{"report_id":"63a44cca-ac8d-4e96-a0c9-c9ab97a8d7de","version":0,"status":"done","tags":[],"date":"2026-10-08T00:16:39Z","url":{"schema":"http","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"title":"دكانك دوت كوم - دكانك دوت كوم","dom":{"size":244753,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8804)","md5":"55bbd3dd4a37b209ef9b80d799dc0def","sha1":"5c8a40e3e17073527f00d1d2f5c0bf8add0fe058","sha256":"c5d5aa854c757b348ffdbb5f2282d9bf30b0b6bbae55466fcef2fd9c1f545dd1","sha512":"ed53f7112cf1ebe29f5a4fd0abce15f8edb691fce9d01cfd4353623bd2836f0a5c51c8376bd49e185a9c0645d7fe6a0d1e6845688be2c6ed6f90750ccb615557","ssdeep":"1536:dACL36e45c9LA4E8jgsjNWyAn7ZgnF2y+ec2B1SMDnt1IktsW9InABRMIOPyp5ZN:6CL3695cVj/F2f2B16ATOatpvPI2b","tlshash":"6b34faf376355466062d97c5d0b0fecde293aa0ac987d4706bbc078cc3d5e126a493ab","dom_hash":"domhash34dab43ee82d4e07392ec14e0a93ec0b","first_seen":"2026-10-08T00:16:46.615198Z","last_seen":"2026-10-08T00:16:46.615198Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T00:16:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dukkank.com","ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-15","domain_rank":2354779,"first_seen":"2025-07-21T00:12:53.530207Z","last_seen":"2026-10-07T02:38:22.179938Z","alert_count":96,"request_count":48,"received_data":1465135,"sent_data":53275,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Elementor:4.3.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"bzr.openai.com","ip":{"addr":"172.64.151.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-01-19","domain_rank":0,"first_seen":"2026-04-19T13:11:23.499766Z","last_seen":"2026-10-03T11:35:01.330157Z","alert_count":0,"request_count":1,"received_data":1037,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":476702,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bzrcdn.openai.com","ip":{"addr":"104.18.36.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-01-19","domain_rank":0,"first_seen":"2026-04-19T08:10:15.096983Z","last_seen":"2026-10-01T17:21:51.463017Z","alert_count":0,"request_count":2,"received_data":85319,"sent_data":923,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-10-05T00:17:45.874638Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":837,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b66c1d80740b8020c6f3f74e75d7bf4f","sha1":"ef73eeaea8ce9111916e04fe1271fda1f320472e","sha256":"73a3800570dcec0fc719075be1d2cdc74699bd92931665ad405d8b798f36107d","sha512":"fec4077b03e4eb0924353793b330d92b21bdc255783f79050c52e2f4698f7cf641bc562e9cf937deccd1743800e3d57aa54c3b77a200747108a9b70265cab66a","ssdeep":"96:kSIucsLd0ucOKuq3RuYU8ZuLcb/urcdjrng9+fZlDf2nq/Hkj6WQrzAeHKHfepq:/i0ct3PUt2U0g+fjDK+seHmeE","tlshash":"97d1465a6c6cad9c4dece680d5e63e0346bc2572b0c5b8b8c26c5e1c52cf3952799b13","size":6535,"data":"","first_seen":"2026-10-08T00:16:46.744009Z","last_seen":"2026-10-08T00:16:46.744009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d0c0f66509bc32a00a61d954469bf9c","sha1":"f3f810e98b364504b27412db8df5950a5ff7b6da","sha256":"78187c442daa17d1f8264081396c832aec46c1ac77546508357cecd6478694cf","sha512":"7dc43c4e17067bfa700392790df1c32764646f4de9cff2faa478e5f345b99af98234232a8cc1dfe8ec01021a2fcb596408228d9c17c68295b088d65b9a2d936d","ssdeep":"","tlshash":"ae51c4d57fbb745c08a8d712c6bafcdd18516c8185aa94756f2c0a88c7ac2497f8c3d3","size":2540,"data":"","first_seen":"2026-10-08T00:16:46.745751Z","last_seen":"2026-10-08T00:16:46.745751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aebed0ff184eaa610b282c4499c1d5c0","sha1":"7582bea533bf3c57c9dab7854714f57379b9c62c","sha256":"4b72499f9cba2741c62a4cde096dc4b5661374c67cadf461b06202420dccd8e3","sha512":"df0666a2ca91ab86f35e05476c0c3508276130402aa7e8894447af2a1d0bc652c8fc978fedb24481335c3b7ff0717e8a7ae7b70cfe2d3ee132298417a6331c41","ssdeep":"","tlshash":"bc4179d8bbb8545c05acd612d6fbfcdd55812d82818b88796f7c0b48d3ac306ae8c357","size":2086,"data":"","first_seen":"2026-10-08T00:16:46.750131Z","last_seen":"2026-10-08T00:16:46.750131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0876c9f51ee86d1be8054be82ad6c71","sha1":"d24de415f7814d833a6d1de23dc17af8bc0b77d5","sha256":"f443496c7da5d588b2b78bf20285e0ea4fac66bfa9948d9aebd5b4ed59ebd885","sha512":"807da75090f9d1e565d238ef59c3c86b6c21ddc4983306ba513114e04c3de48cb78be801d3abfe0bffaf68d17d094639e03b78aa8a24c279195bcda8244096c5","ssdeep":"","tlshash":"814158e8bb78651c00acc612c6f7fd8e55951dc1848b94ba6f7c4b08c3ad2066e8c7a3","size":2100,"data":"","first_seen":"2026-10-08T00:16:46.75146Z","last_seen":"2026-10-08T00:16:46.75146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0afe72eedb62ae00499cc35bfc06a0d0","sha1":"e088470c8f4412b5d7f94ad45836a45085875676","sha256":"7ec20b48cf4c254a74715ec9a0b4fc4e3a101b36296733832d843ba46327db07","sha512":"9724126f023941c61b99a1ae8ed542e6ecfb02af0eeed0094315123534f9ddf25575d1d545e402efbddd1f99c2319906ecf45e64e171a54386935c20ed5e63e3","ssdeep":"","tlshash":"44416bd87f7a585c15a8e702c5bbedde58821c81859b9839af2c5f8cc3ad2055e0c393","size":2383,"data":"","first_seen":"2026-10-08T00:16:46.752563Z","last_seen":"2026-10-08T00:16:46.752563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5c17f988c27195f203d44402b108793","sha1":"15a7f7e8f4e8326406aae582f68aff6780a3c1d2","sha256":"c82be866d73c22afe5945f232caceab7a52f17f3a7674760500f452bfd187915","sha512":"5936a20b77a7fdb7ae9d1a500822891d9281bd375b2e180acc58701d1eb041b370265e6d5e88fb19080bede5737d462371be74e4cba98783bb50fd35c0018250","ssdeep":"","tlshash":"cf414de4bf7e695c056ce602dab6fccd08421d81898b84796b3c1b8cd36c3056e8c3a3","size":2350,"data":"","first_seen":"2026-10-08T00:16:46.753939Z","last_seen":"2026-10-08T00:16:46.753939Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a936b313cd6ad0cf35c054fc9d3d43e3","sha1":"45b6ca24fc127c9984aedcc7b17bbb8eeb3f9cc3","sha256":"a8921c0894f1cde20d2bcf397fe8185db1b822df66c33feb9cd441927d43e76e","sha512":"1b69618991e40424b73a5ed5f4dd0902531d71f5b66427464d45c29ec2096b7f7bb10c3110b694a81e8c94085d7e3e1d54cbf100890e4f9927b88304e5cc3983","ssdeep":"","tlshash":"8a4134e4bb78595c019ceb0286fafddd58511cd1859a94b9af7c4b48c36c209af8c3b3","size":2401,"data":"","first_seen":"2026-10-08T00:16:46.755061Z","last_seen":"2026-10-08T00:16:46.755061Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc6da38ce176cf8010101af1292a31ca","sha1":"d74c6ffff4966ae476c0ffaf45c195661854bc37","sha256":"66dda7bf41ff2cafd56f077e3e941595277564c8d07d3806e3860b6e8bd8f81e","sha512":"0ee61bef67563ad49c6826d054e452b857b7371d470b9697c2b784b69c9e4a45fe20a8a4720b30d2e419d5276afd5bee6a0e176fec9d47a9e8221c3bb2849bc7","ssdeep":"","tlshash":"82615fe5bb79668c045ceb02c5bbfddd59522cc1849b94ba6f7c0788936c2057e8c3a3","size":3251,"data":"","first_seen":"2026-10-08T00:16:46.756164Z","last_seen":"2026-10-08T00:16:46.756164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfb6f4a4ddf67e3d44863a980f542c4e","sha1":"656d23f30e03782230eddf7d1b0a2037228fac97","sha256":"27811947756886c22c91834cbd2c73740d48f1c52ec79a063c2f7aa954beed96","sha512":"cf7b64ae37a39d8063f8f050cfc8f3dbc911d97698ed54997f90ec7f7d073ce2d180de5336e9848aa46ff024fea199d10e86dc8985046dd458174d7349e436a9","ssdeep":"","tlshash":"fa4167ddbf79641c04acc602cab3fccd55421c81808a98796f7c4b48936d306ae8c7a3","size":2140,"data":"","first_seen":"2026-10-08T00:16:46.75711Z","last_seen":"2026-10-08T00:16:46.75711Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c07998e3710e32f9058339e5a276e4ee","sha1":"287aad41b133a47024d272daed23def37f3b84a8","sha256":"f36cced95f8494c78f9fc2b05ac13a61124c20518e923f63664970dd942aeca2","sha512":"4bd4d243e38196f2f7ebbc7ea6f759f6ea48bf81339e89c935f012b9295cbf3ebad0f209b9db12077744d0dbd559920d2ee9f89baacf48854f3ac75b7e468158","ssdeep":"","tlshash":"695117d8bfba654c145cea02c6bbeddd59816cc1945b947aaf7c0b84c368205ae4c3e3","size":2577,"data":"","first_seen":"2026-10-08T00:16:46.758731Z","last_seen":"2026-10-08T00:16:46.758731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7be76f5d9daac98e94e5661e25c3afe1","sha1":"64df9047d8b0123ceb757ad32b4e5bb9a47d25a6","sha256":"2eee1c0e24e3e322d069866b318c8964e25aefa28d328ba3f6a94a45811cc36a","sha512":"1245c2978d5213551f50d81ef0b1761836a58db8ea91e41f5414c867772f7503b758cec88d709d0d9333b280f197a3d79e3ce9ee04f924b3165364efc5cf8284","ssdeep":"","tlshash":"0a51f6e87f79699c0468f602cabbfdcd54422d81849bd8796f2c0b84c3682057e9c7e3","size":2723,"data":"","first_seen":"2026-10-08T00:16:46.759947Z","last_seen":"2026-10-08T00:16:46.759947Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"77c5f684a23b00f951625477123cd3b8","sha1":"a7cb0d874f3d30cfb6475a721f3cbd686017f9f4","sha256":"fc33a28aa064aa17c579b00b7689193e81225bd5728111fa7452bb05d1b07034","sha512":"f82533c64a50405ecd9090b78cef25da946635bb501408e8ce7418462149cf395fda4081aaf5c15040576b9126414581f8119da4a34949db35eec047ef876ef5","ssdeep":"","tlshash":"c45124c87f7b644c14acda01cabbfcdd55426cc180ab94b66f7c1b84c3692066a4c3d3","size":2544,"data":"","first_seen":"2026-10-08T00:16:46.761176Z","last_seen":"2026-10-08T00:16:46.761176Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bab69f5bae9c7176f583b8ba7086ecd1","sha1":"efb43a92ab8229c2d8f7100aaaf09eb03988eac1","sha256":"af508e5ebba10135b32581734edc0cfca81b8139dd555378a05cd8525d69f735","sha512":"1f344d174bbe88da97d79ee34b9fc5bac6f1f5a8fa4b1392299696054abb77cc63f3403d860553ea3b83a81cac323ae010968f8f77e24c042b3c091c1f46b441","ssdeep":"","tlshash":"a24155d9bf7a659c14a8e502c5b7eccd59822cc0955f987aaf2c0b48c36d205ae4c7e3","size":2401,"data":"","first_seen":"2026-10-08T00:16:46.762326Z","last_seen":"2026-10-08T00:16:46.762326Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf274170ed7c73c24238c924483cc735","sha1":"d94fcb97b8683a1cc8a2709da29c4b14418d395d","sha256":"74fe14ee3c4d20726b62d7c5f611dc7acac13bb75dec900e2d2828021741dcf9","sha512":"2be236bccf6df540ce7f8410a7fe2145844e3e506ec9b3f3cbfd469e8797373b40962b42ffe665ef29962d7e5555555459e55f7ac08a63beb70b90a3d5e68657","ssdeep":"","tlshash":"b251b1d87fba644c146ce602c6baeddd19412cc284ab94795f7c1bc8c76d2046f4c7a3","size":2902,"data":"","first_seen":"2026-10-08T00:16:46.763377Z","last_seen":"2026-10-08T00:16:46.763377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c712710143c9399262616c513a270bd","sha1":"b7cb25e0dc5a49b46cab94d35a12b4fa03b9805b","sha256":"c95fbf2299fb5bd41ae9aca1196d50bfc3b8b8068bf5d22ffa7a13fbb0a5a928","sha512":"f566cd659d50b8c2f368da2ca023640233e07d8084f8c66c1978c1b84271188b2c6dc402922b30818549e8937f07bc567ea79db963906d39bea928fdd6f92741","ssdeep":"","tlshash":"89514be87f7a648c14a8f211c5bafcdd69422c81849b54746f6c0bc8c3ac2066e4cbe3","size":2566,"data":"","first_seen":"2026-10-08T00:16:46.764437Z","last_seen":"2026-10-08T00:16:46.764437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5dc3f08ab95ee25f35153838c16b961","sha1":"02d42fb0c0e234dc2ede31b2db951657ffcee544","sha256":"62848066565ed64c61eb7b6252e172d62fceb9fa4c2d6e67af122b3612b67c6b","sha512":"c124dbfb21cc0f763dd8d2b01bde768b01f31c8dd35074d651a1cf06294e610b2561928c4384dd204a14bcd2a001add7056b218c533d483420ad2a93de4de871","ssdeep":"","tlshash":"853100e97f78905c41fcc111d9bbfdcf52820902d9da187cbb6c4e8853a93025789317","size":1593,"data":"","first_seen":"2026-10-08T00:16:46.765987Z","last_seen":"2026-10-08T00:16:46.765987Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fedfe4be386ccaf092a46666632c4aac","sha1":"1bdd5822c422f57660dea58ec24120ecc59860b6","sha256":"394d8a5dbd3f68a5a65f4f79055752c09ee63c7e0647e335d28547e72c954e01","sha512":"ebfc9a3cd56b2313987cb42413509b058652993a195cd1e1d24eac07ac7acc669a06bc59e36fc55678f787175e6b66f7366be026a1bc6caeae498430f3842f46","ssdeep":"","tlshash":"0431cbea7f7d684808ace002c877fdce45821d41d1ca487cbbad4e58c3993069a89387","size":1795,"data":"","first_seen":"2026-10-08T00:16:46.767559Z","last_seen":"2026-10-08T00:16:46.767559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d54a821c4848222c68e8098be777a970","sha1":"2cc724331743c835bcd2f0c1c2490b508ce8ee24","sha256":"f8d2649eb2889b67c9d2681d4ab8257dd697dc11c1421673b32d088cafe81dd2","sha512":"3c6d0af6078448b5a865d106bebf2abd496c05b5707733f10b0eb29127f0db9f37162bd076bbfeff74595898edba5264b0b53d149986df679ef1899a52b49a96","ssdeep":"","tlshash":"6dc04c6b774c19e5124739d01f9f62d53839918876517c118caca905d49089a6d06f9c","size":147,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-10-12T03:29:25.171822Z","times_seen":32436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5c69674eec3e678d3450b4f2f18f82f","sha1":"94bf791d636855d8b675d7402c67d02dcccb9731","sha256":"1e4f1ac504f4bef33f7adb7474e926bb70bf58601f29de723b0abd77574bb3c0","sha512":"e0f87f9b2a54c4dad49b233bc57b2c2e154cc86809b116e1df0e9e891249183065859420256f19596c44dc295b32d450219b2201e9a8a84cd781bf74d93dc7a6","ssdeep":"","tlshash":"36b02b027c850f504b791fc80645003611220870d0804042d8001085043cdc32a98601","size":124,"data":"","first_seen":"2026-10-07T02:38:28.596461Z","last_seen":"2026-10-08T00:16:46.771345Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f32ab9e4f580bf968db6da45eca2100","sha1":"958ee25acb431d35d331ebf0a705386807a637ac","sha256":"627b41fc128629616672b98bbaa4ea3149cd9d283d9ee3967cb0a44fec7fece5","sha512":"ea64fc72d26f4ce6aca5f81d51da8e1cadd7ef5469cace6ccea8426c9f8bd4bb5cec10d921ec056b67e5f5ee461c3b70ab7c386b606dff2cd668d2ffde47220a","ssdeep":"","tlshash":"80e0e7d923afad435395afc8003234f570911443d149d8354fcc7d444310440da0475f","size":297,"data":"","first_seen":"2026-10-07T02:38:28.598168Z","last_seen":"2026-10-08T00:16:46.773293Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"69935ca81cc5bc48344c37616b0d1e9b","sha1":"4730fd622f477fd69e9c5b19d602ac508aa90ff7","sha256":"2d6ffba796cd8b870a72a18e86fcf2e2bb414ed627be53b45b2a1d01d1db46ea","sha512":"8d2e1ad904473b48a3ce8d9888474591cb584c91547aac38715adffd930e8fb3bb451052f4f3dc9368274223c6045d8de74805764625459720c457e34f026aea","ssdeep":"","tlshash":"45e086c5ae7f3d87558cfe918471ada528a06a82a14744311f1c67d95334e41fd1c3d3","size":359,"data":"","first_seen":"2026-03-05T08:35:47.699907Z","last_seen":"2026-10-11T14:17:11.125954Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d80f5161fb13fd450613eeaedcde032","sha1":"29de0a705d74229db465266c0564799e0712ae8a","sha256":"0190bd9a9ae83b5d15a2f228fcb9fa6886e35f85a6265c82c0ae799296ec927d","sha512":"758f879884119adc404a3ee29fc47af0ae2e77ef6f1ec82dd1557d33b0799c82a2811f85db4b8e106fe4b64f492d4f8b37236782ac17e3133fe990777a9e74cd","ssdeep":"","tlshash":"780197526e046876e7c2801241a87bfd33b333bab4c0401dd3ac5b5c922cb81e5d2a0e","size":791,"data":"","first_seen":"2026-10-07T02:38:28.600354Z","last_seen":"2026-10-08T00:16:46.775831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"00ba2d2ca3a9e05c9874060dc563a289","sha1":"8f92728ce58fe3bde929c4dc74ef835bbcedcdc9","sha256":"799cae6adbf015c557460b62e38b8c5148912750b0e2ec3cbf615a663355a09a","sha512":"2525a453cef6ac437eb6ee3d1a0ac0d02bec84a0ef6aecc2edf9dace5b3754c1e732bca1e5020c4c675a3d17c455978665d5736599cfc2b5792050c1195b3139","ssdeep":"","tlshash":"1ee02bd30bfa8ce31cc9dca221206ab33070b563f5580d906299dcf90270f42ee45d1b","size":304,"data":"","first_seen":"2026-10-07T02:38:28.602041Z","last_seen":"2026-10-08T00:16:46.777802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"65381958ce1266c81e381d90114446a1","sha1":"ee077a94c196cba2e6db60ea393898e0110bf21d","sha256":"1a9fcf842d633a77ecc4a5f95a5affe298c27497ffd60746c022394636d1b72f","sha512":"79d7b192a08440cddfe072acf9631cc9376c719a8f89770e653a75a7c04f13b9cbf9110cf07b7a319a565c55bc4b8ca9a2d513a7868da71f85485c2b7cdd615a","ssdeep":"","tlshash":"f53180d8bbbb2a4d154dab0285beddec18557cc248bf80765f2d17c4c128608af5e7a3","size":1744,"data":"","first_seen":"2026-06-08T06:01:17.428859Z","last_seen":"2026-10-11T14:17:11.127634Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c25e209150afce64441e011ef84f6f59","sha1":"9a2628d69e42739b9a4f2ef4edd11543525dde62","sha256":"12b9158270165f8c6a9295d9270fa9b0ab0399869ae423595e1cb96bb9e37f5f","sha512