{"report_id":"699b38cc-c84f-4720-bdc6-84bbd3ef505b","version":6,"status":"done","tags":[],"date":"2026-01-10T08:10:01Z","url":{"schema":"http","addr":"hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"title":"CIMOLLA T0BBRT C4NT1K B4NG3T","dom":{"size":20174,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (630)","md5":"b6fc04306aeacd7f06b0458a286c1a5c","sha1":"79c9c6cd6e193019f0837771e263966b4ca38e0c","sha256":"3c7a87ec5fdfa89ad53b9b678b75479fccef9bd93702c68130ea4e6dab317ee2","sha512":"0bcf3dbc36e23297ebfd105ef3567b0e08fb9ae15514821e40f05cb580b67cbff80031ec110bfa9a4bb1f5268874ff54a7cdb7d147921c73f5973048de94d5fe","ssdeep":"384:0pS53ennE2u2F2KVf1WNUtosNR7tmIMI2Qxqm0i:0pS53ennE2u2F2KVf1kW/e/Bm/","tlshash":"9092866648f314639087e1d46eb69b0a7b96c347c98f9a8436ec0bc48f93dd1d86378d","dom_hash":"domhash2922f9934361d09d1ea1d5038b1b9043","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T08:10:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":4,"received_data":549973,"sent_data":1933,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hepini.io","ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2025-11-13T04:26:10.681635Z","last_seen":"2026-01-08T07:39:31.113806Z","alert_count":19,"request_count":19,"received_data":4452096,"sent_data":10304,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":1,"received_data":435375,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-01-04T22:23:09.64902Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ef62f9eea129ae3527cf97b79951c6d","sha1":"3950c14b9d1826be3580a37971c2a3ef04b85d42","sha256":"e077189589067adef010c7e7af494195927bb811ec5feb48bf3a84b9083fa191","sha512":"838c56e356af5b089ab07b18b4f36ca32eeabbd8b56522e3509c21e371141e94ce58a8bf2201c7f0ae4b7924ad5cc927f93887d60a84668277d7e4213d0908ae","ssdeep":"","tlshash":"86c02bcd210a0c71c1f73700cf3fb600b602321898d06a31480a63844d30e03db44810","size":153,"data":"","first_seen":"2025-11-13T04:26:18.813428Z","last_seen":"2026-03-28T07:33:26.143054Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e428f80587c67cf4b4ad77476ec9e3ad","sha1":"03a85b7243ac74186d8007e2567547152f1600f6","sha256":"c464cbb2068156ffd1573a962bb6354344e59d96470bacdb9a6fa952225d596a","sha512":"a1c3d3ef18e62e653c1213e601d353252f7c6f51d5856ce2f9eb3e1f57bd0f289ae3bd5d92eafac5f6ae2ce4863fa65b41f38b642186492c2997df87c5492064","ssdeep":"","tlshash":"e831996f66e208210affb3aaa70e6701712540571542ec003e6dcbb45f65da75076bcb","size":1579,"data":"","first_seen":"2026-01-10T08:10:07.145885Z","last_seen":"2026-01-10T08:10:07.145885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-19T02:25:35.584565Z","times_seen":332929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-19T02:10:43.148607Z","times_seen":14408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V0LG39JYV5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6598eb564d37481082d4500bae56c8f9","sha1":"c3bc1dfe2ab082946f411ccf4d36f9d4cca7458d","sha256":"8bb831a0bf42bfe3fe59f62780803684b5841370c04abfad4f4c57c4db4bbe46","sha512":"be16479469c26bcb863f04ea09a8415c9663b110b586fede5e49087ce4adf8bbe4448d4fb47bb44eff192f81c603f6ba5838123a78ba8f6d811851d19586fc2a","ssdeep":"6144:N4rVfsMxo6qWroAizhQkc1/po7YA+TkIzvovBQVnFRA:mBrqLAi1C7TkI0t","tlshash":"d79419ce73d670269396e078503f018ba57b29a2b45dc896f1c9cce02d74a9a4277f7c","size":434771,"data":"","first_seen":"2026-01-10T08:10:07.110249Z","last_seen":"2026-01-10T08:10:07.110249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons/font/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons/font/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hepini.