5dd80387a1c3a9e332fb00bb4","sha256":"126a8b465ef8734b4d7a289781e0535cd283ccf24394e08c44f23ae300be3a5a","sha512":"39d33737c908bf2a1430f157990f931a0644471a0cf20de61721596e1330fe5867108db7e47d1869576710a72f886ef42e7492a2c0ed05fde2644f6d338e3eac","ssdeep":"768:v8UXI0Nc5VArhXDh1bnUsAq1++umYUT15+2gT/RcKrNcFV3BT/Vo:vN/NcnArV7f5+9cxT6","tlshash":"a413c7a873c67139a217b0719dcf4845b67d6d182289884dca2ec4a4b879d3dc77ecec","first_seen":"2025-07-11T11:18:53.943693Z","last_seen":"2026-07-10T23:25:47.376334Z","times_seen":741,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/app-COZIFVH2.css","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /app-COZIFVH2.css HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Sep 2025 12:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10726\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":63386,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63385)","md5":"bd0d2c3b2f2aba247d8d4cb71f97da17","sha1":"c51f73f97fcee7d1037624bc02ebbb9b4031ac57","sha256":"2105280563fe2f49a5b97a1d18ded761ff5640de9ba185c64c7cf1445162de88","sha512":"e082f05a32e528d7b700a316a70bdb8a128aae2afc346f450dd032f0370f482d14afd7c370d86aea63ddb18f240921c25c6321ae7cc804aa15402fe209031c34","ssdeep":"768:SY7LiEPwOrGNtXilnTs6uWoGEBhEt0ajXQ4sMq+WDhGsANi9vfELtK:SYLiEYT8EDEOMQ4sMq+WDhGsAuvcs","tlshash":"cc53b3a0b232e93fad3368bd639cf80c9119b0c59e255bedfb12612256c37f21d67614","first_seen":"2025-09-12T17:11:17.743693Z","last_seen":"2025-10-22T19:06:30.334729Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/hero-badge-v1.mp4","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:36.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /hero-badge-v1.mp4 HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Thu, 25 Sep 2025 12:57:31 GMT\r\ncontent-range: bytes 0-4431170/4431171\r\ncontent-length: 4431171\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4431171,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"59dd545a90ea510193c4666d969c6c99","sha1":"e82aae0f2628e263d60be5cdb901a8e09e6bf92e","sha256":"685c17f67bb2fad65bcb99f7d98bdc263141bb487ada76bb0568aed29d572273","sha512":"dc5a8938cc8d5e0b16f4a72f369847c5c3208128c3e2037c1974d92565bfcf3a36040453a222111081f2b43265b6e8d2903d7588bc0303dbf1495d2f8b25e2e4","ssdeep":"24576:Yj5MsHuBytvqvQzpj96b4WKGX9HpeuTC4uXZuFJVPShK:Yj1HSQzk4WKGX9HpdT9ugDVT","tlshash":"de25232cae6a50a0fb49f93f5c8dd15ad8ea6643cc80da9f311d45490b311981f3f9bb","first_seen":"2025-09-12T17:11:17.734934Z","last_seen":"2026-04-12T13:13:22.363157Z","times_seen":11,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":367,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/ofc_the_club.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /ofc_the_club.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4395\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"33e1cd755722719fa71a4989b2a588d5","sha1":"e9a4e651e81cd810aea343fd59bd300598c08a78","sha256":"2a18a68030632de5b242423b53602e1f34b3f61500f32b531ea5da5c71913765","sha512":"6c0a91290d5d96ef4fd6f6775ccb1141c2c54dc34cb31cee1c02de6a0bb7d56a210f57453e7a0e198423e4c6e007de8e763957984709a440a170b4cd3413f1ae","ssdeep":"96:2q8JPbOxLayJRYRdBkr7SoGiuKPicrwnp2/8hMJPdvBP:kFbGuyJlX1Rr2p2I+vBP","tlshash":"7e915c40bbb8d7ade1ff5485ab20c8e890545b0dee06214ea70a585e519cd0181d83b9","first_seen":"2025-09-12T17:11:17.736389Z","last_seen":"2026-04-12T13:13:22.359449Z","times_seen":12,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/youneszarou.png","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:35.