":"b13e3e07e31b2961e0a21e79603dff5d6d92b0f3bbeb65d2867037169d2c44f5a9c485e2d4f678d4bae649145e35e72e542e5f7952acab12022c8338a13b20c1","ssdeep":"","tlshash":"67f09edca30c2525c22111192d0f33dd642ffe76a545687e6c6cb8411ad1d67c6e58b8","size":504,"data":"","first_seen":"2026-10-07T02:38:28.604192Z","last_seen":"2026-10-08T00:16:46.780836Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-10-12T03:27:05.245239Z","times_seen":31748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ef81b3fde3dd9d70c012aa312111307","sha1":"295a8732e32ea2fdac1b515d435aed5a833743f5","sha256":"eacbc25d78bff522e35cd8727d70cccfc796a9cf6d61125a011633b21c8f606c","sha512":"477e1ab7787e7e40c00d04140fe16ca6a4c9535e8649f559843400e050cbbd6df9017ef98d81119a5aec4c3f5b9e46a5332c3ea53529418067e1ca74240bdf1a","ssdeep":"","tlshash":"9431fe7ef5291a36099560fdf28ae341a030b09adc418024efb5cc5da5cce9549abdf2","size":1793,"data":"","first_seen":"2026-08-06T04:56:32.667202Z","last_seen":"2026-10-12T03:27:05.247256Z","times_seen":1767,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wc-cart-fragments-js-extra","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d997978b3cc71755959337957eaa1a7","sha1":"fc6fdcfb596df1349aee653f85625edad488168a","sha256":"9da4796f47900501fcc63d67227bdc7be8d3270928279619623ce3f1df8f385c","sha512":"a6384c26dfb58c05f68c7eb18280475734cd91a9c8b039e2dd166b4f8e006a781f7df2bb714edfff25de1cf42e2c0c3296ebcec58f4ad7694f531c959cd405a3","ssdeep":"","tlshash":"aef0c2d3cbfa8ce318c9dcb221206ab320a0a563f55849906299dcf90260f42ea45d1b","size":641,"data":"","first_seen":"2026-10-07T02:38:28.617869Z","last_seen":"2026-10-08T00:16:46.785702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/e949ba25319e79d17e357aacc63ee004.js?ver=75186","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b270ade769477764ffc2925f77771019","sha1":"5caee265b626d069d9b4ef112ae2a7932dfaf961","sha256":"fcbf1c793001ce056e9c8a7d276bb60c725bf4651e538ade929b9fc66f558578","sha512":"090360a0c81e7b68e31b5a08627a4c7c256c2285390e32bdf821881ed1a4715d04a5c8afbaddfd00ca9bae4780fc7ba88cefa81f1ea02d7814ef0f609aa53289","ssdeep":"","tlshash":"2a2176c5f196a9f3013334b9c33f4207b232e4149aa6d951a4c9c4f2ae70c96f5b7a29","size":1432,"data":"","first_seen":"2026-03-11T16:43:44.333824Z","last_seen":"2026-10-11T22:31:46.481332Z","times_seen":467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-12T03:30:51.114309Z","times_seen":1102016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/dc6a618c3e29cf2c7be341c6cfb7c9f7.js?ver=457a3","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22d04a9f346ac6bd88750d8fd6eb6b27","sha1":"39498dc3c4e981190c4bbdb1f1754c421d297ec7","sha256":"9d6785b82c1f81d373b86be7d06a9e6f48b4f1d318e52e65ed7197101fd14a1a","sha512":"bf0f2b2c1fbc2cb1c6cb6ed663c3569fdb84e285fe5294c6cf7edc3dcf7cba11391dfe1bc099c379ee46bb288965cab701645a49af7d0a5e5ef6f2910825f7a1","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMh:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovz","tlshash":"5b12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9637,"data":"","first_seen":"2023-08-22T04:17:43Z","last_seen":"2026-10-11T22:30:40.770619Z","times_seen":2218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/fluentform-elementor-js-extra","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8775c6246fda01052d04a00f6c8f3adb","sha1":"8a6812415aaaa31b1b8a7be09d168163d4caf12f","sha256":"e3fd02a7ca420503afa4cf94bb94b61e70df0c8c70ea33582dabeef9e9efaed3","sha512":"704f347290ff3e3318ed6c0611c734d4e66c2111c98e365a280a638c129e1119172cf57002ad2e0895561704ba9959a5e520c9ce71afc4115662b55b13b2ac51","ssdeep":"","tlshash":"88f02b02fc850f508b791ff80a49003611620870d0808042d8005085043cdc32a98601","size":457,"data":"","first_seen":"2026-10-07T02:38:28.613131Z","last_seen":"2026-10-08T00:16:46.788713Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/9118ed2d643ecc74e8577f066ff65e23.js?ver=f9787","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"075253b68dc9db929f73667c03a349ef","sha1":"2998d964bcc2aae1096a08e2803389e55f2a13a3","sha256":"17c54838ff27fd5ce4792f6a4da0905a39ecb723bb56085cb4ddf9157468ce42","sha512":"772d8931f5f323ef20ca91cde1f2110d75643dc481928643eb2307cdbae6bae84d190420c1a0cc8cf2aca7046f9d192331ac8059a4187159e0278f459014ed47","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5Vh:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5Vh","tlshash":"829173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4351,"data":"","first_seen":"2025-12-12T22:29:56.839028Z","last_seen":"2026-10-11T22:30:40.806962Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/17823f2f12ccca26fbf437556a5c7824.js?ver=7ddf9","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7652006f086b444d29a94dec7b6695b2","sha1":"346a12c25b07d00aeaa86b90339a18bc1cc325da","sha256":"a946a19e4f38b44f90a78aa009c35e1139c6634ff7a5bb819c5aac4b88cc43ad","sha512":"9e531766ecd96a45cfbf5bda1f34781ae073fa8e33df31bfe4e6b6f37285e6c48a3539468199e6af6a22b616d2cb6bbff573ff90f76433a8e1a23aba311e90e1","ssdeep":"384:uhv4JyIOXArCkR85WfQVwlK8RYepz/26hIFugRjN:w4EPXwcoXmet2dtJ","tlshash":"4782a4c836c3f05a976231b5007f108bf23a6ea16cada910d165f4f8bcb845d9537e6e","size":19013,"data":"","first_seen":"2026-05-22T09:22:26.657799Z","last_seen":"2026-10-11T22:31:46.480402Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/e903d0a3ddb24e65c66e30563010a3a1.js?ver=c34fd","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7231f6e24010e62abcda87454f517043","sha1":"7fc17505d2d1b093f93279f287469cb005e957e6","sha256":"497d6141b6e24de7112491bff29042b649c7050b4a7b65435f8f07ec9fd8cd27","sha512":"8947d818ff4d7c84431f65fa3c1c14df5711868c1aba50d13bb05655eed7bbd90380e2e9498cc53cfe3aa27c0a2b8858276f872b9236c11d87fdfb2b40808488","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlwpZswn+uOujAvKsPPF3cLK:0cEQxc4xN6a8EJWrO75ekwp1lEvtsd8j","tlshash":"1591661b74216d7322eb75ba2c9ee98414331639a4414501b509cf6c3b7e8ca7737b6e","size":4282,"data":"","first_seen":"2026-09-05T17:34:13.375624Z","last_seen":"2026-10-11T14:27:42.395115Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/c79d65291f847d89d221691e15366fe7.js?ver=d009a","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95ca8b1f5241f0564cdca2b8be3414c1","sha1":"73e6fb2e08b033fb1d84e0c4b1ce624ce32d7f5b","sha256":"7c5bdd5da7452d5fe0b8a6131014380625b7b6afad825bfae85c2e9454026d19","sha512":"17c6827bd965cba99538601ee83d6112d38855dff0cb0c1ffa49bdcf8f02a44b3bc59497b841b5b6da42b2a1fbb89a0254e70c76b905f24cb39a14f96a5ed2a7","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFp:qNdi7anPH5FL736ePkPx","tlshash":"6562e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","size":15316,"data":"","first_seen":"2024-06-23T21:23:24Z","last_seen":"2026-10-11T22:30:40.774786Z","times_seen":2102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIHB5c0ZhY2Vib29rUmVzdD17InJlc3RBcGlVcmwiOiJodHRwczovL2R1a2thbmsuY29tL3dwLWpzb24vcHlzLWZhY2Vib29rL3YxL2V2ZW50IiwiZGVidWciOiIifTt2YXIgcHlzT3BlbkFJUmVzdD17InJlc3RBcGlVcmwiOiJodHRwczovL2R1a2thbmsuY29tL3dwLWpzb24vcHlzLW9wZW5haS92MS9ldmVudCIsImRlYnVnIjoiIn0=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c2417dab6290a0032cfe3e71031fcde","sha1":"3c031a5d16162bc3d98ba2c15ac2fb78f68c631d","sha256":"4ce5697966e35b1b657e5981a63018150c616989c88d153cd5eb3ae9756fd9da","sha512":"5d1a6eef64db1763f24539eadd7cfc2bd66babe8189cd005f31f9d55abb36fe03c9768c21d9c0367e2ef73398c4507219d2b8923de0de71597b06fdacf83aed3","ssdeep":"","tlshash":"35c0806b94dd5d97173defe0e36410314c331f1285d3b646cf0b7c9447056158795213","size":191,"data":"","first_seen":"2026-10-07T02:38:28.622316Z","last_seen":"2026-10-08T00:16:46.791373Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/5f4d357fa6aa47b0a9f49e2f92fe7fb4.js?ver=a1fd9","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"225c9b586ec70f0f1fcd1bb916d4fdae","sha1":"416978db684fe5b59831eea9e5d3ff6ca0c9ff9a","sha256":"b0bf3e3c690a329cff11f5a36cda9b539fbf0c15a9821c7f9cc8d9505525f004","sha512":"5e2f573713d2a3524c02de771b8b63048fadce603e7d8282a7fa7b1132b8af27857756772a8793eb77d3538fb7d079e3812beb43904d8d65d1adc6daa937e88c","ssdeep":"","tlshash":"c12101dcb25230d1bbba2070756fa80ff031748f19268500618ed6b53dbd85574b7e36","size":1319,"data":"","first_seen":"2023-03-07T15:40:20Z","last_seen":"2026-10-11T09:06:57.605413Z","times_seen":1047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/68ff5daaa90d11d3d9bb0df1f8e454fd.js?ver=34375","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff273b6524d7dbb457965cec97ab8261","sha1":"089637548439047d9a2eac5480c5c0ddd1b4866b","sha256":"687c7289f48a5cd1d9d19b25b671aa8da6588542507fa1103175b0d3891f95b2","sha512":"a4a4dc80eff8db26dbd5c9c9cb8a942aa3525cf65a8b0fbc181ecd31d518999903547748d345937760d469cd24a14535bd75fba427b599292a375d82d6856e55","ssdeep":"","tlshash":"2801106db6aa64b902b756f3c0ef238bf03a11d4640298911941c9d05ebcecb1663fa7","size":752,"data":"","first_seen":"2026-01-18T22:50:15.249662Z","last_seen":"2026-10-09T14:20:41.089601Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/80c82b788548cfa34593be080c5bf486.js?ver=22c3e","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d81932d7d58914a225c573512a233bfc","sha1":"fb3c4cde253a41a3e40c2cfd67249cacfd834aac","sha256":"d101944e7d880ccda0af7f86127b324cc2e7b9fb8f91fbcacf31891cf142909c","sha512":"d7b7a4f86b7361c8cc7190291c849ffeae0ead8d88dfdde6c0510dd65706e376b4d92ad0a324c584d5e1cd6f67060f56380dc47d715c8b0a4573fe95d03c5b45","ssdeep":"192:J5vAfebw9n0/sQPgWrJzSqy4e7Ga7JK3inMKQjdw38yWjQ2YgIsQXbo6+LjgPps:JY2PgMe7Ga7M3isO38yOQ28s","tlshash":"75525205153994c35cc37088187f5c96e06ad6de09242eddf948fbea84c8d5be82e3af","size":13206,"data":"","first_seen":"2025-06-24T17:52:35.25589Z","last_seen":"2026-10-11T09:06:57.691564Z","times_seen":227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,dmFyIF93cFV0aWxTZXR0aW5ncz17ImFqYXgiOnsidXJsIjoiL3dwLWFkbWluL2FkbWluLWFqYXgucGhwIn19","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a3caef04737bbb87b3c848a0f19d278","sha1":"25bab98859fe876bcbe094744f46c03249a30e77","sha256":"fd60db6d40a5b6dcb90ace465797b6cbaf28c3588a49f9b577b2434bef5a9eba","sha512":"79f30b9e65cb63a427d5b9b1048a4429e9bcb8cd6ce43d6f6e4ed2eb909e3ae4b6a071b8fc6bd826024c138ffc270ceb598f37feb8b0f01a4e4c8250cd447e46","ssdeep":"","tlshash":"3aa022e0a8200f0fa0c22cc3c000a3af2830f230a0200c00228280a003080088e08000","size":63,"data":"","first_seen":"2025-12-03T00:35:47.995767Z","last_seen":"2026-10-11T22:31:46.711227Z","times_seen":2098,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/c937cdc7417dcc69057c854404bacb59.js?ver=93b95","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"856903a324021923b8c5678cb14861c1","sha1":"75914a7fe50aec7e71de5cd09e9198df3f0d0816","sha256":"6c6b2c5c9dfd7e67f58644bfaaf2686f95b0ce62e8c8af1eda5d0d739cede8f2","sha512":"083db2926756baea8aca18f28b59c712f31ee986ef82bbd08f418e50f7ef80efd6c698e59ab4b46f9a1a809f7fb2e1b9a41d84b72f29c69dcbab83a62c9704d1","ssdeep":"","tlshash":"a2518335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2440,"data":"","first_seen":"2026-02-06T18:47:10.448525Z","last_seen":"2026-10-11T22:30:40.843412Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/64b053e6820390cbbb11f291c483f50d.js?ver=e94a0","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e46fc9c987a75c9433c50a095f42bbc9","sha1":"67b306e8cd5be8c52f72761b66e924ece8a9ea37","sha256":"8f97be55c0b3cdf486d14c8103b2b2ea1cb02c3d7256d7ff0d33167e00178036","sha512":"09719855d0c93089e8324d6755b0212e0dfe435058b743c2572e110fb6b32ada78bfe1e3d660650dd65e617411480fa2b5d13a33afda7979aa6aa428ecc7225d","ssdeep":"","tlshash":"6331529834553c98029f6615237f128ff1b89f899c8da7598359a9f27638807802bff8","size":1710,"data":"","first_seen":"2023-03-07T15:40:20Z","last_seen":"2026-10-11T09:06:57.699964Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"daa882de1d3901e0542e0529f83ea054","sha1":"101295ed721f7a7c29a8b370ce53f6d17ef7d68e","sha256":"865346e65086604793b3dce48b2a38069a886e98e732106287de06015d08789c","sha512":"eb21b14dd9a466074f119e39e76c73cf00b03ae6ded8a99f704d51d6848d01a6f8a3e065d759750c3e378e2b913d47966545bf403fac3d8d8437daf8e017d4ae","ssdeep":"","tlshash":"621154a838fd68dc839a56bf353fe74c976e90134c51cc48c11ee4590475eabc491eba","size":1005,"data":"","first_seen":"2026-10-07T02:38:28.609142Z","last_seen":"2026-10-08T00:16:46.794278Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/e6a618c7c08d01247d952bc17ef7aeef.js?ver=f351b","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8adf9435c90614c0d030c6cd156d0091","sha1":"bc84b2a05b157f2046ca8e0d8befa7cd9a507ae2","sha256":"0ce763e474d11bb3af0233416ded3f7cfd8ade51ca4d371bdc414552b048bf79","sha512":"cd18da680923ae1a4334558b62cd08c3fc745dadfec83e27d7d01befbecade2c72c219452394bd7fba9aa31cc84ff96234793d5c08216441890bbf2bc5c9ed4a","ssdeep":"","tlshash":"be2152ec31b2e1356beb65ab7937bbc43932186332029094889e15744f71d47c127aee","size":1433,"data":"","first_seen":"2025-03-17T01:59:03.637098Z","last_seen":"2026-10-11T19:21:20.001793Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cab39c321eaf09b68285c7fc3791794","sha1":"8ad1c2862ec6bec11ad213b534d6cc241177f53f","sha256":"a0e2445267b9ebfbfd4e8a509208a16fe57ccccc3fb34f62d3c3e3ab5bdef7d2","sha512":"cb42de4d6c4044f233be22d55589addace0204b13fb605c7b7be0d4fb024d0e6ed51998e43b63bffa33a7f77c57ce99f409caf563e8d1f43d7b87dee08aac0d2","ssdeep":"","tlshash":"6f01f15026c4357752eb3600622e58c7e1edc5c9af58c9a1a86e5ce18770c52d4fbf71","size":811,"data":"","first_seen":"2026-10-07T02:38:28.625303Z","last_seen":"2026-10-08T00:16:46.795931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/8ea716bdd4b3b022e2e463df71f7f3c8.js?ver=38c63","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0712e29f1805e38af8574710a7dbd07","sha1":"b1d654776102678bd45ec207a05324dadd70df28","sha256":"e44887b3860b72b4b607b36599973349717e9fa64641fb3cdee36ef286ec873c","sha512":"ac8adec8929f63165770b06fa88a59f3fa792f8fbb8f13a4f45ec7dc5b605fce65c907ba94d6f51aba88bfb0d482e7904825f63a681afe8e49ecf9b2748b5039","ssdeep":"1536:OCAiGAslIVHYjc2mSG3jwFpsqRJNNNrCtio0iS2KaxP/0m1KLE8r0/XIWWgSPxwa:P3v3cNNrQ08uwzRD7B4jqY","tlshash":"65b3f90932d8711c12ff19786a5b7603b376d6b570d998a0da101ef41a79b07f0eba3e","size":110597,"data":"","first_seen":"2026-10-03T13:08:58.650323Z","last_seen":"2026-10-10T15:10:10.598343Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/2b3ef62cc3a0914d95a1e59c295386e0.js?ver=b7db7","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"177f8b3bfd1605e42a4704efcdf01cdc","sha1":"7bbb41dfef6605c098140e1b73356109d41aeaa2","sha256":"84b14cceeb0c70c877787e422922e238ccabd6a28084a81cad6a10f64d8d3f8d","sha512":"a84fb72ea8c9a6992d3086aeddf999d96542530adf3cec55e116d5b0aae694d058a4014334274094626aecec79a3bbdecceb67a0a8ea0e780cdc3c76c8e09405","ssdeep":"192:ywypHcFWh6FbKqYQIILvP+k6T9he5aBhOVfaOW4fW33BEvp9UkGhi1zKRCL19bR:ywypH36FbKvkn+dbGgOVfPWmQ3qvSWB","tlshash":"4952b54073c2a376d39b30ecc95b450ea9b77f1528062190b22bc5955d68f08e1aff76","size":14218,"data":"","first_seen":"2025-08-16T23:06:15.854043Z","last_seen":"2026-10-12T02:44:18.810777Z","times_seen":531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/woocommerce-js-extra","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1cc0a85ef4f1e5ac906237bfebe4ea1","sha1":"a93b4a578f68ec00050bcab88fab54d8a359446f","sha256":"b2f3430537cf9e977f6861fd19a74f98c22b1a06e8bbedc7385d6dbfdf1a9e37","sha512":"5168cb27ba25356fd07947b36452302b00be5c744d40e75ff9c0cc7d5194e2782272e3b337dfe24e49953eef19b48df378cfff968ed9402cfe943a0079d43295","ssdeep":"","tlshash":"c8014fc5ee7f3d86558ceeb18471a9a528a06a82e14644311f1c67995224a41ed1c393","size":694,"data":"","first_seen":"2026-10-07T02:38:28.606921Z","last_seen":"2026-10-08T00:16:46.797517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bzrcdn.openai.com/sdk/oaiq.min.js","fqdn":"bzrcdn.openai.com","domain":"openai.com","tld":"com"},"ip":{"addr":"104.18.36.