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 134044\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.13.1\r\nx-jsd-version-type: version\r\netag: W/\"20b9c-tEH8/5OeJPoJBqN7d4h4i5/du2g\"\r\naccept-ranges: bytes\r\nage: 31562\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nx-served-by: cache-fra-etou8220027-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 134044, version 1.0","md5":"84a4d15b9e4459b6229a7f1dccc6609c","sha1":"b441fcff939e24fa0906a37b7788788b9fddbb68","sha256":"6c75710364a1ca5604267716f6d28997b26319fdb078cf11e0b42ab66ff2ea61","sha512":"d767814d144b311254de5d248d4a1cd2777209016687c11b3a7791642d90ff267c11d0001fb30435e3767959a2a00d4076e1bc6fad3c7a58cfdb00e5c77c44ce","ssdeep":"3072:tDHos22Zs2P3qithtQxgI+oZzvHB2haro8yYMBX:FHo8s2P3qi1Q+K1hLrxmX","tlshash":"19d3127e338ead54c8b4d32963588c7522ef82c2962bb2235f71523386f94fce485517","first_seen":"2025-05-15T10:27:38.85456Z","last_seen":"2026-04-19T01:37:50.522418Z","times_seen":3535,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":38,"dns":1,"connect":0,"send":0,"wait":28,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nage: 1984918\r\nx-served-by: cache-fra-etou8220062-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-19T02:23:04.62168Z","times_seen":20485,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":54,"dns":11,"connect":16,"send":0,"wait":14,"receive":8,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_69392dfd75e0e8.80397818.png","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_69392dfd75e0e8.80397818.png HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Dec 2025 08:23:25 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1118319\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjWikM423Us4EmAoK%2FV63PJz1ECEmXCWpI30SHe9c6Ezzvu9UVudLUETeo6%2FaT%2B57k0Ec%2FWzEVcRCH0KawoxSBMNJKtBsdUA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847ee323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1118319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 1280, 8-bit/color RGB, non-interlaced","md5":"840ba429abeda13416206b9488c9b54c","sha1":"2dcc4479f90a8a5aea91c1240cb9a09c39e2b1a4","sha256":"e83cffb79d7e38e42dcfe7e92f68205149da2b3e13d8326c5d3d6cf79a6e3983","sha512":"f5eb69f52cbc93377c1a642ae22a6e51a632061272b90da4d4541fd7aabb4517fae1892acd3ea31d9b4d5b0ba9aba9c7e2e2b0abcb63adfd01425b3cd1d826cc","ssdeep":"24576:04NzddsUeqMWKT7spcJGwnyU+YrziTktASNnQ7id:0wHD3MV466vItQi","tlshash":"932523eb36e2ca86e599e7f512f898a8550a0c00e4cfd8e40e9dc9c5ed86d511e31bdc","first_seen":"2026-01-10T08:10:07.107188Z","last_seen":"2026-02-05T23:52:35.209826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":530,"receive":1053,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_68f2661a97d2c9.56037064.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_68f2661a97d2c9.56037064.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 17 Oct 2025 15:51:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 130512\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vPjKT6Z9wxvhs8BrGvO2c64sGaEruAFEg0v%2BfrBw9Py87pe5plAlJE%2FUHRMVe6PpsLts3v5YhK4RIfyYMVsAaUT97vN4j67\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1848ef223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":130512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"c0b8c1526559a2036a37c2f9047d9cf9","sha1":"88d2b794a91b3cb2c809da9269ed74e4006194c3","sha256":"d83f7813c11063907358f9f0feedc138210d8d03fd2661106a747c7dd5a2b7b2","sha512":"ed3b514c488bb15515ef3029b43eb14bc066c6946dbee36b595771934faa71f51aab850eb084b137262ca44b72b083779eff6137892fc10497bac1b22e51638b","ssdeep":"3072:antfjEzREORJ0mTlsaicjMMVrwFLxh1NzI3aPyIuw1kEJgYFJUO:atfjEzREyLls6/rwHJIqdOYFOO","tlshash":"eed312aac8a24f3529c2363fe788df1c06edee9c70523be81955ca6ae841d45cf410e5","first_seen":"2026-01-10T08:10:07.108173Z","last_seen":"2026-01-10T08:10:07.108173Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":353,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/thumb_678557ab0b6b84.21112341.