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /youneszarou.png HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Oct 2025 01:33:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Sep 2025 12:57:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 321525\r\ndate: Sun, 28 Sep 2025 01:33:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":321525,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"fa9802b4e73bd66c7aee7eb7d2c12068","sha1":"b7c2dd883e1a20b029f587b1469559569dcbb98b","sha256":"10339b1d746496c336b6077f1ecbc5c80b202d0994235e0eb3c9789fbd407eb5","sha512":"4130ec543f0ce3811cf0a5c7881a0e7bd9cd5ead5a396cfdb0176f616b4e89a6200acaa46d79a51b046c27bc4ed278e5790becb711dfa29731057b90ed38090a","ssdeep":"6144:gBXHlfTptenRND80IvyTf0qNJZAWP5h6pEwfQBzaxM8JrlbIq8hPSwW9E36FQbw4:gFHdrk3D80IvafFNJmWP516yzaxDpsDd","tlshash":"ec6423ae836020568fa99e4027405ef6d696f1b21fb51fbe128234adec7d782505873a","first_seen":"2025-09-12T17:11:17.739087Z","last_seen":"2026-03-31T16:15:45.158014Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1421,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eligibility-ofc.site/modals.js","fqdn":"eligibility-ofc.site","domain":"eligibility-ofc.site","tld":"site"},"ip":{"addr":"198.54.116.241","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:37.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eligibility-ofc.site","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:B7:4A:9B:22:7B:C7:DC:39:43:9A:44:41:00:4A:21:9E:9F:BF:44","sha256":"FB:53:5B:C7:6F:04:52:EB:0C:79:73:E8:43:96:EB:93:78:3E:32:06:5C:92:B9:21:CA:BF:EF:5F:A0:13:C7:3F"}}},"request":{"raw":"GET /modals.js HTTP/1.1\r\nHost: eligibility-ofc.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eligibility-ofc.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 25 Sep 2025 12:57:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6986\r\ndate: Sun, 28 Sep 2025 01:33:37 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":52833,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (52831), with no line terminators","md5":"ecbc5043a1e25f2bd5bbd6e3c3be49f0","sha1":"d66eb695679871221c52958d94029c6358b7613d","sha256":"6d0c2c8d032982e9a86a1bed14f709911058b6b693abb5d46335a0106c12c411","sha512":"38b9aedf74859ade1e5445634b338f560c4d0520ab126de202ad98942bc0f34e740b93c7123a3bc53dcdded31944c174ad06bf1ca006e137cb4e06a949e86088","ssdeep":"768:ywjvL/eQ0ae2vBKRDpoKvTQv4n59+Y44U7kFlaoGHv5:ywz2n59J4inM5","tlshash":"943311071cbe31361daf0fa3b7cc1a1b4e2eb351e612aaee71bd1446438bd74c5a5618","first_seen":"2025-07-20T10:23:41.460008Z","last_seen":"2026-07-10T23:25:47.367285Z","times_seen":743,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"eligibility-ofc.site","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1.1.1.1/cdn-cgi/trace","fqdn":"1.1.1.1","domain":"1.1.1.1","tld":""},"ip":{"addr":"1.1.1.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://eligibility-ofc.site/","date":"2025-09-28T01:33:37.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflare-dns.com","organization":"Cloudflare, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 02 Jan 2025 00:00:00 GMT","end":"Wed, 21 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3B:A7:E9:F8:06:EB:30:D2:F4:E3:F9:05:E5:3F:07:E9:AC:F0:8E:1E","sha256":"73:B8:ED:5B:EC:F1:BA:64:93:D2:E2:21:5A:42:DF:DC:78:77:E9:1E:31:1F:F5:E5:9F:B4:3D:09:48:71:E6:99"}}},"request":{"raw":"GET /cdn-cgi/trace HTTP/1.1\r\nHost: 1.1.1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://eligibility-ofc.site/\r\nOrigin: https://eligibility-ofc.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 28 Sep 2025 01:33:37 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 985f7e66a8753181-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"72047ee8edf4b456c885c76b7e7335ef","sha1":"f11f9faa020260fcc6c441ed7bd98d32fc1743a2","sha256":"9ec4b7c966b933819ba11f812ccc3ba19f66c59d670c84b44bb226bbf241ce66","sha512":"2803790f5a9a7c3eef01b8fca277079fc06fc7694fa4d3e251c723017c36a68d667fc17a842e274a55a23970e953025274dd7094f53e9e783cba9afced864792","ssdeep":"","tlshash":"98d095d7971d0014182d5441026e7141c7654d1bc5f7b965fdf59404ef4c3db10ddde4","first_seen":"2025-09-28T01:34:02.919395Z","last_seen":"2025-09-28T01:34:02.919395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":8,"dns":0,"connect":2,"send":0,"wait":3,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}