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2761a2adabf655acab59502b4dd873b8","sha1":"d485bd4600592727a021ce967162bc2cda718b69","sha256":"c25abbd7f5a09dda253ae62f82ac489b5597234da4f064fcbfc35480bfdc034a","sha512":"bbd7c66f474add4d116acdf453813786a8d1db34dd80322c35d8e96513e08e82d2bf694d5857a10bc22572c6b0654e11c52b1f1cc1b9a10bd11bb23e85af9ccd","ssdeep":"1536:ZHCKVYZY58lhUZLFwstD/cFghBj/kC0WDGef+1iIvwgi:8FlrsZcjef+Xwgi","tlshash":"948319fdb396707363ce4178d1fb1007b278a8b2144c4004e169aebe267569a52f6fbd","size":82799,"data":"","first_seen":"2026-09-04T14:36:00.414447Z","last_seen":"2026-10-12T03:14:31.511952Z","times_seen":3206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/88155b5abfc722145e58fc8bfb76dfea.js?ver=e99ad","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"baf07315015471df7bda37547934e016","sha1":"da1dbf551408f51caf68ebb5b44477d05fecd321","sha256":"bcd8482491d261c223749a5b352d5f29eea4560d9dd7bfa030dc270327c37eee","sha512":"4a2841b478b18f269782ba418c82b756ddbfd8b67d213ad594b5e4ad6d816b993b948269bea3fb509ec6d05882f557c76fa8eb061efa9179eac12629cfaf45c4","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLOR4:5rprxaefKI0LP19m4q1WW+h4Mj7","tlshash":"0952c8adb56679724eb721b8f03bd24b71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-08-10T16:39:17Z","last_seen":"2026-10-12T03:28:01.973137Z","times_seen":11562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/9ca05ae8b1c5e957cbd13f6e8dfccc44.js?ver=38d79","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2553c8b8160065ca55b92b9478f3f399","sha1":"116d391fd6c6dc674f5f3a571146b005580ddf7f","sha256":"cf85eb4ba80822af46334e10183d9de1502f518b50019f07c86b55794c1504fb","sha512":"e6de3d964151a50eac5a6c7ef7677626d2e0144da9e5e2ba2843d288081ed915223c09cd1caecd0eb4b3470f1d0bad9900a5feb3221534393da7fe61dae40aaa","ssdeep":"","tlshash":"7131308e7b5260440382c260e13e88ad773b687b700c0e897b30fcd93ee5e2c56519ad","size":1500,"data":"","first_seen":"2023-03-11T09:39:20Z","last_seen":"2026-10-11T17:49:30.713274Z","times_seen":3359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wc-add-to-cart-js-extra","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"184d237aa339bf6d7de83c3ecb353d02","sha1":"fe9bd9d266fc22aed338273bca33b20f7649c140","sha256":"edbb2bda21557f281bc01da26b6e93882dde70714b7090b36e49e24bea95edb6","sha512":"d92cc91171c79a8c1671efb89bcdb81c32fbc74ffcd114ffce002f664e7cd3191e2aa5c02d9a1b81e6dc671c524c2d83f7a7a8c0fabfe81b0e6b8e030c3f838d","ssdeep":"","tlshash":"fdf07dd9e2afad435295aff8003634e570911443d149d8354fccbd444310440da0465f","size":631,"data":"","first_seen":"2026-10-07T02:38:28.620536Z","last_seen":"2026-10-08T00:16:46.799146Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wc-add-to-cart-variation-js-extra","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e658d9612c475a0bdcbd12c9b586edeb","sha1":"cc3ae13024ff236677ef71f618ca699dec25f15a","sha256":"42322875df08f6d5c860031e951d13f458781bbe89d574836afa91b9f43bb86c","sha512":"bc5fb1259109a2783e548f161eee70ff77aa465d4084575674e8e72634bb1956b8c1c6093b75fb49aeba395e6212b37fb2edf4afd8c7171fae4745b1024a0bcd","ssdeep":"","tlshash":"2b418fd8fbb62a4c154dab3285beddec18556cc2c8bb80755f2d17c48128608af5e7a3","size":2082,"data":"","first_seen":"2026-10-07T02:38:28.627671Z","last_seen":"2026-10-08T00:16:46.801101Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/25e0f080de05de391add626265b7196e.js?ver=3fee1","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68542f8c2ddfb9549e33dcac00b3f641","sha1":"23b0fdfc3deae362ad00d7c07ddd4c33441ec80f","sha256":"11b5013d59b4ebaf7daa5ce4be4d97adb9ed55f9f6281eda3a47bcee8d5f1c94","sha512":"03c19d876ce06c21df281dda393ee2af2e862bd9be65903ecf1c9b31509e6402edb8b52e0c576e16bc1b2bd917b6997c5ee607710e5ad9c7b8af722b2a84418e","ssdeep":"384:AbWuRTEkOzFV/xt7mpgAP6Yyz+Px/OYapnj9jHNK0lnDuQy11DpbyBqKD4XKlGWe:AbCH76Lyz+JytNK0lnDuQy1FpbyBqKDQ","tlshash":"cc7260e5b23718533a6f12bb948f941cb139e83c6246c4b9ac96e7b3583cd446363b1d","size":16628,"data":"","first_seen":"2026-06-28T10:31:57.549913Z","last_seen":"2026-10-11T22:30:40.833258Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,d2luZG93LmRhdGFMYXllcj13aW5kb3cuZGF0YUxheWVyfHxbXTtmdW5jdGlvbiBndGFnKCl7ZGF0YUxheWVyLnB1c2goYXJndW1lbnRzKX0KZ3RhZygianMiLG5ldyBEYXRlKCkpO2d0YWcoImNvbmZpZyIsIkctMU5SWUxTSDA5NSIp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"46c8869382e9b75f547c5ea4bc0d62ef","sha1":"9422b0fb36d58da6eebf98db4acc0a3b105de0b1","sha256":"1458d0e7663ca3e09a0da8ddf81965eb3f900b506e9f952f0535c75eba3e7c03","sha512":"9382561e3fb13bc26213738715dc87488b11ef285be8afef3fd4f9b8c2ae281fa51685b3db35088d6b27ccf14bb009a6a7c4862b2d6be32ece791696b8c53f4d","ssdeep":"","tlshash":"b2c02be835474c7111ff0f01075f330035023310418009380405b0442521d632166c40","size":132,"data":"","first_seen":"2026-10-07T02:38:28.619175Z","last_seen":"2026-10-08T00:16:46.802753Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/631d01b0fafc17c83b44dce935336b7e.js?ver=cec92","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d5d17d0adb42101d304a78277a66bd","sha1":"ebf5f92bf47dca59d284063b90837ada7bd95309","sha256":"e606bd57b8eb5d078788c0912df3b88c1cadd783ad73ad5385edd7588549bec7","sha512":"24dde835c03809649914056a7db24f32adc777c9c9cfa9e14e2157ad12e5abee1ced3893112ca0d611a9f114195a12678e9014d22fe60a115b637e4cc95e13f4","ssdeep":"","tlshash":"1851221fb0608e9658b3187e617a719622329d69f2098a70a015dca42eece4b1777dcf","size":2940,"data":"","first_seen":"2023-10-13T06:30:33Z","last_seen":"2026-10-11T22:30:40.85514Z","times_seen":855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/cb11470e84f5df21a34f1bf4d239488a.js?ver=fc3a9","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"204a9c5673d42178265858580d802297","sha1":"f05c680cc16b886c45eb6637f983df8f299f058e","sha256":"69e4a8162c94cbea773fc758544c4c81c29d577a5f4d48bb9e585e7ebf657f8a","sha512":"cde4a38d9416c18391f3d912471bd072a7187f833b5480f5d9c33bf144e851d6c35b6af51b411f0352c0bae970afbbfbf9ff944ad68c039f8ec7b938652b1d9b","ssdeep":"","tlshash":"a931b6d93095a8da06071490463f1207f2f91f27eecd98906264e8f50ab077a01ebf6b","size":1721,"data":"","first_seen":"2024-05-10T05:46:17Z","last_seen":"2026-10-11T22:30:40.757924Z","times_seen":2177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wc-order-attribution-js-extra","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc4b9fb2dac8eacf0f884f67b2ad9c6f","sha1":"fd13b3254860f807474f3f21a8a2d846079891ca","sha256":"969a86db5910559022dedbe3b8c37c3c63f410e71805f0de4d3d97ec8ed1a8e3","sha512":"fadeea34c38a7a4e3fbe3edf229eca186f7832b91c47ec099b28f81dbfa70221a2c7057f13a43ab0b2ba5d1940931a5fc8caa6e9732358edcfc67a8b5c980162","ssdeep":"","tlshash":"58216452ee046876e7c2803241a87bfd32b333baf4c0401dd3ac5b5c922cb81e5d2a0a","size":1127,"data":"","first_seen":"2026-10-07T02:38:28.626523Z","last_seen":"2026-10-08T00:16:46.804318Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/af2eef6d75d4c6f83cf64c9e9889baba.js?ver=8750a","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c79856ef4fbb358ffc18e524aaa6756d","sha1":"9d8c91662a58a2e0337192bacd02eabcd016d03b","sha256":"8a3522faaa955074b14e6d42205328dbfb5d92278269fe264b82df9463a09c8c","sha512":"6ac5a2283bfb0648f63f7d882409aa0372d5bc9daede27e982dcb7ec142d17c7f07f1cc1b80b36d2ad230ce50334651c9d45b50af71c00799179ce6c7578b2b4","ssdeep":"384:O1n1fACx+q1YzcWQ/z/UaXYsg9xsGud4gajytnO1gB9LuAEins0DvyzqyymHRkf9:0n1fACx+q1YIWQ/z/UWg96GG9ajytO1o","tlshash":"6db2c529f27471a945bb60f6b83b53a4727730757107809cb12a98da1c2ed4e2233f7e","size":24538,"data":"","first_seen":"2026-10-01T01:01:14.619813Z","last_seen":"2026-10-10T07:05:41.092719Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKGh0bWwpe2h0bWwuY2xhc3NOYW1lPWh0bWwuY2xhc3NOYW1lLnJlcGxhY2UoL1xibm8tanNcYi8sJ2pzJyl9KShkb2N1bWVudC5kb2N1bWVudEVsZW1lbnQp","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc7146e2b04871500c6c6b741f931d6c","sha1":"ad7647f8688c16adbf66ceb30d142bf7de5e7503","sha256":"8310c25f96c9c0baef44b5f8953d3d34399f45dad1776a46574ac2cdd4e5c428","sha512":"fd40c6ff9a4c1314e75c056a4b816230b720ad358ed98b0d186ca00e5c8d90f5dc6facd840639693dea835f8d68420922408c74a009830fe29c8fb32348f9ac6","ssdeep":"","tlshash":"f6b012343c34a42d192b600c31df436438324050f9016940d07e38844432f440701f84","size":99,"data":"","first_seen":"2023-03-07T12:02:24Z","last_seen":"2026-10-12T02:44:18.843654Z","times_seen":5042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b9511f404b8ae71ea09a6e8160dc2af","sha1":"85b1f19056484a74c12d2726e8c9e3ee56da5a53","sha256":"3c452ed6eaf20a69a3508d70428f75144731fc30886c3137d267f4cb3c383393","sha512":"a6b50c5d20ee5685f9261a62b1d6d0f8df3ffa1758bc39536cfab3daa7fb9fa2c66b5d8513ff7c347490709445b41f7083c5a53029a1f980ca42be16479164ad","ssdeep":"","tlshash":"7921fcb0739ed12e90cbc686df78ffac061639310595a1306fbf48788158828369a319","size":1387,"data":"","first_seen":"2026-10-07T02:38:28.62381Z","last_seen":"2026-10-08T00:16:46.807309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/c9bdeae3ab8417824b6cf52040a22a9d.js?ver=0caa8","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"583c5479795c4f009302d001c32c8ee2","sha1":"207b21422b19daef044da887ed50461ccfd25351","sha256":"429db85ce093160cbd4d47949b6732ca2b3c1c8fb27da584412d3d82b4c8570c","sha512":"2ab71adea5c457196bd76ba3c826a30c89f00dfaa15df025663b83a9e74032c9e66552c91749c558564b44d25e3389efefb519078682caadf23f6f3e718e7798","ssdeep":"1536:wfb0FL/nm9csLtvcJa5Il4KKPWDR+LnPAGVTlW:WbfjLRQorPICPllW","tlshash":"bf53e769729070fd01fb61e7f13f672432376566b00b4054b1299cea2c69d5e22b3fba","size":61379,"data":"","first_seen":"2026-10-01T01:01:14.661972Z","last_seen":"2026-10-10T07:05:41.882746Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/pys-js-extra","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18fec435ecf5a8e01204de757d68010","sha1":"b8440217b5740d8e994c9a9bbd66ed6b7e45ffeb","sha256":"0e67e4cd6052e236921cb009d68b83cca0cb272fad48f6700490dc646072a7a7","sha512":"6b3678dc166558ad168e2ff9a6052dfa92f1bf3f71dc70d45beaf728b85690afbb8aff2f3e32be45d9336534c7cec902c88550a6d97c67b60120a1fd4f984a08","ssdeep":"96:0SIucsLd0ucOKuq3RuYU8ZuLcb/urcdjrng9+fZlDf2nq/Hkj6WQrzAeHKHfepq:vi0ct3PUt2U0g+fjDK+seHmeE","tlshash":"5bd1465a6c6cad9c4dece690d5e63e0346bc2572f0c1b8b8c26c5e1c52cf3952799b13","size":6549,"data":"","first_seen":"2026-10-08T00:16:46.809094Z","last_seen":"2026-10-08T00:16:46.809094Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7582f23192bb66dd52916eb69be05915","sha1":"7b0409e7ec330e6a88860d9acd03b3237b43ee03","sha256":"b6e2dd7ea1faa056535ba2601bd9c33bf1a2ebe18db01d3f80eba07d5b8545d0","sha512":"0191ea1a4576d136c5fead2bd875366bcccedfd143ebd5b7c062900b375bde4649837a9bf15d952aca08de305fe4c575a1d5f974730bd597298d8b5b435a01a5","ssdeep":"","tlshash":"bb01a2e235a2d17ebe9ece774630025cab1cb147bc504a4bd9bc39aacc495123572994","size":704,"data":"","first_seen":"2026-07-21T09:00:00.160646Z","last_seen":"2026-10-12T03:28:01.994614Z","times_seen":1005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1NRYLSH095","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0dc9316bf39969f81ca87e1fefcd22f","sha1":"33cae63d041219cd3476233f31ecfb38e5df708b","sha256":"868ddafbd721d0ad5a92e655e4854437a2acb2c512a56800c06f3d0129a6ebb3","sha512":"bf504ec2b60d29cb82df49382d449c5412c4a821f01bac44afd0160c6ebb5b08c46ac9f74294617858fcae9d0b1890d16d1e1dc0e7daf60493bfda9c8db086e1","ssdeep":"6144:0XcUrtyDetGl0BqveZNAAycBcNMMb0Er533QN3uNXNU4w4kppt1A:LDeq0B6eYnE3uNXFw4YvS","tlshash":"d3a409cd73c6742293a2f678903f018b657b69a2b44cc895f28adce42d3469a5173f7c","size":476098,"data":"","first_seen":"2026-10-08T00:16:46.706671Z","last_seen":"2026-10-08T00:16:46.706671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://dukkank.com/wp-content/litespeed/js/88155b5abfc722145e58fc8bfb76dfea.js?ver=e99ad","line_number":2,"column_number":981},{"level":"log","text":"[LiteSpeed] Start Lazy Load","filename":"https://dukkank.com/","line_number":352,"column_number":7768},{"level":"log","text":"[LiteSpeed] Start Load JS Delayed","filename":"https://dukkank.com/","line_number":352,"column_number":8414},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher14.process7//obj86 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.8224457147134088] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-src:https://www.googletagmanager.com/gtag/js?id=G-1NRYLSH095 type:litespeed/javascript] attributesLength:2 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://dukkank.com/","line_number":352,"column_number":9298},{"level":"log","text":"[LiteSpeed] Load map[actor:server1.conn0.watcher14.process7//obj89 class:HTMLScriptElement contentDomReference:map[browsingContextId:3 id:0.02514866506700497] extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[attributes:map[data-optimized:1 data-src:https://dukkank.com/wp-content/litespeed/js/2b3ef62cc3a0914d95a1e59c295386e0.js?ver=b7db7 id:flatsome-live-search-js type:litespeed/javascript] attributesLength:4 isConnected:true kind:DOMNode nodeName:script nodeType:1] sealed:false type:object]","filename":"https://dukkank.com/","line_number":352,"column_number":9298}]},"http":[{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/07/Gemini_Generated_Image_qy4sy6qy4sy6qy4s-280x280.webp","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.608Z","timestamp":1791418565608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Gemini_Generated_Image_qy4sy6qy4sy6qy4s-280x280.webp HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Sat, 18 Jul 2026 01:47:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beR3moltUa8K0cplq3TU5iBFxGIXyR7uzx3563XYuIdYegetwkVLLiszsz145egpZFJvbJgFEc%2Flfh0ClSsRkVf1GbXWHkab89ymMsZ7IwtxDx%2Fpf11jXiH9h%2FyQcw%3D%3D\"}]}\r\ncf-ray: a470f47309f8dfec-OSL\r\ncontent-length: 13682\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13682,"size_decoded":14559,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 280x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9f45947a93a6b1f0f6ccb777d1bc5a4","sha1":"2662fd43acbca5bf99d533b51184c8763baececf","sha256":"cb118b82da75c947c4d347efcdbd3e8a0a2da8aa8b758e3d007a2262503e5294","sha512":"337771a42138337abaffc1bcbfab39b453ec646913e9df7ba2d057c7d3b3082e24c763ad0a19d6548fa79d46c6e4af64a23c800cf7b8beb58af50602d413abbd","ssdeep":"384:jJL5oOtF0mI70fsn955uWEl5oNgGiJ/waekx:jpRsmIgeMWEl5oHiJOkx","tlshash":"f652b0fd899aeeaed32293fd3900fbad67ba474d16019100dc060d7179ebe04709e567","first_seen":"2026-10-07T02:38:28.440981Z","last_seen":"2026-10-08T00:16:46.618758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/64b053e6820390cbbb11f291c483f50d.js?ver=e94a0","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.060Z","timestamp":1791418565060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/64b053e6820390cbbb11f291c483f50d.js?ver=e94a0 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUb8A0hpg6CkMQqQpXnatqyupTRPSrtwjkrcCgIEprXMq48HtC2%2FnA%2BJXfjeDzJFvx4u%2FNaYo2cqqIu%2Bu4jIBL0qyQ0XsJQPEZCRsmds0RBCJR%2FAYKV9GPzJyKk2CQ%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46f9950dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1710,"size_decoded":1772,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1708)","md5":"e46fc9c987a75c9433c50a095f42bbc9","sha1":"67b306e8cd5be8c52f72761b66e924ece8a9ea37","sha256":"8f97be55c0b3cdf486d14c8103b2b2ea1cb02c3d7256d7ff0d33167e00178036","sha512":"09719855d0c93089e8324d6755b0212e0dfe435058b743c2572e110fb6b32ada78bfe1e3d660650dd65e617411480fa2b5d13a33afda7979aa6aa428ecc7225d","ssdeep":"","tlshash":"6331529834553c98029f6615237f128ff1b89f899c8da7598359a9f27638807802bff8","first_seen":"2023-03-07T15:40:20Z","last_seen":"2026-10-11T09:06:57.699964Z","times_seen":265,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2025/11/44e27dd3-bb67-435c-8a52-441e8fe16fba-247x296.png","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.599Z","timestamp":1791418565599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/44e27dd3-bb67-435c-8a52-441e8fe16fba-247x296.png HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:52:54 GMT\r\nlast-modified: Sat, 22 Nov 2025 16:25:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2Fb9fmT3icSeFxEauUoFEbMdPKTmP5vRycb1HbcNzjcCrziLW4bgRzP99jI%2BrIRn7GaCuoEN%2BiNal3nklpcnmhbrzeVOQ%2BunbJRBQH9DuL2McLVDyZPIk%2FOxL0%2FGhQ%3D%3D\"}]}\r\ncf-ray: a470f472f9eedfec-OSL\r\ncontent-length: 20386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20386,"size_decoded":21268,"mime_type":"image/png","magic":"PNG image data, 247 x 296, 8-bit colormap, non-interlaced","md5":"cd93f705eca8399722cead11d5e18083","sha1":"841ccc859d67270772df1e4d1ad099e5064c8bd7","sha256":"96ebcd31435876c4c74b51c4f361686a35fe016e494b70201d1a37a3b1c207fa","sha512":"93d469a377706bc51703159e149e5eb880c6fafa1367780821cd13a2ec8fcae4cee95577ba32f01ff582f23acd50bddb237175e497940a8416d9f4dd471d67e7","ssdeep":"384:k2++Y0CieKy8ln95uq3OHqSylpkxBLX0OGnTMy61NQOy5fEyFecesuRU3u:WhxEnRjShjYrnTMy6HrE5WReu","tlshash":"9892e11d61442c38dcc94762cfb0e1a992b75adc8c82f7579a12bf205a9fd01ec20a6f","first_seen":"2026-10-07T02:38:28.513695Z","last_seen":"2026-10-08T00:16:46.629471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bzr.openai.com/v1/sdk/events?pid=VULLHT6sbccwqrxSDAfgkF\u0026st=oaiq-web\u0026sv=0.1.41\u0026t=1791418566968\u0026ec=3","fqdn":"bzr.openai.com","domain":"openai.com","tld":"com"},"ip":{"addr":"172.64.151.