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/thumb_678557ab0b6b84.21112341.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 14 Jan 2025 06:12:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 131145\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qF5vTS3%2F8Y0%2Fo%2BG1n2RV%2BN8BeslgwEWwLxTbG7Z%2BaCS%2FG1fxv9gDX8ZFmydKM0cjXlqK7UsBGW2qBPuhAGKk6lfmXZc4QlqJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1848ef323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":131145,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 736x1308, components 3","md5":"cf1919ba5de6ddf3af4172211e295ecc","sha1":"d7964f8213d6b793dedaf3802347f71fb1875a33","sha256":"d8e45db99b4aef3a11972930ed83eee39f903095b3b3b40ec0704939f6a39e5a","sha512":"02df2ee80598275f894bd0ede7043517b70d8c576bd713eaf77b8b8e9459adef02b2bb91daed91e2384ff877d69c758942b6fb735968b6809f9926b0ba77712f","ssdeep":"3072:cqQdWD7e74nTHEBT6X7/SsrqECxJGvo4alKN6lQZ5zeuQpE:cqQAusrEBiSsrqpDRHLlEjx","tlshash":"51d31340f5c03561072e9ef372005a5dd18e9836eb14b74cb9e8d8f6f625b3de8d085a","first_seen":"2026-01-10T08:10:07.109215Z","last_seen":"2026-01-10T08:10:07.109215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":534,"receive":535,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V0LG39JYV5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.142.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-V0LG39JYV5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nexpires: Sat, 10 Jan 2026 08:09:39 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143945\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434771,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"6598eb564d37481082d4500bae56c8f9","sha1":"c3bc1dfe2ab082946f411ccf4d36f9d4cca7458d","sha256":"8bb831a0bf42bfe3fe59f62780803684b5841370c04abfad4f4c57c4db4bbe46","sha512":"be16479469c26bcb863f04ea09a8415c9663b110b586fede5e49087ce4adf8bbe4448d4fb47bb44eff192f81c603f6ba5838123a78ba8f6d811851d19586fc2a","ssdeep":"6144:N4rVfsMxo6qWroAizhQkc1/po7YA+TkIzvovBQVnFRA:mBrqLAi1C7TkI0t","tlshash":"d79419ce73d670269396e078503f018ba57b29a2b45dc896f1c9cce02d74a9a4277f7c","first_seen":"2026-01-10T08:10:07.110249Z","last_seen":"2026-01-10T08:10:07.110249Z","times_seen":1,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":194,"dns":0,"connect":21,"send":0,"wait":39,"receive":60,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/bicolink-ads.gif","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /bicolink-ads.gif HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 12 Nov 2025 10:52:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66617\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cvhd5H%2BDHPHBVKZmY38M%2Fk7e%2B3kglwXB9QI7RG2tT2ebXakUxFjYb%2FEwJ1mo6D%2F3%2BgjUD4%2FdzQ8jWoAaOtQIL440gG5PSI%2Fr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847ee523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":66617,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 100","md5":"da20a42ea79780b0af81c6e950122a6c","sha1":"d0f04d80e4746c30815df1eb062ecd6acd170f73","sha256":"b8c7e40520c67590fe9c6c274bc787a68e1749a16a58e094b0ae7b41197cf0cf","sha512":"810033ea6407fda9f4787944f56a15ceca075f428b5e23a2b09b700e46b21174be1bb4bb139c3f74fcf6e5b78df968a6ac555e893bbd5abc45f3c89db0459cfa","ssdeep":"1536:IEDZLTt5yWPMqdwLWI1OBzB5wtH7K9ZAbpBdEOBzB52:NDZLTeWPMqd+WIEdsb913d2","tlshash":"9c53d01f671208a9e6e242fbef236cab423b5232046415db234ed753f94da0d5fd3619","first_seen":"2025-11-13T04:26:18.787399Z","last_seen":"2026-02-05T23:52:35.208269Z","times_seen":8,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_6953fcbcef0965.76861143.