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:06.970Z","timestamp":1791418566970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bzr.openai.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 10:27:27 GMT","end":"Sat, 28 Nov 2026 10:27:26 GMT"},"fingerprint":{"sha1":"C0:15:C1:5A:94:D0:29:E4:BF:DC:83:47:38:D3:A7:1B:F2:B0:99:59","sha256":"C6:22:13:9C:CD:68:B4:8A:E5:AE:CE:37:5D:8A:48:71:E8:FC:2E:68:FD:1E:FF:F3:B4:C6:2C:B9:5B:4C:BF:71"}}},"request":{"raw":"POST /v1/sdk/events?pid=VULLHT6sbccwqrxSDAfgkF\u0026st=oaiq-web\u0026sv=0.1.41\u0026t=1791418566968\u0026ec=3 HTTP/1.1\r\nHost: bzr.openai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nReferer: https://dukkank.com/\r\nContent-Length: 884\r\nOrigin: https://dukkank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":884,"data":"{\"obref\":\"0cc80e6e-7941-4bc3-ac17-f33973a321f7\",\"events\":[{\"type\":\"openai::sdk_init\",\"timestamp_ms\":1791418565654,\"id\":\"6a39c8b6-6e58-400d-8b35-15c8a7a0f0ae\",\"source_url\":\"https://dukkank.com/\",\"data\":{\"type\":\"sdk_lifecycle\"}},{\"type\":\"oai::diagnostic\",\"timestamp_ms\":1791418565654,\"id\":\"f601d076-5c6b-4442-9424-e8b04d28f27c\",\"data\":{\"type\":\"diagnostic\",\"schema_version\":1,\"dropped_event_count\":0,\"dropped_event_reason_counts\":{},\"dropped_event_name_counts\":{},\"dropped_event_phase_counts\":{},\"consent\":true,\"is_first_visit_in_session\":true,\"is_first_consent_grant_in_session\":true,\"config\":{\"automatic_advanced_matching\":\"enabled\"}}},{\"type\":\"page_viewed\",\"timestamp_ms\":1791418565655,\"id\":\"26aa331d-41fd-41e6-9ce9-286ab4cf6691\",\"source_url\":\"https://dukkank.com/\",\"data\":{\"type\":\"contents\"}}],\"user\":{\"in\":{\"eid\":\"b1d28385f7bfec509ce0d7389f50e76503a9f377ec848f8a20c7f8896b71c7eb\"}}}"}},"response":{"raw":"HTTP/3 202 \r\ndate: Thu, 08 Oct 2026 00:16:07 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-type: application/json\r\nopenai-version: 2020-10-01\r\nx-request-id: cb5acb03-57ed-4c99-8878-4cff81782298\r\nopenai-processing-ms: 31\r\naccess-control-allow-origin: *\r\nx-openai-proxy-wasm: v0.1\r\nset-cookie: __cf_bm=cmhHIpL.tiZPUIw4H7XUa9UkdH.XqEeqOwmEc0jf7Q4-1791418566.9879186-1.0.1.1-PGE.vA6pi4WYRwbsMhkMo_4nF.dJkvWhdl.mvWfmlLfSFsuBum58o7o8vi4Vyx2d3E7II39UK7EmecxPSre0AZSFrVkTvAbQS1Z19XEgvdeU4jnjS_FA08SLLJjpcTzB; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzr.openai.com; Expires=Thu, 08 Oct 2026 00:46:07 GMT\n_cfuvid=2_thblBgQyPYOQfVolDABFDW5epRamz5XSLtlr2Mr9M-1791418566.9879186-1.0.1.1-q4_pjv0G.JvJGCs8gPQgAxa6upZBtNvueZqtA7s9loc; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzr.openai.com\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f47baf2c56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"cmhHIpL.tiZPUIw4H7XUa9UkdH.XqEeqOwmEc0jf7Q4-1791418566.9879186-1.0.1.1-PGE.vA6pi4WYRwbsMhkMo_4nF.dJkvWhdl.mvWfmlLfSFsuBum58o7o8vi4Vyx2d3E7II39UK7EmecxPSre0AZSFrVkTvAbQS1Z19XEgvdeU4jnjS_FA08SLLJjpcTzB","quoted":false,"path":"/","domain":"bzr.openai.com","expires":"2026-10-08T00:46:07Z","raw_expires":"Thu, 08 Oct 2026 00:46:07 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=cmhHIpL.tiZPUIw4H7XUa9UkdH.XqEeqOwmEc0jf7Q4-1791418566.9879186-1.0.1.1-PGE.vA6pi4WYRwbsMhkMo_4nF.dJkvWhdl.mvWfmlLfSFsuBum58o7o8vi4Vyx2d3E7II39UK7EmecxPSre0AZSFrVkTvAbQS1Z19XEgvdeU4jnjS_FA08SLLJjpcTzB; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzr.openai.com; Expires=Thu, 08 Oct 2026 00:46:07 GMT"},{"name":"_cfuvid","value":"2_thblBgQyPYOQfVolDABFDW5epRamz5XSLtlr2Mr9M-1791418566.9879186-1.0.1.1-q4_pjv0G.JvJGCs8gPQgAxa6upZBtNvueZqtA7s9loc","quoted":false,"path":"/","domain":"bzr.openai.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=2_thblBgQyPYOQfVolDABFDW5epRamz5XSLtlr2Mr9M-1791418566.9879186-1.0.1.1-q4_pjv0G.JvJGCs8gPQgAxa6upZBtNvueZqtA7s9loc; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzr.openai.com"}],"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":1058,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T03:30:54.994022Z","times_seen":19045007,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":0,"dns":4,"connect":15,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/9118ed2d643ecc74e8577f066ff65e23.js?ver=f9787","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.070Z","timestamp":1791418565070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/9118ed2d643ecc74e8577f066ff65e23.js?ver=f9787 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZ3QaPJZ6oIXGWDBSe68CBjFJb52g6ktjjyDubJ5iXDkzrdlEj9fJMnv5SLkkG%2FCMy1yWNTh7fiOZSIg3kQp8D52TDSzT5AGF63dZ02Dl7oe7JBU%2FZNvpvr99pQBQQ%3D%3D\"}]}\r\ncf-ray: a470f46fa955dfec-OSL\r\ncontent-length: 1299\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4351,"size_decoded":2226,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4349)","md5":"075253b68dc9db929f73667c03a349ef","sha1":"2998d964bcc2aae1096a08e2803389e55f2a13a3","sha256":"17c54838ff27fd5ce4792f6a4da0905a39ecb723bb56085cb4ddf9157468ce42","sha512":"772d8931f5f323ef20ca91cde1f2110d75643dc481928643eb2307cdbae6bae84d190420c1a0cc8cf2aca7046f9d192331ac8059a4187159e0278f459014ed47","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5Vh:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5Vh","tlshash":"829173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-12-12T22:29:56.839028Z","last_seen":"2026-10-11T22:30:40.806962Z","times_seen":818,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.053Z","timestamp":1791418565053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:17 GMT\r\nlast-modified: Tue, 07 Nov 2023 19:56:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UJghYEMBDXqujJ3P%2FViV8Gyi5v6xPKxYip%2FHjhP8DHc1jC%2BO9fVriGVXrTYxG9DIQukXgtDuFYZH7sQ%2FzQwX5i8NlCKGIBSINd9c2PcvJCKNRysH93tbizE30zbRg%3D%3D\"}]}\r\ncf-ray: a470f46f994bdfec-OSL\r\ncontent-length: 29744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":30676,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-12T03:30:51.114309Z","times_seen":1102016,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/?wc-ajax=get_refreshed_fragments","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.578Z","timestamp":1791418565578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://dukkank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"POST","post_data":{"size":18,"data":"time=1791418565570"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: https://dukkank.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-litespeed-cache-control: no-cache\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-apo-via: origin,noget\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVfwaFUJXDp%2BBNIAUBFLzcwbyJXheT6H4ZTS2jVGk874TkZSo3X5r4xxgEJnrAr6Crdb2yQSZpblkHQgFmCaGX2Kwex7NOVeJYOE1WKKUsi%2F0kKtyM9pjD2hV7co2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a470f472d9e8dfec-OSL\r\ncontent-length: 960\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2402,"size_decoded":2020,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"8daaaf6139d07a6aa72ce0312a41656d","sha1":"f925d4800ec71b18be229712252618cf290d3d69","sha256":"3c72c4074787fcf2e7718db253a851a8bb1cbb0235c322fb5d3d0e13fc496fee","sha512":"52f48dbfef8e092b7098dc171f52654439abac00f682c0c6542f3a0407f071270b193f519d03ffe782248c8a8047608c0081fe3863470f8b34d76ce44f35eafc","ssdeep":"","tlshash":"694120d4713b8536062f8bd712f7aabc758f2c8cf8a5413557a8235403ac954b328e2a","first_seen":"2026-10-07T02:38:28.507114Z","last_seen":"2026-10-08T00:16:46.634381Z","times_seen":2,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/07/5b488c34-5b21-4f4f-98a9-ebe0e8677d88-247x296.webp","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.610Z","timestamp":1791418565610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/5b488c34-5b21-4f4f-98a9-ebe0e8677d88-247x296.webp HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Mon, 13 Jul 2026 21:49:33 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GiQo6isRrFgwiEQet1EpvU8Ysz6Q27PofmoyJWCXRCdVJmHKsQceP0SlbBwz0R7ZYjei4FmS7FGcN7OKQE%2F2UOas0kjc2PnFdckRFis%2FOvQjSgTNMlxYsbfS3At5BA%3D%3D\"}]}\r\ncf-ray: a470f47309fadfec-OSL\r\ncontent-length: 9612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9612,"size_decoded":10486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 247x296, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b95804c3e0156ccba073adb1ef08a73","sha1":"201ae51e65fb7fb6d066cf7f9651f2a21088fef3","sha256":"88af782b53cbda2b3f73dc6ca69aadd66e3eeb0da71838ed07d73b4bb0a5e4f2","sha512":"5fb06935042fd7bba00610700c998a5e7b6b44cc411e9fcfe3c4b1f8c2ad67f6cb72ac6b98b99a71b5704b9569d51287e5e450dbb08a9bf60f5119b2cb7190a2","ssdeep":"192:XenII909tAcqGqMU6lnOYBjPs2ezPHshUMXc9p2MBnyi:XBI909tAcpqt6x6NLMh3k2MBl","tlshash":"6f12af4b65eb938c0efa4047cc6ed4655aa3475364a31e63f71f11890b8b2056f6902e","first_seen":"2026-10-07T02:38:28.502865Z","last_seen":"2026-10-08T00:16:46.636478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/e903d0a3ddb24e65c66e30563010a3a1.js?ver=c34fd","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.071Z","timestamp":1791418565071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/e903d0a3ddb24e65c66e30563010a3a1.js?ver=c34fd HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:34 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSLUDjDAYd4AXTfEV26zdAZdYM%2FGg9ExphiKmg47lOap5jyRgotSFvWQ%2BEaJ431WUtuqPT851XFH%2FItZPfQ98c5gy1LZKJ4MP99%2Bi7a2t05jnBgsZ9Y6PGuJ%2BTYirA%3D%3D\"}]}\r\ncf-ray: a470f46fa956dfec-OSL\r\ncontent-length: 1391\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4282,"size_decoded":2324,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4280)","md5":"7231f6e24010e62abcda87454f517043","sha1":"7fc17505d2d1b093f93279f287469cb005e957e6","sha256":"497d6141b6e24de7112491bff29042b649c7050b4a7b65435f8f07ec9fd8cd27","sha512":"8947d818ff4d7c84431f65fa3c1c14df5711868c1aba50d13bb05655eed7bbd90380e2e9498cc53cfe3aa27c0a2b8858276f872b9236c11d87fdfb2b40808488","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlwpZswn+uOujAvKsPPF3cLK:0cEQxc4xN6a8EJWrO75ekwp1lEvtsd8j","tlshash":"1591661b74216d7322eb75ba2c9ee98414331639a4414501b509cf6c3b7e8ca7737b6e","first_seen":"2026-09-05T17:34:13.375624Z","last_seen":"2026-10-11T14:27:42.395115Z","times_seen":73,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/9ca05ae8b1c5e957cbd13f6e8dfccc44.js?ver=38d79","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.077Z","timestamp":1791418565077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/9ca05ae8b1c5e957cbd13f6e8dfccc44.js?ver=38d79 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7L7NV2H6a%2BeLrthD2OLaQIS9qpn3WZjDhIEiEFgwVZVDEQHatJ9WU0VXkG4YTkLECxzZA4Bhnwq4Vnk8PjSbUcUbFGN88UnF5kFlGexEn4WlVL5WVPf0EbfY1qfiw%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46fb95adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1500,"size_decoded":1615,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1463)","md5":"2553c8b8160065ca55b92b9478f3f399","sha1":"116d391fd6c6dc674f5f3a571146b005580ddf7f","sha256":"cf85eb4ba80822af46334e10183d9de1502f518b50019f07c86b55794c1504fb","sha512":"e6de3d964151a50eac5a6c7ef7677626d2e0144da9e5e2ba2843d288081ed915223c09cd1caecd0eb4b3470f1d0bad9900a5feb3221534393da7fe61dae40aaa","ssdeep":"","tlshash":"7131308e7b5260440382c260e13e88ad773b687b700c0e897b30fcd93ee5e2c56519ad","first_seen":"2023-03-11T09:39:20Z","last_seen":"2026-10-11T17:49:30.713274Z","times_seen":3359,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2022/09/Dukkank-1.png","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.293Z","timestamp":1791418565293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/Dukkank-1.png HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:56 GMT\r\nlast-modified: Thu, 22 Sep 2022 00:11:35 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mq7xbc6tFluuq8FkP9MB%2BidVQWDKUkkGKKUo6sIgudQoEQ1%2Fx6I%2FKgenzQUglE3KIZ4p4yisrq%2F4zrzHcFitnpxQp2WAV8908Z%2BHYWC8cK1AOX46IIL4aeVercZUBg%3D%3D\"}]}\r\ncf-ray: a470f4711996dfec-OSL\r\ncontent-length: 4039\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4039,"size_decoded":4918,"mime_type":"image/png","magic":"PNG image data, 202 x 80, 8-bit colormap, non-interlaced","md5":"7cb7af97f75aae6e2498b74210ce31fc","sha1":"44b47c66b762252f264202dd1fb8c6aaea59c41c","sha256":"036d9050b64fdac70399c2d42152a42c20cde88987b7ac2e7e8138fbb308a1b4","sha512":"d4deca072297e364a1fb52b53b9ea57514bdbce52e99ad765d88d16e48ec1d64bb9be08c0489416cfb0988289845c346baeb9f6afe203ee813929620278a7a63","ssdeep":"","tlshash":"dd815effd1061fad920f9768125db172b4da10fa25b100c84b5786c2b341284ebbfdd1","first_seen":"2025-12-03T11:54:48.002477Z","last_seen":"2026-10-08T00:16:46.64866Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2024/04/85e7ce68-03d6-4ae8-820e-d0193213b1a2-247x296.png","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.604Z","timestamp":1791418565604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/85e7ce68-03d6-4ae8-820e-d0193213b1a2-247x296.png HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Sun, 28 Apr 2024 22:36:49 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCxks8Wi6d1bvH4nQjekQ4met1BRRAplxnNgnkEMKBg5c%2BncN8z0yrv8hnGQiVVCFCMmSTvNXX0y35wWrCuVPKxL1arcKj8PjEtJP5%2F7kBJzMJdj3uGedG7O13q5yA%3D%3D\"}]}\r\ncf-ray: a470f47309f3dfec-OSL\r\ncontent-length: 45179\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45179,"size_decoded":46053,"mime_type":"image/png","magic":"PNG image data, 247 x 296, 8-bit/color RGBA, non-interlaced","md5":"5b2ef2d82b00c0c1954bff68288dea77","sha1":"f2912918b78aabaa2604e028bc460470a854fda2","sha256":"95b4721f6740d6a5ea1425e7ba30338368e6041a9cd873c3d7c72149fa3da3e9","sha512":"9225b933e1284f1d26dd4134b18fe8b324cfc632149b8662fd0523dcbc89c78f7698a427752e173e2c85bbbf48f9246edb76e7f7299f873c233d71cd63ea2e1a","ssdeep":"768:aPzr/BKMo10Sd0QNg0u32khdH9aC9DgCCo3UbHkusc8Emh8P6qPm1K4BJE:6oS8s9N9DVCo3UbHNsc8EUE6qY9BJE","tlshash":"d01302cbdab54c6f9d599af1b8699c216bcd03f111588d0becc352c22b7069644d8f3e","first_seen":"2026-10-07T02:38:28.471594Z","last_seen":"2026-10-08T00:16:46.649668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/80c82b788548cfa34593be080c5bf486.js?ver=22c3e","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.061Z","timestamp":1791418565061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/80c82b788548cfa34593be080c5bf486.js?ver=22c3e HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnlpQl89YQiHbHDOSbV5%2F86ME86hBPfAbGYOhX7G2funo6ETwLokjkYatHLzvI4EBbMwIMWWYNP01vFspWcBUinInQ3yBIth0d%2FD2f28jLgrke3Dk8ddJgIpMRSsFg%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46f9951dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13206,"size_decoded":4833,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1930)","md5":"d81932d7d58914a225c573512a233bfc","sha1":"fb3c4cde253a41a3e40c2cfd67249cacfd834aac","sha256":"d101944e7d880ccda0af7f86127b324cc2e7b9fb8f91fbcacf31891cf142909c","sha512":"d7b7a4f86b7361c8cc7190291c849ffeae0ead8d88dfdde6c0510dd65706e376b4d92ad0a324c584d5e1cd6f67060f56380dc47d715c8b0a4573fe95d03c5b45","ssdeep":"192:J5vAfebw9n0/sQPgWrJzSqy4e7Ga7JK3inMKQjdw38yWjQ2YgIsQXbo6+LjgPps:JY2PgMe7Ga7M3isO38yOQ28s","tlshash":"75525205153994c35cc37088187f5c96e06ad6de09242eddf948fbea84c8d5be82e3af","first_seen":"2025-06-24T17:52:35.25589Z","last_seen":"2026-10-11T09:06:57.691564Z","times_seen":227,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2025/11/44e27dd3-bb67-435c-8a52-441e8fe16fba-280x280.png","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.597Z","timestamp":1791418565597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/44e27dd3-bb67-435c-8a52-441e8fe16fba-280x280.png HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:48:27 GMT\r\nlast-modified: Sat, 22 Nov 2025 16:25:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IiUGR37R%2BUHRJ%2BWz8szCH3Bi4GOG7YVIshU5umsARZ024ZeOlsilxwm9Z6Bh7IZ0uqLHn0TNvIvq%2BE7eoA%2Fp6OgDXrmEM%2FrQEqrUF5IlPJsei3Jc%2F4dYmSsdGOmgIg%3D%3D\"}]}\r\ncf-ray: a470f472f9ecdfec-OSL\r\ncontent-length: 19661\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19661,"size_decoded":20543,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit colormap, non-interlaced","md5":"59b54c3c951548375d1fe58320ae9463","sha1":"78325d06f52f73e04469907d1515e5cbdf8ee494","sha256":"71987be5d80626a449058e1bcf2186907e5da6f521f9a40371afab337094a95b","sha512":"c967022764f39b1e088906c7592ff60001d180f3ce8f482006f1a9617be7563c9dc475b3c221f821310f13ee73124fea124537931a1ce17819cf8b9d14df2892","ssdeep":"384:ymMxom7Fizg6HFaeTBom6vHiIf/IXljULHsHGpWVu60iDp:ymMxbgzgaYmomMCIIlQLHs8Vc","tlshash":"6f92d1f1422e47182f9fdca07c9d917108db6079cd93bdb5287d7826944f4aaa44b3d3","first_seen":"2026-10-07T02:38:28.475153Z","last_seen":"2026-10-08T00:16:46.653098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-json/pys-openai/v1/event","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:06.047Z","timestamp":1791418566047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"POST /wp-json/pys-openai/v1/event HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 262\r\nOrigin: https://dukkank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/; __obref=0cc80e6e-7941-4bc3-ac17-f33973a321f7; __oaiq_consent=true; _ga_1NRYLSH095=GS2.1.s1791418565$o1$g0$t1791418565$j60$l0$h0; _ga=GA1.1.1022970760.1791418566; pbid=000f105937e93c86b5b5b8ceec97c6c22332414d861bd300910defe2c651af34; _fbp=fb.1.1791418565942.2488246632\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"},{"name":"__obref","value":"0cc80e6e-7941-4bc3-ac17-f33973a321f7"},{"name":"__oaiq_consent","value":"true"},{"name":"_ga_1NRYLSH095","value":"GS2.1.s1791418565$o1$g0$t1791418565$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1022970760.1791418566"},{"name":"pbid","value":"000f105937e93c86b5b5b8ceec97c6c22332414d861bd300910defe2c651af34"},{"name":"_fbp","value":"fb.1.1791418565942.2488246632"}],"method":"POST","post_data":{"size":262,"data":"event=page_viewed\u0026event_slug=init_event\u0026data=%7B%22data%22%3A%7B%22type%22%3A%22contents%22%7D%7D\u0026ids=%5B%22VULLHT6sbccwqrxSDAfgkF%22%5D\u0026eventID=26aa331d-41fd-41e6-9ce9-286ab4cf6691\u0026woo_order=0\u0026edd_order=0\u0026order_key=\u0026event_source_url=https%3A%2F%2Fdukkank.com%2F"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver-timing: cfExtPri\r\nx-robots-tag: noindex\r\nlink: \u003chttps://dukkank.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: POST\r\naccess-control-allow-origin: https://dukkank.com\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nx-litespeed-cache-control: no-cache\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-apo-via: origin,noget\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t5oniahgSzIixqkwyr6Qo3PRNA9RVoJM%2BbsptYl5jSWabmjcmdQYb5qrH5QFwKCiUIf3DbrERzt0LjUgDN9f3tus9eeCgQvxPPJ78RVo%2FL%2BqHE2Y%2BcOEPFULecRpQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a470f475caa1dfec-OSL\r\ncontent-length: 20\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":16,"size_decoded":1368,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-10-12T03:29:42.419369Z","times_seen":195101,"resource_available":true,"data":null}},"time_used":798,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":797,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2022/09/cropped-icon-192x192.png","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.526Z","timestamp":1791418565526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/cropped-icon-192x192.png HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:17 GMT\r\nlast-modified: Thu, 22 Sep 2022 00:40:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sV0Sm6fTqJVc66XtXcBJ5kzFwwLJxIHP3yfUNjKFPKMHxhQphvjGXTjcboyk%2B%2BJ1uQlyrv1Hv%2BACFQ65ysE%2BMS0UFGB5IUBoWihwIrXrMb3zB740Qlz78lxd1hITBQ%3D%3D\"}]}\r\ncf-ray: a470f47289dbdfec-OSL\r\ncontent-length: 10046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10046,"size_decoded":10927,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9bbe83c33d737b3c7a5e88d899a4813d","sha1":"a41d0d441a9c1017f6cb7e5926deaaca23f40f32","sha256":"771124c3bbfed251bc51d0c6ed035a99607ba79270c673305e2c31420c160d5b","sha512":"7d59681835108d548bd20a2da6031f78dd1590f87d66d12edd9e66d0b3caab270a20b6fac73131cc25c0e53fd9b898aef07b3013a76664f0b48b662723f0287e","ssdeep":"192:pc17XCwwHacxs8PLBSuNRzawRD3Mk/ULpEeb2nzhyKpmlJXVdIIc:pWbCd7BSKWED8k/IpQIXVdIt","tlshash":"2922bfbacde7e8d74562a8d4d632e44fd314c85570a217f52194e830d037b95f49bc8b","first_seen":"2025-12-03T11:54:47.977163Z","last_seen":"2026-10-08T00:16:46.661983Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2024/11/1f5a870c-fed7-4eb6-831b-d77ecc70127c-280x280.jpg","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.605Z","timestamp":1791418565605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/1f5a870c-fed7-4eb6-831b-d77ecc70127c-280x280.jpg HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:27:45 GMT\r\nlast-modified: Fri, 15 Nov 2024 00:43:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHoFPSdzU4BFh1cSvYjWMdsbZM7kLUfZ4UOaqz%2FeaGg9Pgd1dZGwwdShBOwELZYuTxWaozg1gehe8%2BJNN0yEtW9dvAdXAOKxRmmgivzRWS0Q1FeterYK0hUl1iuKqA%3D%3D\"}]}\r\ncf-ray: a470f47309f4dfec-OSL\r\ncontent-length: 15743\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15743,"size_decoded":16618,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3","md5":"c68c482ccb63160bec6e79cfe8c525ab","sha1":"caa090fcb8caac324566098d5ba33094dfa53050","sha256":"4248db175278325a2ae4b41f5b89071d900c241d9d6c3119767fcd9d0e80a41b","sha512":"74a05ad29a2b464608c9f1910a44c69e583e16eb69896224ffaa08d3c5bfdacba5e7f4d19af9c6872b25cd96e0931588af4d643eaa15b77eae03ca0426d1d8d6","ssdeep":"384:Uf0Fx6gX+NgTUyJgvDaGwuQ2d9tjeeL7tSFQncgi:TquR+vDaGNrp5cgi","tlshash":"0b62c00ee148ee23d5ecac714e5206149f856f8c8ab08b163ef6ccac71e94d359537da","first_seen":"2026-10-07T02:38:28.529285Z","last_seen":"2026-10-08T00:16:46.667419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/5f4d357fa6aa47b0a9f49e2f92fe7fb4.js?ver=a1fd9","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.058Z","timestamp":1791418565058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/5f4d357fa6aa47b0a9f49e2f92fe7fb4.js?ver=a1fd9 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpVLql4Z7CuwnbMlIn%2BCi8MFVKBUYDQUPoV%2FV9jzaPO95U8ykHFbTc%2F6r5rzSsarIZpk5HUUY6RbZzxFQJXXyeA78u5TXkyA5%2BPYnSeniZNjwphfSbZ1vZp1lcNQgA%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46f994fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1319,"size_decoded":1586,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1146)","md5":"225c9b586ec70f0f1fcd1bb916d4fdae","sha1":"416978db684fe5b59831eea9e5d3ff6ca0c9ff9a","sha256":"b0bf3e3c690a329cff11f5a36cda9b539fbf0c15a9821c7f9cc8d9505525f004","sha512":"5e2f573713d2a3524c02de771b8b63048fadce603e7d8282a7fa7b1132b8af27857756772a8793eb77d3538fb7d079e3812beb43904d8d65d1adc6daa937e88c","ssdeep":"","tlshash":"c12101dcb25230d1bbba2070756fa80ff031748f19268500618ed6b53dbd85574b7e36","first_seen":"2023-03-07T15:40:20Z","last_seen":"2026-10-11T09:06:57.605413Z","times_seen":1047,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2024/04/a43abc7d-30e7-4c6f-8a62-c3638fe0aba6-280x280.jpg","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.601Z","timestamp":1791418565601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2024/04/a43abc7d-30e7-4c6f-8a62-c3638fe0aba6-280x280.jpg HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:40:04 GMT\r\nlast-modified: Sun, 28 Apr 2024 22:36:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UAQpjYeu0s5DWZLLGPbhZfZ%2BpZYU8kEkP%2Flyy3yAO0UZXsHrO4Q6hZ3g7J3ShIDREZoaE8yECcSJVGF7A9fEHv397EG2RvP1%2BSB8C95RmFbmdqaTBtynu2xoXcGftA%3D%3D\"}]}\r\ncf-ray: a470f472f9f2dfec-OSL\r\ncontent-length: 17976\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":17976,"size_decoded":18853,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3","md5":"0abb83cc62b7758368bbe51d194fdd16","sha1":"ec2e3c6d1a3a3d2deb642b5a0604364421aadda0","sha256":"b3d9f97bc42bec43d7d96f460dd8502ec99da42c59f87082a6b5d35d42ba8711","sha512":"85773503aae0ac7f36db7cda6fd420b5b7e6f58663cd3429275968816571ebea9d08f0b90bc551e8d58d1317b2d739cf8e1967ea03bb2cb62e416c9695599b1d","ssdeep":"384:FyUhlAqcKp5XYsnpKIQsYoRkUwOBKnfSIh0m6DqwfKRfpXMaGt:FllAqci55npRYoRKkCKBBT0fFMaGt","tlshash":"3782d065e1b14b2d97c02d76c3d08b891ca23d91e31ce1c36c3ac9d8a7949e719e9c5f","first_seen":"2026-10-07T02:38:28.548305Z","last_seen":"2026-10-08T00:16:46.671249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/c9bdeae3ab8417824b6cf52040a22a9d.js?ver=0caa8","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.081Z","timestamp":1791418565081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/c9bdeae3ab8417824b6cf52040a22a9d.js?ver=0caa8 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PBH15Ut5%2Bu8dulDkSeeoFKh%2FU9hUkODmS8BexvZ2a11m7ezXvlCj7KK5h%2BPlHGyB6IPAGNKIa2WJc%2FLMtyRO%2B8DPAp8UNZ7v657oY5Wmpx5LlE3dxvFuhhvB2qOi4w%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46fb95bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61379,"size_decoded":20792,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (61377)","md5":"583c5479795c4f009302d001c32c8ee2","sha1":"207b21422b19daef044da887ed50461ccfd25351","sha256":"429db85ce093160cbd4d47949b6732ca2b3c1c8fb27da584412d3d82b4c8570c","sha512":"2ab71adea5c457196bd76ba3c826a30c89f00dfaa15df025663b83a9e74032c9e66552c91749c558564b44d25e3389efefb519078682caadf23f6f3e718e7798","ssdeep":"1536:wfb0FL/nm9csLtvcJa5Il4KKPWDR+LnPAGVTlW:WbfjLRQorPICPllW","tlshash":"bf53e769729070fd01fb61e7f13f672432376566b00b4054b1299cea2c69d5e22b3fba","first_seen":"2026-10-01T01:01:14.661972Z","last_seen":"2026-10-10T07:05:41.882746Z","times_seen":5,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/25e0f080de05de391add626265b7196e.js?ver=3fee1","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.087Z","timestamp":1791418565087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/25e0f080de05de391add626265b7196e.js?ver=3fee1 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DlqVPub6Ou1i2BzQfjqRs8W6YPlFw%2BALyK1cZrtQbasxcH4KQTVsKd57jR2BpIUuADHnY42lU4HokKnsACk1tBORbAcJ0Yp7kGKqFRVMloQnPjcEWdpmWU8hmgmFEQ%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46fc961dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16628,"size_decoded":5326,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16626)","md5":"68542f8c2ddfb9549e33dcac00b3f641","sha1":"23b0fdfc3deae362ad00d7c07ddd4c33441ec80f","sha256":"11b5013d59b4ebaf7daa5ce4be4d97adb9ed55f9f6281eda3a47bcee8d5f1c94","sha512":"03c19d876ce06c21df281dda393ee2af2e862bd9be65903ecf1c9b31509e6402edb8b52e0c576e16bc1b2bd917b6997c5ee607710e5ad9c7b8af722b2a84418e","ssdeep":"384:AbWuRTEkOzFV/xt7mpgAP6Yyz+Px/OYapnj9jHNK0lnDuQy11DpbyBqKD4XKlGWe:AbCH76Lyz+JytNK0lnDuQy1FpbyBqKDQ","tlshash":"cc7260e5b23718533a6f12bb948f941cb139e83c6246c4b9ac96e7b3583cd446363b1d","first_seen":"2026-06-28T10:31:57.549913Z","last_seen":"2026-10-11T22:30:40.833258Z","times_seen":74,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-json/pys-facebook/v1/event","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.948Z","timestamp":1791418565948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"POST /wp-json/pys-facebook/v1/event HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nContent-Length: 516\r\nOrigin: https://dukkank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/; __obref=0cc80e6e-7941-4bc3-ac17-f33973a321f7; __oaiq_consent=true; _ga_1NRYLSH095=GS2.1.s1791418565$o1$g0$t1791418565$j60$l0$h0; _ga=GA1.1.1022970760.1791418566; pbid=000f105937e93c86b5b5b8ceec97c6c22332414d861bd300910defe2c651af34; _fbp=fb.1.1791418565942.2488246632\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"},{"name":"__obref","value":"0cc80e6e-7941-4bc3-ac17-f33973a321f7"},{"name":"__oaiq_consent","value":"true"},{"name":"_ga_1NRYLSH095","value":"GS2.1.s1791418565$o1$g0$t1791418565$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1022970760.1791418566"},{"name":"pbid","value":"000f105937e93c86b5b5b8ceec97c6c22332414d861bd300910defe2c651af34"},{"name":"_fbp","value":"fb.1.1791418565942.2488246632"}],"method":"POST","post_data":{"size":516,"data":"event=PageView\u0026event_slug=init_event\u0026data=%7B%22page_title%22%3A%22%D8%AF%D9%83%D8%A7%D9%86%D9%83+%D8%AF%D9%88%D8%AA+%D9%83%D9%88%D9%85%22%2C%22post_type%22%3A%22page%22%2C%22post_id%22%3A195397%2C%22plugin%22%3A%22PixelYourSite%22%2C%22user_role%22%3A%22guest%22%2C%22event_url%22%3A%22dukkank.com%2F%22%2C%22_fbp%22%3A%22fb.1.1791418565942.2488246632%22%7D\u0026ids=%5B%22203586162563849%22%5D\u0026eventID=26aa331d-41fd-41e6-9ce9-286ab4cf6691\u0026woo_order=0\u0026edd_order=0\u0026order_key=\u0026event_source_url=https%3A%2F%2Fdukkank.com%2F"}},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver-timing: cfExtPri\r\nx-robots-tag: noindex\r\nlink: \u003chttps://dukkank.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: POST\r\naccess-control-allow-origin: https://dukkank.com\r\naccess-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-credentials: true\r\nvary: Origin,Accept-Encoding\r\nx-litespeed-cache-control: no-cache\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-encoding: br\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-apo-via: origin,noget\r\npriority: u=6,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPDPYwcfEIXTJ8dJM%2FELc8Ob8vsaOIMl9N%2FlERS9vDOj4w%2F59YQn6hBK1gvjBejWqiUkv7Ir%2FFcE9d9Fkg3fQ%2BAJQR9XGs6wU8w1nsuhynguRrQAETBJoXozGSMeKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a470f4752a8cdfec-OSL\r\ncontent-length: 20\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16,"size_decoded":1370,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-10-12T03:29:42.419369Z","times_seen":195101,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2024/11/90a335ba-0a3a-4a07-ab35-afff5608ee69-247x296.jpg","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.607Z","timestamp":1791418565607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2024/11/90a335ba-0a3a-4a07-ab35-afff5608ee69-247x296.jpg HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Fri, 15 Nov 2024 00:43:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ogjpwZoy05pj1VvL%2BO9rLUuL2q7u8vLjSjdKSHGtaGhin4%2BfQVnaFH0%2FXFUSwqBFlrVbnr1%2BMMxIRJWnZLfeU3atsI3cQ0ZZCBhSnYJIklOrKbrZuGCTT8lAEIeRow%3D%3D\"}]}\r\ncf-ray: a470f47309f5dfec-OSL\r\ncontent-length: 11951\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11951,"size_decoded":12830,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 247x296, components 3","md5":"673d61a9ee4e3e21d08a2ce67fc5f849","sha1":"6fb30761be3b742a7d18d272ec8d2635f433b409","sha256":"e624a463ae195964c03996e4112da94dc8d97d3f8dfc273cff60d01aae63a756","sha512":"0bd3e58dad21f37c42e1a545baea5865582b6236a1e8bbfa563ca4977fd7d9766b555b3e8d9db43b576972f988277d0d69f00102cabd291051e4b3bd939e839e","ssdeep":"192:MRbbbbbbz3q3YNaN/5vLKdfAZyvKsia3msG06irzidKGA2MmesPptMu5Ufg8xtEC:C3qIofu6ZyvqWC6zinAhmfPjMu5R8xCC","tlshash":"af32be94880b0827c9e04e78024cbaed36502ef615fe9b04ac75fc9a15f78f7ad9180b","first_seen":"2026-10-07T02:38:28.532965Z","last_seen":"2026-10-08T00:16:46.676189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/css/5a4fcf2ab5ecf9d874c2ff06e0a5d55f.css?ver=ad471","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.052Z","timestamp":1791418565052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/css/5a4fcf2ab5ecf9d874c2ff06e0a5d55f.css?ver=ad471 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:49:53 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NEcT8v3yrk%2BkJ3S1HYIYvGhpPi41PMJG2knmDMJxLr9izK7gvb3BcxI6Np7Em%2F4e0VNfF16rwZOmwS2MK0cioRJNL4%2BPQ10WhfhJvGAusHO7fUV%2FxAaB32wueWg0SA%3D%3D\"}]}\r\ncf-ray: a470f46f8949dfec-OSL\r\ncontent-length: 38797\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":209476,"size_decoded":39722,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5a4fcf2ab5ecf9d874c2ff06e0a5d55f","sha1":"11693363c20a8d2e38975a194007ed29ca092bf6","sha256":"c32216cfd120ed8d5ac0be27ce8886a14a9010745bdec05d0001b08bc9b7090a","sha512":"832cba7087000a37ba67622cd37d5850d4cc47e087d5bacdecaf2fbb82a59dc43a29258c8c367013a16258af58de33c6723c3573fabd48e4e07f8e2758c3ef6e","ssdeep":"3072:Lq5/32FTXYK8Jm1LqCYDXIr0dOeLWo0EADT+1zeckhNV3Ytfn+gaY17fYujDRFO5:EIr0dOeLWo0EADT+1zeckhNV3YtfndU","tlshash":"69242c52f2b0242c752b8225e5c4faec763d9161f7634afbf452aa38c7ca5d50237a0d","first_seen":"2026-10-07T02:38:28.447543Z","last_seen":"2026-10-08T00:16:46.684779Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.20.11","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.433Z","timestamp":1791418565433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.20.11 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: font/woff2\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:23:40 GMT\r\nlast-modified: Fri, 25 Sep 2026 16:48:46 GMT\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8gl5y5H3HeoBJhYZwwLv9jcOmAwSwlSyPhTzTSGPpSwKtR38UCHJXbhGvEfwxGsQySxCUIkV9Wt6GYqFND%2B6o%2BpXQDMPLHpQ%2FpHMHvekb54ubmPb2eSuqL%2BUbn1g6A%3D%3D\"}]}\r\ncf-ray: a470f471f9c0dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7560,"size_decoded":8420,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7560, version 1.0","md5":"7db70d75ed20d444c694d6aad85ce18b","sha1":"01d64f5ed7777e34c148c83595b877d0f6272d4b","sha256":"3c5b7d55b56f4bdee9e362078497694a9605b716868eb907b7e9c39bc5b5b9cc","sha512":"ad05e1701fe81d050b8db6574c28d9ce9c12242fb4cf4d6d4c5746829574ac2b38029cccb255d21c4b0c2d60d73854894c5043245c3ccd733017b60d1ff361a4","ssdeep":"192:mdZdmp7xgnbaRx9fo1JQrUo2Vfah48R+Q/BE99D5q7PKJ4:+ZYpsbaRxphAYhbRD/BE99Ep","tlshash":"faf1afddfd527b7bd2d1d126394007c838cad44919901cc2aaaf2f2933a3c569db27ad","first_seen":"2024-06-20T14:33:16Z","last_seen":"2026-10-12T03:22:16.159517Z","times_seen":28222,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/08/5a3374f3-ba1e-4dc9-9341-8cf36e0de6ac-247x296.webp","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.621Z","timestamp":1791418565621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/5a3374f3-ba1e-4dc9-9341-8cf36e0de6ac-247x296.webp HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:05:38 GMT\r\nlast-modified: Fri, 07 Aug 2026 01:42:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjT5DhA%2BbeXb0s4Oh8Ok5oWhN78k%2FsjZytOPMqHuI8VgD%2BGga%2FJ8tcg33pWIGKE94BU9feWUxF6NaTErXtf4bzHkSPsFoCes2nE%2BtJDE0%2Fw92M%2B4F3opxPuIOhIATw%3D%3D\"}]}\r\ncf-ray: a470f47319ffdfec-OSL\r\ncontent-length: 7034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7034,"size_decoded":7918,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 247x296, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"180f516bf0d947a302508c5f6dbae7a7","sha1":"8fc1240b9df2356a59539c72f6c6bb709874545d","sha256":"11b7fb9aa391210dc17b6091b04ca5b10aa1844051493110969b167efbecedef","sha512":"de2e11a0ae06f94073e580c26c98f234552a16861e5c3da714cf845b316ea14a51360e2f5c96dab50685280f7548fc9e5bc10b5e1341d85c09d5d64e619ab03b","ssdeep":"192:85dL3X78VzSbkQCEFfHeWgdV1kwyJSCkC:EpXYhSbLfHk9q","tlshash":"07e1afeff6247b036b11a619cd80cb3f470a53e2db4c879261e0e3a56882141d1fddae","first_seen":"2026-10-07T02:38:28.537049Z","last_seen":"2026-10-08T00:16:46.68895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/631d01b0fafc17c83b44dce935336b7e.js?ver=cec92","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.083Z","timestamp":1791418565083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/631d01b0fafc17c83b44dce935336b7e.js?ver=cec92 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:48:29 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:48:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDEP2WKEhFu%2BMsOWu5K4LBm0UZOn5zslAECjWsDlRU0X0k7mksb9%2B8QiQniI15YnP4%2Fwy8fiAE8hXLamUWzegW7%2F1U0S0yvSmZ7kyawNt5QfYxoRwd47gfwYvciiWA%3D%3D\"}]}\r\ncf-ray: a470f46fc95ddfec-OSL\r\ncontent-length: 944\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2940,"size_decoded":1874,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2938)","md5":"29d5d17d0adb42101d304a78277a66bd","sha1":"ebf5f92bf47dca59d284063b90837ada7bd95309","sha256":"e606bd57b8eb5d078788c0912df3b88c1cadd783ad73ad5385edd7588549bec7","sha512":"24dde835c03809649914056a7db24f32adc777c9c9cfa9e14e2157ad12e5abee1ced3893112ca0d611a9f114195a12678e9014d22fe60a115b637e4cc95e13f4","ssdeep":"","tlshash":"1851221fb0608e9658b3187e617a719622329d69f2098a70a015dca42eece4b1777dcf","first_seen":"2023-10-13T06:30:33Z","last_seen":"2026-10-11T22:30:40.85514Z","times_seen":855,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/09/dukkank-hero-2026.webp","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.493Z","timestamp":1791418565493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/dukkank-hero-2026.webp HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:51 GMT\r\nlast-modified: Sun, 13 Sep 2026 05:11:35 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfYj6j07ImtL75rW%2BMQsZpZ6sKA4mX0vQ7HR%2BgjLfzy6eit8L%2FnVaRtde1K9KIovjIWby6Ct4Vz4cJWU51vIOVS5qQl2REPFiogcrLk3haPfbnvEFoaVrRzJnVb8iA%3D%3D\"}]}\r\ncf-ray: a470f47259d6dfec-OSL\r\ncontent-length: 124268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124268,"size_decoded":125146,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2107x746, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3917e247b78c9e7b17f9d57def6e5642","sha1":"2b8d083d390a77a8c0f1bb2ba2f74c650f13906e","sha256":"f73fc9d02e5d0dbe523f01841a771da417d4bcb5bd76976fd6916c6fc1182001","sha512":"15e09ff4eca61802ee9fcda52a56d1a889c49f494ae4e847cc28e4b7944c2a65b95fb8d194e5832d5bb06b77d21de4d3b4a1b4899704deb363f3d7dc5d143554","ssdeep":"3072:xO/zv6zDB3d7TZYIKph8uMWZiSqmAbuYRyjbhWRC:I/zvadlVYpp1M5xmAbuYwjbwk","tlshash":"70c312cbfca1188f9aef16225a8a15ebc32d00af5747234cd485430e6575a6bfc970e7","first_seen":"2026-10-07T02:38:28.546114Z","last_seen":"2026-10-08T00:16:46.692845Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2022/09/cropped-icon-32x32.png","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.528Z","timestamp":1791418565528,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2022/09/cropped-icon-32x32.png HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:17 GMT\r\nlast-modified: Thu, 22 Sep 2022 00:40:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMLhzpXjaWx%2BPqrm%2FRwXAKCbFcOX8e%2BYeMg1Fx2fSNFpBgqdBvyDv%2FoAetR4llklmiFr9lI9LT8f2dEA%2BlD3avr%2Bmel2Zk3hBM9dm%2BkuS4FR2pmvwZrN00Nqn7ArHA%3D%3D\"}]}\r\ncf-ray: a470f47289dcdfec-OSL\r\ncontent-length: 1213\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1213,"size_decoded":2099,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"577609d5e5aa8a76a89121d9ca00cf9e","sha1":"84134f3971e0829596b32584dee2e69e9c0dd890","sha256":"9f840550b685be88225dac8ae702b09e9d03ecab20dd3ae721291da2a14624bb","sha512":"44545251dd8e6afc48194b90a519436a139b1880c2f072d1be5236ffcb0f7ed7ccc0055fd380e0d37787ddb9cf8642f452cac03bfa483f5a50c6c6111e7b87ab","ssdeep":"","tlshash":"2621b4c64aa0cac04cabe2d662fd990829b173b1013d0d89689286780121413af7d1ab","first_seen":"2025-12-03T11:54:47.996272Z","last_seen":"2026-10-08T00:16:46.696592Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/02/12218525-d0cf-4122-9b84-de2112d29fce-280x280.jpg","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.594Z","timestamp":1791418565594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/12218525-d0cf-4122-9b84-de2112d29fce-280x280.jpg HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Fri, 13 Feb 2026 17:56:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ieflVSIINxNA8N1gJ7fTJU%2BrI6SnZJwKK2ybdUmB14aerOt1VryWQbPMCW9ZGqg45ggpxJSMCeAQiWhnVVOlsYmY1NJ2MdAcutKEyUhLx0ClC5DEFYeq2GPphPP5tA%3D%3D\"}]}\r\ncf-ray: a470f472f9eadfec-OSL\r\ncontent-length: 24663\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24663,"size_decoded":25536,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], baseline, precision 8, 280x280, components 3","md5":"9b1c12bf317b24a537c06c1c59e0bf53","sha1":"a0b2fcf92648466c2a55b29ff7ebf5e37fef7a93","sha256":"de95938d076d6dd43f1f475d4312eef1870d58845c44a49c27bd9993c31b49ee","sha512":"79b45b67155eb916c1e064d8a7d55244937767a9b411a88183209fff07f89cea72de18b903dc0d93d00b444130be0bbdbae9620b709de77751adff154596d12a","ssdeep":"768:qYy+Ac4jOni7UdSpfuE1rShjdF8Zjp/baNE:qCli7UdSpfuE1re78d2E","tlshash":"0eb2d0795e64673ceaabff3808fc2e9740dbe634fea61d85b2b5e2380108dc658410d4","first_seen":"2026-10-07T02:38:28.459864Z","last_seen":"2026-10-08T00:16:46.698987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/68ff5daaa90d11d3d9bb0df1f8e454fd.js?ver=34375","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.068Z","timestamp":1791418565068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/68ff5daaa90d11d3d9bb0df1f8e454fd.js?ver=34375 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11XW2075s%2BFJX4hgF3Y7Nl6WKhf5PgjU0X9R4JQG%2BrrQLf2q6JqnPNY%2FiWkdBAWbmirjz9ivLNd9cVS%2Bhfj%2F7S0RVyPGfWWQPxnBcTXGea0DMS%2F8TL0M8pguH2BfDw%3D%3D\"}]}\r\ncf-ray: a470f46fa954dfec-OSL\r\ncontent-length: 370\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":752,"size_decoded":1304,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (750)","md5":"ff273b6524d7dbb457965cec97ab8261","sha1":"089637548439047d9a2eac5480c5c0ddd1b4866b","sha256":"687c7289f48a5cd1d9d19b25b671aa8da6588542507fa1103175b0d3891f95b2","sha512":"a4a4dc80eff8db26dbd5c9c9cb8a942aa3525cf65a8b0fbc181ecd31d518999903547748d345937760d469cd24a14535bd75fba427b599292a375d82d6856e55","ssdeep":"","tlshash":"2801106db6aa64b902b756f3c0ef238bf03a11d4640298911941c9d05ebcecb1663fa7","first_seen":"2026-01-18T22:50:15.249662Z","last_seen":"2026-10-09T14:20:41.089601Z","times_seen":239,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/c79d65291f847d89d221691e15366fe7.js?ver=d009a","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.073Z","timestamp":1791418565073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/c79d65291f847d89d221691e15366fe7.js?ver=d009a HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAuml8J8vOn1yaaMcrBmIoTucBKUQ81EK2Ppulbwj6bSRJRyP1pSbP0nhMP4dX5gCDOQir5g6pAw%2BGxF8mFZHyLyuytaIO%2Bp2Al7PdJx8sJBv4YPqKTP2%2FY6GwdumQ%3D%3D\"}]}\r\ncf-ray: a470f46fb958dfec-OSL\r\ncontent-length: 4612\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15316,"size_decoded":5541,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15314)","md5":"95ca8b1f5241f0564cdca2b8be3414c1","sha1":"73e6fb2e08b033fb1d84e0c4b1ce624ce32d7f5b","sha256":"7c5bdd5da7452d5fe0b8a6131014380625b7b6afad825bfae85c2e9454026d19","sha512":"17c6827bd965cba99538601ee83d6112d38855dff0cb0c1ffa49bdcf8f02a44b3bc59497b841b5b6da42b2a1fbb89a0254e70c76b905f24cb39a14f96a5ed2a7","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFp:qNdi7anPH5FL736ePkPx","tlshash":"6562e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-23T21:23:24Z","last_seen":"2026-10-11T22:30:40.774786Z","times_seen":2102,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/17823f2f12ccca26fbf437556a5c7824.js?ver=7ddf9","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.085Z","timestamp":1791418565085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/17823f2f12ccca26fbf437556a5c7824.js?ver=7ddf9 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXUnQS%2BBdXi6oQzs%2BBcZIjOiPeiQHwZ5by8P%2B8jB5DrZhUh8BHIfzD%2BWB1zTZiq9qqaEg03cQNjG3HYGTxCHg5Fl1jgKSsFYZNADr1HSpxBcz7hbm%2FH0UI0qCkbtkA%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46fc95fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19013,"size_decoded":8570,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (18976)","md5":"7652006f086b444d29a94dec7b6695b2","sha1":"346a12c25b07d00aeaa86b90339a18bc1cc325da","sha256":"a946a19e4f38b44f90a78aa009c35e1139c6634ff7a5bb819c5aac4b88cc43ad","sha512":"9e531766ecd96a45cfbf5bda1f34781ae073fa8e33df31bfe4e6b6f37285e6c48a3539468199e6af6a22b616d2cb6bbff573ff90f76433a8e1a23aba311e90e1","ssdeep":"384:uhv4JyIOXArCkR85WfQVwlK8RYepz/26hIFugRjN:w4EPXwcoXmet2dtJ","tlshash":"4782a4c836c3f05a976231b5007f108bf23a6ea16cada910d165f4f8bcb845d9537e6e","first_seen":"2026-05-22T09:22:26.657799Z","last_seen":"2026-10-11T22:31:46.480402Z","times_seen":287,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-1NRYLSH095","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.573Z","timestamp":1791418565573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-1NRYLSH095 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\nexpires: Thu, 08 Oct 2026 00:16:05 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 162931\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476098,"size_decoded":163535,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e0dc9316bf39969f81ca87e1fefcd22f","sha1":"33cae63d041219cd3476233f31ecfb38e5df708b","sha256":"868ddafbd721d0ad5a92e655e4854437a2acb2c512a56800c06f3d0129a6ebb3","sha512":"bf504ec2b60d29cb82df49382d449c5412c4a821f01bac44afd0160c6ebb5b08c46ac9f74294617858fcae9d0b1890d16d1e1dc0e7daf60493bfda9c8db086e1","ssdeep":"6144:0XcUrtyDetGl0BqveZNAAycBcNMMb0Er533QN3uNXNU4w4kppt1A:LDeq0B6eYnE3uNXFw4YvS","tlshash":"d3a409cd73c6742293a2f678903f018b657b69a2b44cc895f28adce42d3469a5173f7c","first_seen":"2026-10-08T00:16:46.706671Z","last_seen":"2026-10-08T00:16:46.706671Z","times_seen":1,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":49,"receive":64,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2024/09/4a9967cb-ed1d-4ba5-b3e6-09b77993a119-280x280.jpg","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.612Z","timestamp":1791418565612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2024/09/4a9967cb-ed1d-4ba5-b3e6-09b77993a119-280x280.jpg HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:58:27 GMT\r\nlast-modified: Wed, 25 Sep 2024 15:37:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCfenRTAdyXakP9Cc7VIOpSJU0NteoLOTfoIYqqxOdcKZ6YPKw2eL5InYhYpBKGf16itE6%2BR1sAH6vSaHbuRmt7b1%2FdRSXv4VB0iASugKmwXBL%2BC7NEjy%2FBhXx1uVQ%3D%3D\"}]}\r\ncf-ray: a470f47309fbdfec-OSL\r\ncontent-length: 18477\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18477,"size_decoded":19356,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x280, components 3","md5":"4c7fede44c1e1f5cf0960cf26e38a806","sha1":"4ddb67e4908219738c8681db86f43cae635fbeee","sha256":"646f5a47db4d2a71557274f7bb60e1b44007781d5aa5225bdc49498c1501a5b8","sha512":"16c8ce510fc0465974f8470df57d2ec30982297370ea0dfb68000f2885a50d82dcffe6e00f0ba9691ef3407135c5e9655700f85b44c819140531c5bf0448b313","ssdeep":"384:czX5C7FF7EA8lwL1hTD/QAjeYoqyzse4lxRTJKi2y6E4:csbWwL1hTD/QsezbElxGiUv","tlshash":"8282c00f57539f562b82ad9b06727f3bcb4cf184e810dbad14b9ef15c2944c0bd6a250","first_seen":"2026-10-07T02:38:28.516909Z","last_seen":"2026-10-08T00:16:46.708397Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bzrcdn.openai.com/pixel-config/v1/VULLHT6sbccwqrxSDAfgkF.json","fqdn":"bzrcdn.openai.com","domain":"openai.com","tld":"com"},"ip":{"addr":"104.18.36.