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_6953fcbcef0965.76861143.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 30 Dec 2025 16:24:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 201456\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVpejpYkOFL7FUFSv28ElgpgTsy%2BuVfXVvAPHvdox%2Flkb0awW8GhKWfK3a%2FUOiGbRoh6tUYQSiThBtwnFO4nTtwSRKi47j8Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847eed23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"0dd9d72ca61c97514840c6843452c03a","sha1":"15620bbf9e5172192a1413a72f5a06e6ac603fb0","sha256":"628dc483aa214fd798bf775a2fc6f1553140eb6b42200fa616f5cea7f95ee7f8","sha512":"98446ffc5534e1463f02f5c8a14eda0de9544d38e440963883d4a80e9e4f46615ac06f5bf5cf6107cbddfd89438b466c892f9f89078721b8277acabf4ef1bc2d","ssdeep":"3072:icJd2H6W8gn5iy0rR+7Y7UtL0dJ4mMpcSl1xCdA0/Cwlkn8CU8oK3TeX434pFqdc:iNEyW7VHEFEyEBCU5KaICgCt","tlshash":"691422d96e3679adcf201ef01fd89a5d02a00ffa22c56dd53351a64e3ac9d08c9186f3","first_seen":"2026-01-10T08:10:07.112319Z","last_seen":"2026-01-10T08:10:07.112319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":397,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/thumb_677ebbb14bd457.18331010.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/thumb_677ebbb14bd457.18331010.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Jan 2025 07:22:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 274102\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lbw7%2F%2FefmmJOep%2FYUeb6HkPquZbSkiPDPdmL8aAQY1PquyJUdJEnlKVTtIehPX4xuIZ7%2B9BRlC38%2FH%2BJOF8dw8pKYhv%2BYR8z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1848ef023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":274102,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 706x1086, components 3","md5":"19bbfce8c7e38df090eef79a68e44835","sha1":"2a14a8a2604293e0660cbc668a1661e4addd0cea","sha256":"fe96a27d4013a8708952a789de906b93abe552806e3d5a81ca0a556b34bb29db","sha512":"f8e984b2a1887d9a129e7ee827aec740986366047f2faa398b5860f32ad5104cf4c513bbaac275ca2fba4f5538be6ad13b734021793cee3b22fd2339e336fba2","ssdeep":"6144:fPpGRzf6F1PdR/cGK2kEGmnB9hQ6H4VKvayJ2fN:nwh4dR/dKIGmDhKVKiyJG","tlshash":"28442352ffae31aadf3b628e46e1649c50a87c9409ca2370df0424533fae45575e298f","first_seen":"2026-01-10T08:10:07.113328Z","last_seen":"2026-01-10T08:10:07.113328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":514,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_693c53e70791b5.97114893.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_693c53e70791b5.97114893.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 12:25:11 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 12 Dec 2025 17:41:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73560\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=1,i=?0\r\ncf-polished: ok\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ehd4FreR3LmN1LTYXf1W8CiTniYv8l4sh%2FYrUj6TUS1o1BN4UN0nzksSnUHeK5NMkFi46WE8C4PJLwX3mttLQ17G9diQ3NK8\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:85\r\nvary: accept, accept-encoding\r\ncf-int-polish-no-vary: 2026-01-07T12:25:12.370116293+00:00\r\nage: 243866\r\ncf-cache-status: HIT\r\ncf-ray: 9bbab1848ef623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":73560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"15f5c23015ae60710bc29ad91dedc038","sha1":"e1fbcf0141e45bc8163cb95941a4fe3ff3ed66b1","sha256":"2107ab6a46a90bb29ff907f56f29d3dda0d6c1a474b941bc0ad4947c395ae193","sha512":"61ccc18a38274996657bb351380b84d803ecbda9fcfc8d71180ac98d3f12afa1cee036cbcd31ea1032438e8b5dd0753b726297a74760dcf9466a5f174ca2b5de","ssdeep":"1536:+7YkIHY6lBOoi58/W4a7IyCqTc50p5oKSdpUH4DdnQa:+ckW3oo3/Weyl40p5xSdp+gdnQa","tlshash":"1c73021675269c00bb60cb73c1f9fe3097d66663e0d6326624958fb4e9d24bddb40e41","first_seen":"2026-01-10T08:10:07.114334Z","last_seen":"2026-01-10T08:10:07.114334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/favicon.png","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:40.