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.710Z","timestamp":1791418565710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bzrcdn.openai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 22:54:59 GMT","end":"Wed, 23 Dec 2026 23:54:55 GMT"},"fingerprint":{"sha1":"10:AA:8D:43:06:E2:C6:4D:B2:C4:77:5C:20:A3:D7:96:A7:7A:55:CB","sha256":"57:E3:67:DF:31:59:70:86:4C:93:07:B3:D4:79:B0:28:2B:29:00:78:D2:B4:43:22:D2:33:AD:CF:B1:85:6A:09"}}},"request":{"raw":"GET /pixel-config/v1/VULLHT6sbccwqrxSDAfgkF.json HTTP/1.1\r\nHost: bzrcdn.openai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://dukkank.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=300, must-revalidate\r\nserver-timing: cfExtPri\r\ncontent-type: application/json\r\ncontent-md5: fhso8brB9owXEb1CXfcPOg==\r\nlast-modified: Thu, 03 Sep 2026 11:22:01 GMT\r\netag: 0x8DF09AD9388374B\r\nserver: cloudflare\r\nx-ms-request-id: cc6c2c89-401e-0002-7f96-3baae8000000\r\nx-ms-request-priority: 3\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-cache-status: REVALIDATED\r\nset-cookie: __cf_bm=SLqZ63uIzdB.gY2i3F5TAfVlUYFZibB6KXm7KhzwELU-1791418565.7159953-1.0.1.1-AOIzubCu0gz52hB8Ycwyvw3AVIEGBY.ZnAe.qxmejYCjARRgQyk2szQll_jjc7819aUE7YmSVdfx6T7uK0cMG9pVFnvpBfVjm4DGLd6UAy_l4k9mRRrkRcV4SprNhn5.; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com; Expires=Thu, 08 Oct 2026 00:46:05 GMT\n_cfuvid=epTPvKgfRFEK31NBQVXfqWaCkPK6CrUwOCNbj1Efq5w-1791418565.7159953-1.0.1.1-J66XKOG_tB1RkmSbYGZa.fhjM1iK9KE9znrSFwfuPlk; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f473bbed76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"SLqZ63uIzdB.gY2i3F5TAfVlUYFZibB6KXm7KhzwELU-1791418565.7159953-1.0.1.1-AOIzubCu0gz52hB8Ycwyvw3AVIEGBY.ZnAe.qxmejYCjARRgQyk2szQll_jjc7819aUE7YmSVdfx6T7uK0cMG9pVFnvpBfVjm4DGLd6UAy_l4k9mRRrkRcV4SprNhn5.","quoted":false,"path":"/","domain":"bzrcdn.openai.com","expires":"2026-10-08T00:46:05Z","raw_expires":"Thu, 08 Oct 2026 00:46:05 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=SLqZ63uIzdB.gY2i3F5TAfVlUYFZibB6KXm7KhzwELU-1791418565.7159953-1.0.1.1-AOIzubCu0gz52hB8Ycwyvw3AVIEGBY.ZnAe.qxmejYCjARRgQyk2szQll_jjc7819aUE7YmSVdfx6T7uK0cMG9pVFnvpBfVjm4DGLd6UAy_l4k9mRRrkRcV4SprNhn5.; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com; Expires=Thu, 08 Oct 2026 00:46:05 GMT"},{"name":"_cfuvid","value":"epTPvKgfRFEK31NBQVXfqWaCkPK6CrUwOCNbj1Efq5w-1791418565.7159953-1.0.1.1-J66XKOG_tB1RkmSbYGZa.fhjM1iK9KE9znrSFwfuPlk","quoted":false,"path":"/","domain":"bzrcdn.openai.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=epTPvKgfRFEK31NBQVXfqWaCkPK6CrUwOCNbj1Efq5w-1791418565.7159953-1.0.1.1-J66XKOG_tB1RkmSbYGZa.fhjM1iK9KE9znrSFwfuPlk; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":1306,"mime_type":"application/json","magic":"JSON text data","md5":"7e1b28f1bac1f68c1711bd425df70f3a","sha1":"d2c57a6ca2a4d6537be2ab02904f494a78b4b519","sha256":"edf02fd401a8759f8f59416cb7c0ffbd5af180ae09da03e4f46f766615c6f837","sha512":"6bcb94790d59b7ccb42571aa080724ba2ee993b080272f6d645625da438fbea8c126c920caf977e6ed24c40b6f26d4726a57db90e3a59cf3a649b9140d20d3c3","ssdeep":"","tlshash":"0b9002125605105055d0d16082519b37886564649155585940095ca4842a0510380972","first_seen":"2026-07-22T15:32:22.534131Z","last_seen":"2026-10-12T03:14:31.510058Z","times_seen":3751,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1NRYLSH095\u0026cid=1022970760.1791418566\u0026gtm=45je6a61v9132738264za200zd9132738264xf1\u0026rcb=19\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121125486\u0026z=508061227","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.886Z","timestamp":1791418565886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:03:27 GMT","end":"Fri, 11 Dec 2026 20:03:26 GMT"},"fingerprint":{"sha1":"77:B2:7F:C2:57:EF:52:AC:8C:C8:7C:6A:33:62:6D:8D:9D:58:28:07","sha256":"FC:E7:9A:EA:F7:FE:5D:DE:7B:60:FD:DE:4D:26:E4:52:F9:3F:AA:AF:22:95:2A:F0:0A:DA:80:4A:83:A0:E2:59"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-1NRYLSH095\u0026cid=1022970760.1791418566\u0026gtm=45je6a61v9132738264za200zd9132738264xf1\u0026rcb=19\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153~121046263~121046271~121125486\u0026z=508061227 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 08 Oct 2026 00:16:06 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-12T03:30:50.651964Z","times_seen":1103299,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":36,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/02/69e50857-7c07-4da3-88ba-29445bcf2b84-247x296.png","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.596Z","timestamp":1791418565596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/69e50857-7c07-4da3-88ba-29445bcf2b84-247x296.png HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Fri, 13 Feb 2026 17:56:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PRyORheqNdTDTMm0bNjEAWJ2ESGuHy0PajKYDoQ8GLGYvO70TYkukASxmCgXIh58k0yZO0uwe2H%2B00eOA9DZa9qzv2UcU17W%2BcbPmidKhZdJ5%2F%2BIG0wFLwa55vnyBQ%3D%3D\"}]}\r\ncf-ray: a470f472f9ebdfec-OSL\r\ncontent-length: 160839\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":160839,"size_decoded":161718,"mime_type":"image/png","magic":"PNG image data, 247 x 296, 8-bit/color RGBA, non-interlaced","md5":"3f686613b756b31af84f811cbdcf3ced","sha1":"50d182ced95f4e458cba88144923954fe4c1f690","sha256":"c45ae7a1fdedc6369057cdbc6c94a1abc243cf186fedf1bdd1f0a43e546e846b","sha512":"ff1d91695a56afa80733ef93c575d358386b0efbf5eb819247d2954fb45674926cc6d3461346d937d402d3a1e57c45fc85a273d1556bd9f32c926e6507ead41d","ssdeep":"3072:Dz0yBt309uIH7eP1An4sD3xlCBvgOV7I5RtPbowjA4+ul9yQGqcj8:EyBa9V7eP1AxD3xlOvVKRP+uzyQGrj8","tlshash":"08f3126bc2d1765205205f4ac43c3d5dd3dc932a3ea74afb0e4eb9f90ac24a8de4e205","first_seen":"2026-10-07T02:38:28.478027Z","last_seen":"2026-10-08T00:16:46.712843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/08/5a3374f3-ba1e-4dc9-9341-8cf36e0de6ac-280x280.webp","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.620Z","timestamp":1791418565620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/5a3374f3-ba1e-4dc9-9341-8cf36e0de6ac-280x280.webp HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Fri, 07 Aug 2026 01:42:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWOKA%2FL4JCekrdd%2BI7AEtyfcOn8mEYu25VzN8vfVf01F9VN%2FhP4JfqUMBlYfGIzOekxbiJ%2BV3jdNFtEFOGal6QXz%2BSvc5fQljtQQwI8YX8lvhZC4LuAI1c4Eh%2BA4zg%3D%3D\"}]}\r\ncf-ray: a470f4731a00dfec-OSL\r\ncontent-length: 8484\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8484,"size_decoded":9366,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 280x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c1df4eaab21ee82a2475a033fbd9d92c","sha1":"6bba3acdf8357eb08fa6df3c51082bc04a4f2ca5","sha256":"8ad83e32658b9a469fa84bcdfb9eb7cf95b9378699116481e48466b5f629d009","sha512":"91d07fde538604c8bbddc74b3efb01c5bf0e7e578c4b4a2fe0dabb9f07d1398c84a733c5f089643643381b1d305d3575acd5638fe8f725406d6c3691c79319ed","ssdeep":"192:s1JGK7Ujiadix0yfpwEvNAoavHjwdDtdi0lA8PNJUO6+RAE1ANAKM6rj:s186CD0fzNAloiOtVJdFANAKM6/","tlshash":"5502ae6bb053cb0525afb56a94f58c683d600365e1ac1e793e18895817c0d8ff6cdfc6","first_seen":"2026-10-07T02:38:28.549674Z","last_seen":"2026-10-08T00:16:46.714449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/8ea716bdd4b3b022e2e463df71f7f3c8.js?ver=38c63","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.066Z","timestamp":1791418565066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/8ea716bdd4b3b022e2e463df71f7f3c8.js?ver=38c63 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdDIAJqhbyt53QvvGioZ78Si%2FKsYPX1fzbp0gcrfSRWC0qWpyMuLFj%2FpAI84FWHWia9b89ilTNWL7ZcACprNOYMRRCdZHu4p2vmVrXANRPcE%2BPubpUuIPgCOftcQNg%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46fa953dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":110597,"size_decoded":24798,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3068)","md5":"f0712e29f1805e38af8574710a7dbd07","sha1":"b1d654776102678bd45ec207a05324dadd70df28","sha256":"e44887b3860b72b4b607b36599973349717e9fa64641fb3cdee36ef286ec873c","sha512":"ac8adec8929f63165770b06fa88a59f3fa792f8fbb8f13a4f45ec7dc5b605fce65c907ba94d6f51aba88bfb0d482e7904825f63a681afe8e49ecf9b2748b5039","ssdeep":"1536:OCAiGAslIVHYjc2mSG3jwFpsqRJNNNrCtio0iS2KaxP/0m1KLE8r0/XIWWgSPxwa:P3v3cNNrQ08uwzRD7B4jqY","tlshash":"65b3f90932d8711c12ff19786a5b7603b376d6b570d998a0da101ef41a79b07f0eba3e","first_seen":"2026-10-03T13:08:58.650323Z","last_seen":"2026-10-10T15:10:10.598343Z","times_seen":15,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/e6a618c7c08d01247d952bc17ef7aeef.js?ver=f351b","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.072Z","timestamp":1791418565072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/e6a618c7c08d01247d952bc17ef7aeef.js?ver=f351b HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjtFq%2FxlHZim0tvsCwf9t5gKRkhN%2B4DthoDP%2F2hKi0ONFqumWzHtk7YVfh1QeAiQEyLuDHGxBjYEWeTA6BgIlM7e9sn90YhVEc9kbobMIxuuRoPrzz5nKu0Te0%2Bkaw%3D%3D\"}]}\r\ncf-ray: a470f46fa957dfec-OSL\r\ncontent-length: 672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1433,"size_decoded":1602,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1431)","md5":"8adf9435c90614c0d030c6cd156d0091","sha1":"bc84b2a05b157f2046ca8e0d8befa7cd9a507ae2","sha256":"0ce763e474d11bb3af0233416ded3f7cfd8ade51ca4d371bdc414552b048bf79","sha512":"cd18da680923ae1a4334558b62cd08c3fc745dadfec83e27d7d01befbecade2c72c219452394bd7fba9aa31cc84ff96234793d5c08216441890bbf2bc5c9ed4a","ssdeep":"","tlshash":"be2152ec31b2e1356beb65ab7937bbc43932186332029094889e15744f71d47c127aee","first_seen":"2025-03-17T01:59:03.637098Z","last_seen":"2026-10-11T19:21:20.001793Z","times_seen":46,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/c937cdc7417dcc69057c854404bacb59.js?ver=93b95","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.076Z","timestamp":1791418565076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/c937cdc7417dcc69057c854404bacb59.js?ver=93b95 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cn6xIae27rKfLD68dY8Y4RXKNI3sEn6iV3LmLzBpmwyhm7xT6on%2BjGsTnBGn8jhDkvQAsK%2BgJNcfXpuAGrPMY0SkOKHPo1kSd%2B0s%2FrvFbVr0BeiR9SjACVGjEhK%2Bnw%3D%3D\"}]}\r\ncf-ray: a470f46fb959dfec-OSL\r\ncontent-length: 1023\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2440,"size_decoded":1956,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2438)","md5":"856903a324021923b8c5678cb14861c1","sha1":"75914a7fe50aec7e71de5cd09e9198df3f0d0816","sha256":"6c6b2c5c9dfd7e67f58644bfaaf2686f95b0ce62e8c8af1eda5d0d739cede8f2","sha512":"083db2926756baea8aca18f28b59c712f31ee986ef82bbd08f418e50f7ef80efd6c698e59ab4b46f9a1a809f7fb2e1b9a41d84b72f29c69dcbab83a62c9704d1","ssdeep":"","tlshash":"a2518335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-06T18:47:10.448525Z","last_seen":"2026-10-11T22:30:40.843412Z","times_seen":674,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/af2eef6d75d4c6f83cf64c9e9889baba.js?ver=8750a","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.082Z","timestamp":1791418565082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/af2eef6d75d4c6f83cf64c9e9889baba.js?ver=8750a HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3koqu58JGlKm7P63yAbV05KwQUqxP2c4jGhw3e%2F3xO%2FURNlYbxPZVwbgG4vSlK%2B3jWv6HP3Hn%2BvZ9HyF0bUfzZkEk3lMpNxMyK87Gd6WDvQBEsY5OfQqmZ4%2FPplKQ%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46fb95cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24538,"size_decoded":9354,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24536)","md5":"c79856ef4fbb358ffc18e524aaa6756d","sha1":"9d8c91662a58a2e0337192bacd02eabcd016d03b","sha256":"8a3522faaa955074b14e6d42205328dbfb5d92278269fe264b82df9463a09c8c","sha512":"6ac5a2283bfb0648f63f7d882409aa0372d5bc9daede27e982dcb7ec142d17c7f07f1cc1b80b36d2ad230ce50334651c9d45b50af71c00799179ce6c7578b2b4","ssdeep":"384:O1n1fACx+q1YzcWQ/z/UaXYsg9xsGud4gajytnO1gB9LuAEins0DvyzqyymHRkf9:0n1fACx+q1YIWQ/z/UWg96GG9ajytO1o","tlshash":"6db2c529f27471a945bb60f6b83b53a4727730757107809cb12a98da1c2ed4e2233f7e","first_seen":"2026-10-01T01:01:14.619813Z","last_seen":"2026-10-10T07:05:41.092719Z","times_seen":4,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/e949ba25319e79d17e357aacc63ee004.js?ver=75186","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.086Z","timestamp":1791418565086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/e949ba25319e79d17e357aacc63ee004.js?ver=75186 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:35 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0y05D9zZe9Y4ODqZA6uXWz6JQbucsB5sBR3K4x%2FRtdKC9izBziv1P5RtxhAwHKaOugwEXxAqfjQVXrCGLCs9E4t3o5bFKXjVOApy3gCcWnXe39TIX914U26QjxbP6w%3D%3D\"}]}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a470f46fc960dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1432,"size_decoded":1645,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1395)","md5":"b270ade769477764ffc2925f77771019","sha1":"5caee265b626d069d9b4ef112ae2a7932dfaf961","sha256":"fcbf1c793001ce056e9c8a7d276bb60c725bf4651e538ade929b9fc66f558578","sha512":"090360a0c81e7b68e31b5a08627a4c7c256c2285390e32bdf821881ed1a4715d04a5c8afbaddfd00ca9bae4780fc7ba88cefa81f1ea02d7814ef0f609aa53289","ssdeep":"","tlshash":"2a2176c5f196a9f3013334b9c33f4207b232e4149aa6d951a4c9c4f2ae70c96f5b7a29","first_seen":"2026-03-11T16:43:44.333824Z","last_seen":"2026-10-11T22:31:46.481332Z","times_seen":467,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/06/ChatGPT-Image-Jun-23-2026-01_02_10-AM-280x280.webp","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.617Z","timestamp":1791418565617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/ChatGPT-Image-Jun-23-2026-01_02_10-AM-280x280.webp HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 05:42:52 GMT\r\nlast-modified: Mon, 22 Jun 2026 22:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h3Y9i9Yg2qleE50cdRmIMW%2Fp9Sw5OvaCQsE0VvCEcmvFtVDz8zRJJqIJskY4TWroSaK%2Ft2j7nwqf4IoZJLhUtqQyvn9%2BugWccrkQB%2FOEEVDXvBRJVw0jxysevO6yWA%3D%3D\"}]}\r\ncf-ray: a470f47319fddfec-OSL\r\ncontent-length: 18518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18518,"size_decoded":19397,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 280x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7f4694c34dcd3938ad60b163dfed569","sha1":"232ed2ff5a1b65c4d8d5dcc593d4b606ce7e4e9a","sha256":"2c1768de9b1f5db7cf2de2ef3bfd6f89bfdcb728e34ce0b57abfea5786a7b566","sha512":"34ea72d61d4976cb26ee0b70d27aedd723743bf944a3a74b077368c7e234ce271b783c9e8f20950e6a3a9b22fc156722a5ba9c2d3b201fe4fa258cd61feae1cb","ssdeep":"384:N+Xh54LDxEYpxCAQ3B9CAKMgb2w1K8ZTjXa2zD+fW:N65sEYbCAbXMgCuvZTTj7","tlshash":"2882d007f7a3abade8f87024d55c90cfa1b67cefd4865a50d021697d932c00bcd592d6","first_seen":"2026-10-07T02:38:28.44482Z","last_seen":"2026-10-08T00:16:46.723354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/88155b5abfc722145e58fc8bfb76dfea.js?ver=e99ad","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.054Z","timestamp":1791418565054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/88155b5abfc722145e58fc8bfb76dfea.js?ver=e99ad HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:34 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sk5Mh%2BUqjZKEidcCGbPyBI3hqCzA4XUdGww%2FFDGjnBGShshnkE6x7Ltkm2drlbmPFGvKsYc7XA%2BvsLd96GK48fKlf%2FghCUqMVRuZ6j0V8t6YwClrEC1cVYqx0FmMhw%3D%3D\"}]}\r\ncf-ray: a470f46f994cdfec-OSL\r\ncontent-length: 4678\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5609,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13478)","md5":"baf07315015471df7bda37547934e016","sha1":"da1dbf551408f51caf68ebb5b44477d05fecd321","sha256":"bcd8482491d261c223749a5b352d5f29eea4560d9dd7bfa030dc270327c37eee","sha512":"4a2841b478b18f269782ba418c82b756ddbfd8b67d213ad594b5e4ad6d816b993b948269bea3fb509ec6d05882f557c76fa8eb061efa9179eac12629cfaf45c4","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLOR4:5rprxaefKI0LP19m4q1WW+h4Mj7","tlshash":"0952c8adb56679724eb721b8f03bd24b71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-08-10T16:39:17Z","last_seen":"2026-10-12T03:28:01.973137Z","times_seen":11562,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/dc6a618c3e29cf2c7be341c6cfb7c9f7.js?ver=457a3","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.056Z","timestamp":1791418565056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/dc6a618c3e29cf2c7be341c6cfb7c9f7.js?ver=457a3 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:34 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOA8DDvN7o4XF63122LCcQ53eoZ3wUF66%2F6xdiAkye%2FOZDILZqp1KuI0cRVaBMF8g1%2F0oiUn1pLp8mHAhUrvzzLzp0LAXKEyAUpzA%2FUkY1t5BWs%2BGWg32guhDiv06A%3D%3D\"}]}\r\ncf-ray: a470f46f994ddfec-OSL\r\ncontent-length: 3277\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9637,"size_decoded":4210,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9241)","md5":"22d04a9f346ac6bd88750d8fd6eb6b27","sha1":"39498dc3c4e981190c4bbdb1f1754c421d297ec7","sha256":"9d6785b82c1f81d373b86be7d06a9e6f48b4f1d318e52e65ed7197101fd14a1a","sha512":"bf0f2b2c1fbc2cb1c6cb6ed663c3569fdb84e285fe5294c6cf7edc3dcf7cba11391dfe1bc099c379ee46bb288965cab701645a49af7d0a5e5ef6f2910825f7a1","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMh:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovz","tlshash":"5b12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-22T04:17:43Z","last_seen":"2026-10-11T22:30:40.770619Z","times_seen":2218,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/cb11470e84f5df21a34f1bf4d239488a.js?ver=fc3a9","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.057Z","timestamp":1791418565057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/cb11470e84f5df21a34f1bf4d239488a.js?ver=fc3a9 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:34 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIS04lQB%2BH05WqUH%2FAxb5dHsCw45fp8WW3xyf7wNU2aJtMJz2tBRHJYqaS3Joj%2Bjh332tIYHOJv4wob0wNZiPwBYCOSJHp8m%2BaKO8bIL%2BnVOC3E4L2xx6bnfzm5IwQ%3D%3D\"}]}\r\ncf-ray: a470f46f994edfec-OSL\r\ncontent-length: 761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1721,"size_decoded":1693,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1689)","md5":"204a9c5673d42178265858580d802297","sha1":"f05c680cc16b886c45eb6637f983df8f299f058e","sha256":"69e4a8162c94cbea773fc758544c4c81c29d577a5f4d48bb9e585e7ebf657f8a","sha512":"cde4a38d9416c18391f3d912471bd072a7187f833b5480f5d9c33bf144e851d6c35b6af51b411f0352c0bae970afbbfbf9ff944ad68c039f8ec7b938652b1d9b","ssdeep":"","tlshash":"a931b6d93095a8da06071490463f1207f2f91f27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-05-10T05:46:17Z","last_seen":"2026-10-11T22:30:40.757924Z","times_seen":2177,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/uploads/2026/06/ChatGPT-Image-Jun-23-2026-01_02_10-AM-247x296.webp","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.619Z","timestamp":1791418565619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/ChatGPT-Image-Jun-23-2026-01_02_10-AM-247x296.webp HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:48:33 GMT\r\nlast-modified: Mon, 22 Jun 2026 22:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkXOGsRsNFhkqTkKzYnQ%2B9DlLFUn9YAuiKkYnAoLp2pxlRVtVx2wxiudGysspLGOZ%2B3qLLg2dYv7dMYCzfL6kbsLhQTJH24ZkNyyeAcOKHIF8Yn6uiXtM2PaSxg8YQ%3D%3D\"}]}\r\ncf-ray: a470f47319fedfec-OSL\r\ncontent-length: 17764\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17764,"size_decoded":18639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 247x296, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7714732f14f0aca300e91e3416924521","sha1":"c299c7152eb7cae3b6baa5fdc371644e29e222d6","sha256":"fce7547eb008d95ab05b20a0e4b1810adf0a498a367144588336ac89d653b516","sha512":"910157a4d604b1061a11a1cbd235d5b4c38e6943cb6d8807836f745e32d0607aff086d14e4eb24deef01642295c22480d78c0465da7a88c302be75e5b054dcaf","ssdeep":"384:whA76J0BE/vC2LWpmN9TfteBpsy8GRD7JeLX8TfBAYj:fS/qwz4BCSdteLX7Yj","tlshash":"e582d1c724ea11798a01f2a1739cf854e8d9c0b56de879f33016b852723b8583d376f8","first_seen":"2026-10-07T02:38:28.554853Z","last_seen":"2026-10-08T00:16:46.732558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-content/litespeed/js/2b3ef62cc3a0914d95a1e59c295386e0.js?ver=b7db7","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.851Z","timestamp":1791418565851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-content/litespeed/js/2b3ef62cc3a0914d95a1e59c295386e0.js?ver=b7db7 HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/; __obref=0cc80e6e-7941-4bc3-ac17-f33973a321f7; __oaiq_consent=true\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"},{"name":"__obref","value":"0cc80e6e-7941-4bc3-ac17-f33973a321f7"},{"name":"__oaiq_consent","value":"true"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31557600\r\nexpires: Fri, 08 Oct 2027 04:47:38 GMT\r\nlast-modified: Wed, 07 Oct 2026 22:47:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5oCtxr78QcV4gVC%2B8Amfm%2BH7SuEYZ7XYKArQE5PFpL%2BunceglZ%2B4%2FzgNfB4lFC98LZNc6htMljjrurYi8Y4RrlsPGY19y6TbjDzg%2BG7nvEyqEygssvRLBAB%2BKc%2B29Q%3D%3D\"}]}\r\ncf-ray: a470f4748a7edfec-OSL\r\ncontent-length: 4425\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14218,"size_decoded":5364,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14216)","md5":"177f8b3bfd1605e42a4704efcdf01cdc","sha1":"7bbb41dfef6605c098140e1b73356109d41aeaa2","sha256":"84b14cceeb0c70c877787e422922e238ccabd6a28084a81cad6a10f64d8d3f8d","sha512":"a84fb72ea8c9a6992d3086aeddf999d96542530adf3cec55e116d5b0aae694d058a4014334274094626aecec79a3bbdecceb67a0a8ea0e780cdc3c76c8e09405","ssdeep":"192:ywypHcFWh6FbKqYQIILvP+k6T9he5aBhOVfaOW4fW33BEvp9UkGhi1zKRCL19bR:ywypH36FbKvkn+dbGgOVfPWmQ3qvSWB","tlshash":"4952b54073c2a376d39b30ecc95b450ea9b77f1528062190b22bc5955d68f08e1aff76","first_seen":"2025-08-16T23:06:15.854043Z","last_seen":"2026-10-12T02:44:18.810777Z","times_seen":531,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T00:16:04.723Z","timestamp":1791418564723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://dukkank.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://dukkank.com/wp-json/wp/v2/pages/195397\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\r\npriority: u=0,i\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t6DNor2%2BSjwv3iEpDKKUFpz1flRsyUa6HgTaRP1jlCfKya7amTqK1UjPs8qIaXzGKl9n%2BrefFA9ejgJ6IsctSveoR4tvd1quYo1hK9J8h8YBAExxfwPfIvvMDSfY0Q%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-apo-via: origin,host\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=20,cfOrigin;dur=115, cfExtPri\r\ncf-ray: a470f46da8e4dfec-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor:4.3.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":241873,"size_decoded":38746,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8638)","md5":"f2a67139611943dc819501dbcdc4a6a7","sha1":"21e3c2df83f5fa34fd64a7a957b98c7e9eb856a8","sha256":"1ed1d463d5e12da5cdc01265bdfb557719d53bec4ef956d61b1a7b5d722cacdc","sha512":"01422d3e811266acb8bffd6b954c21f4448378c8e0e51e926743e1301623bc321717195a15ef077bb36b307fb54a68eae55f941c944cd250653a93c9e599fcd6","ssdeep":"1536:5AiD8ke05c89APESjI0K/RyAr4O+nF2VUGQ2B1l9+st1jktsTEjnAXUjnOTyp5Zi:OiD8k75cJjVF2m2B1CAEO+tp5Ld23","tlshash":"f6341bf3b6365466022d97c5d0b4facde2936a09c9c7d4706bbc078cc3d5e126a493ab","first_seen":"2026-10-08T00:16:46.739425Z","last_seen":"2026-10-08T00:16:46.739425Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":5,"connect":12,"send":0,"wait":144,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dukkank.com/wp-admin/admin-ajax.php?action=pys_get_pbid","fqdn":"dukkank.com","domain":"dukkank.com","tld":"com"},"ip":{"addr":"172.67.196.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.542Z","timestamp":1791418565542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dukkank.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 09:35:35 GMT","end":"Mon, 07 Dec 2026 10:34:12 GMT"},"fingerprint":{"sha1":"5F:78:D1:96:D5:BD:85:A2:F4:22:29:0C:8D:68:95:F2:EF:11:D2:D2","sha256":"B4:4C:DF:6A:0D:63:48:6D:FE:AD:ED:A8:C8:6B:7E:20:FD:62:6A:CB:C9:7C:49:57:3B:A7:E3:CC:E9:C2:44:53"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?action=pys_get_pbid HTTP/1.1\r\nHost: dukkank.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nCookie: sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F; pys_cd=dukkank.com; pys_session_limit=true; pys_start_session=true; pys_first_visit=true; pysTrafficSource=direct; pys_landing_page=https://dukkank.com/; last_pysTrafficSource=direct; last_pys_landing_page=https://dukkank.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"sbjs_migrations","value":"1418474375998%3D1"},{"name":"sbjs_current_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_first_add","value":"fd%3D2026-10-08%2000%3A16%3A05%7C%7C%7Cep%3Dhttps%3A%2F%2Fdukkank.com%2F%7C%7C%7Crf%3D%28none%29"},{"name":"sbjs_current","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_first","value":"typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29"},{"name":"sbjs_udata","value":"vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0"},{"name":"sbjs_session","value":"pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fdukkank.com%2F"},{"name":"pys_cd","value":"dukkank.com"},{"name":"pys_session_limit","value":"true"},{"name":"pys_start_session","value":"true"},{"name":"pys_first_visit","value":"true"},{"name":"pysTrafficSource","value":"direct"},{"name":"pys_landing_page","value":"https://dukkank.com/"},{"name":"last_pysTrafficSource","value":"direct"},{"name":"last_pys_landing_page","value":"https://dukkank.com/"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nserver-timing: cfExtPri\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-litespeed-cache-control: no-cache\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncf-apo-via: origin,host\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qb6d6yyxbTQXkbcIVKzGace2MY9nYBX4Gp0gUBVUGXvb6JrSUTfpCMg70M9f%2F4UZN1TUWDGBGQRToG%2FXPJoGUFsetxvsVfWDpHCZJLyNlmedhpH4gLMMNLtY7aPRFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a470f47299e0dfec-OSL\r\ncontent-length: 80\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":99,"size_decoded":1177,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b8c6c8dabffe73657f25435be1bce3e7","sha1":"c6688ace550245ec0c537af9e64707cbca170185","sha256":"d5f383973aa5059fd1a10bc895093c2b1bcc1d3ca4ff36c3fc729c99e0924959","sha512":"3829e601037688a9ff81db8ca3f190b8e8f95af3b2e8eddf8e0e904ea149f931017339704b48b73c92d71970e2c3f4c03619cf80edcf7c09860852a9b0eaae61","ssdeep":"","tlshash":"0eb0124c3b0991d56010e38b1428ee6110b63b52d04002d4a0bc500a4b50cd7f453843","first_seen":"2026-10-07T02:38:28.504808Z","last_seen":"2026-10-08T00:16:46.7414Z","times_seen":2,"resource_available":true,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"dukkank.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bzrcdn.openai.com/sdk/oaiq.min.js","fqdn":"bzrcdn.openai.com","domain":"openai.com","tld":"com"},"ip":{"addr":"104.18.36.216","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dukkank.com/","date":"2026-10-08T00:16:05.549Z","timestamp":1791418565549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bzrcdn.openai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 22:54:59 GMT","end":"Wed, 23 Dec 2026 23:54:55 GMT"},"fingerprint":{"sha1":"10:AA:8D:43:06:E2:C6:4D:B2:C4:77:5C:20:A3:D7:96:A7:7A:55:CB","sha256":"57:E3:67:DF:31:59:70:86:4C:93:07:B3:D4:79:B0:28:2B:29:00:78:D2:B4:43:22:D2:33:AD:CF:B1:85:6A:09"}}},"request":{"raw":"GET /sdk/oaiq.min.js HTTP/1.1\r\nHost: bzrcdn.openai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dukkank.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/javascript\r\ncontent-md5: J2Girav2VayrWVArTdhzuA==\r\nlast-modified: Fri, 04 Sep 2026 14:15:04 GMT\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nx-ms-request-id: 16369a6a-801e-0097-7777-3ccbdb000000\r\nx-ms-request-priority: 3\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\ndate: Thu, 08 Oct 2026 00:16:05 GMT\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\nage: 2675\r\nexpires: Thu, 08 Oct 2026 04:16:05 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=yf1VhNcXhZyJ66VxCh_y0j1tx0t.df.y37leiHg9T68-1791418565.5828533-1.0.1.1-FV7Aw1_W.zjB8xJ4Sqm68UvuBbnFKPi6m.kLEilMpI.AMbbgZVWCk2Qqxia_DkO4bCB.Y84EmqbPsZ_vQwkGva1mMSsZDrwlIbh5tq0bNgItYvxyxSg7TBE5_LnGxoFw; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com; Expires=Thu, 08 Oct 2026 00:46:05 GMT\n_cfuvid=KhUt43dQ8UZ9egeFSTfHt4iBAXN6XSmeXeViopdUBiM-1791418565.5828533-1.0.1.1-Apjev24r3_6jqkHsTawJP1QYjNFcak6KnrE3QAJi56k; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com\r\ncf-ray: a470f472edf856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"yf1VhNcXhZyJ66VxCh_y0j1tx0t.df.y37leiHg9T68-1791418565.5828533-1.0.1.1-FV7Aw1_W.zjB8xJ4Sqm68UvuBbnFKPi6m.kLEilMpI.AMbbgZVWCk2Qqxia_DkO4bCB.Y84EmqbPsZ_vQwkGva1mMSsZDrwlIbh5tq0bNgItYvxyxSg7TBE5_LnGxoFw","quoted":false,"path":"/","domain":"bzrcdn.openai.com","expires":"2026-10-08T00:46:05Z","raw_expires":"Thu, 08 Oct 2026 00:46:05 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=yf1VhNcXhZyJ66VxCh_y0j1tx0t.df.y37leiHg9T68-1791418565.5828533-1.0.1.1-FV7Aw1_W.zjB8xJ4Sqm68UvuBbnFKPi6m.kLEilMpI.AMbbgZVWCk2Qqxia_DkO4bCB.Y84EmqbPsZ_vQwkGva1mMSsZDrwlIbh5tq0bNgItYvxyxSg7TBE5_LnGxoFw; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com; Expires=Thu, 08 Oct 2026 00:46:05 GMT"},{"name":"_cfuvid","value":"KhUt43dQ8UZ9egeFSTfHt4iBAXN6XSmeXeViopdUBiM-1791418565.5828533-1.0.1.1-Apjev24r3_6jqkHsTawJP1QYjNFcak6KnrE3QAJi56k","quoted":false,"path":"/","domain":"bzrcdn.openai.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"_cfuvid=KhUt43dQ8UZ9egeFSTfHt4iBAXN6XSmeXeViopdUBiM-1791418565.5828533-1.0.1.1-Apjev24r3_6jqkHsTawJP1QYjNFcak6KnrE3QAJi56k; HttpOnly; SameSite=None; Secure; Path=/; Domain=bzrcdn.openai.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Livewire","description":"Livewire is a full-stack Laravel framework for building dynamic interfaces.","website":"https://laravel-livewire.com","common_platform_enumeration":"","icon":"Livewire.svg","categories":["Web frameworks","Miscellaneous"]},{"name":"Laravel","description":"Laravel is a free, open-source PHP web framework.","website":"https://laravel.com","common_platform_enumeration":"cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*","icon":"Laravel.svg","categories":["Web frameworks"]}],"data":{"size":82799,"size_decoded":27682,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65489), with no line terminators","md5":"2761a2adabf655acab59502b4dd873b8","sha1":"d485bd4600592727a021ce967162bc2cda718b69","sha256":"c25abbd7f5a09dda253ae62f82ac489b5597234da4f064fcbfc35480bfdc034a","sha512":"bbd7c66f474add4d116acdf453813786a8d1db34dd80322c35d8e96513e08e82d2bf694d5857a10bc22572c6b0654e11c52b1f1cc1b9a10bd11bb23e85af9ccd","ssdeep":"1536:ZHCKVYZY58lhUZLFwstD/cFghBj/kC0WDGef+1iIvwgi:8FlrsZcjef+Xwgi","tlshash":"948319fdb396707363ce4178d1fb1007b278a8b2144c4004e169aebe267569a52f6fbd","first_seen":"2026-09-04T14:36:00.414447Z","last_seen":"2026-10-12T03:14:31.511952Z","times_seen":3206,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":25,"connect":9,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}