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3; _ga_V0LG39JYV5=GS2.1.s1768032579$o1$g0$t1768032579$j60$l0$h0; _ga=GA1.1.1486452970.1768032580\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jan 2025 19:22:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1471\r\ndate: Sat, 10 Jan 2026 08:09:40 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psC5%2F5FnDzgW4nRoe%2B1AnjA8OU0VVsaEkFjfnLeoLNMmOpb6CyAEvgjLF%2FQ5nMO2x%2FqUhHugC2pt0T%2FKLi2xv9EGi1qt3K5Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab18d9fb923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d8e4539c65b67e9289a2e617633b3b4c","sha1":"2558e12b45ec2c7348166b10d0327a1057cb1bab","sha256":"0529a5cd8c570edf54a47a2d3d2253791f78c34eda31ff8dac7625ac4b69e66f","sha512":"f27e46d05818dc5767b157475f489ee57c1630a38e5d4849252a0fec9bf12d99734283ed5d69d71f4a3f5f66342db1073390f8e67e6c5304dbe105715c380da3","ssdeep":"","tlshash":"06311c559d119ccee5c1eebc3f0f7c8c0de1b624a151edd21451071a509974a374b702","first_seen":"2025-11-13T04:26:18.808992Z","last_seen":"2026-01-10T08:10:07.12283Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/thumb_67966406467ec7.05699129.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/thumb_67966406467ec7.05699129.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 11:29:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Jan 2025 04:34:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56180\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-polished: ok\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sSj8PkPBYvfX6zodPOsl1KKHhq1sxSU%2Fjb9KccBeb1K5ZAQoqxIGQU1TuexS0cjErhb5qlBqUcwJlTtMS%2F96wtJmKbKBR2D\"}]}\r\ncf-bgj: imgq:85,h2pri\r\nage: 247223\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9bbab1847eef23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56180,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x1280, components 3","md5":"19e61d0ef00784bcac1a419b3b2e3444","sha1":"65f321003e8fb9d0a262715799cb56a62c445b37","sha256":"cabe430ca1e0223d36e7c3e5b72f695daada8fc5fa14ad3abbaeeca808980ac0","sha512":"7956c59372106a10b95c76a61bfc99f0287d8d02b943d2684a97b270ad4f3efe7bfe013f754d3c1bb8f44ac088fb1ba804cb4944b4c6a77637a16db9381801df","ssdeep":"1536:RY5JNmht5kgnAK7MsmT3V6eK4WXbdOIoV9AF:RY5HgnL7MsmTlIJ/F","tlshash":"7743016c47122466e72b5af83c4c6cfa7bd16d6d82616ceb64e350c278fa0fc6c458c4","first_seen":"2025-12-29T08:25:37.884747Z","last_seen":"2026-01-10T08:10:07.123869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/cdn-cgi/rum?","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:40.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1063\r\nOrigin: https://hepini.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3; _ga_V0LG39JYV5=GS2.1.s1768032579$o1$g0$t1768032579$j60$l0$h0; _ga=GA1.1.1486452970.1768032580\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1063,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1285,\"startTime\":1768032578304,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"7d22d894-8be7-480a-bb6f-52bbfd10c7a4\",\"location\":\"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1225,\"domContentLoadedEventStart\":1313,\"domContentLoadedEventEnd\":1321,\"domComplete\":2548,\"loadEventStart\":2548,\"loadEventEnd\":2548,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":25,\"domainLookupStart\":27,\"domainLookupEnd\":85,\"connectStart\":85,\"connectEnd\":103,\"secureConnectionStart\":89,\"requestStart\":104,\"responseStart\":654,\"responseEnd\":655,\"transferSize\":6439,\"encodedBodySize\":5531,\"decodedBodySize\":20685,\"name\":\"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":2548},\"siteToken\":\"e2527943290f4468a0ca904708c6d92c\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://hepini.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kxn54gHHp%2Fx4dvqtvygiAiTEtDRJMy52VGMEqDrVDtY37QNXZNLddxW%2FyjkuF8BYFt6r2mHO5V1NnYtaADmAZxakD1G%2BOI2V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 10 Jan 2026 08:09:40 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9bbab18e8fc823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T02:23:19.368905Z","times_seen":13918819,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.13.1\r\nx-jsd-version-type: version\r\netag: W/\"184e4-ptHboTbR5gcHjbMAMHDqs0tR7FA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nage: 28981\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13832\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99556,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1f041c852155e417017372c978871d14","sha1":"a6d1dba136d1e607078db3003070eab34b51ec50","sha256":"004322721c8557331759bc6ddaacbb689b0f0715d688aec82bd056d2d5b5cc3b","sha512":"bd61eca743ee4f1c1130bb464e76d2ecf0cdb48ef21669a216adb886372aa6ea7f28aee2c7159d5f04667ab1bd82eee979a491215c6915c7c1495ac6cd6705e3","ssdeep":"768:vqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMZ:mOocm4FJwZ5ijINRDlIiw","tlshash":"6aa3efba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2025-05-11T00:31:32.601303Z","last_seen":"2026-04-18T22:15:25.18027Z","times_seen":1271,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":55,"dns":1,"connect":23,"send":0,"wait":27,"receive":2,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_694949ae043a00.33712176.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_694949ae043a00.33712176.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 22 Dec 2025 13:37:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 316542\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YR%2BJ2ywVPbWYkHZ0HGtQag3lekDAp1FcLh9ixf4H2hKxnQqIrc1bZZyjXVMTASlYODK5BR%2B4nNCNJ%2BVOzQTVdJ%2FEbHfEiPmv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847ee923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":316542,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"58c887041ae5f8c0466eba58141a8f9f","sha1":"7f0b6a5293e1cbba029e23aab719d4ffc60a62bb","sha256":"5615d62f9f55c0b351fe116f5730ccdea78a6725416783b263951ac1f6a2fa38","sha512":"90fbf195e83d2af9694108b377d7c12b3c3c455cf82d468711e6e408f3e33912c4df20dc87ac42821874fbed32969da64a0d9b6fd8dbc23e8723eb57c862e256","ssdeep":"6144:f6xX77XLHmuXZk5PxOJVbgu/pUbcPh/mbzarJZtLOcFx0Vyw9+x:ix79X+lxkH+bzarLtCcx0N+x","tlshash":"4864233619f068734b49465e22f4db6749c1513c282478418b5d2b8affef34e29eb25f","first_seen":"2026-01-10T08:10:07.126418Z","last_seen":"2026-01-10T08:10:07.126418Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":529,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_695e731ca1a522.60655251.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_695e731ca1a522.60655251.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 07 Jan 2026 14:52:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 130016\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMXSn%2F4GpcaJooMXhPnd2Zb4U2x94HNK%2B4qPfSnYx60lb2tCRyhESrlLwT15LxDF20%2Fpv37gwc63V%2Fv%2F3TIRiwxsqRVxRo4G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1848ef523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130016,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"10bc9ea25241fc2d672677aab53dd7a8","sha1":"0c7d4bcbc380a10dce1722519464aeb7c2e5955b","sha256":"d078d074bbafdbe7a343ed3701bbe2b3f112ec652cdec7651acdddc54c9db5a6","sha512":"d3cd33a540861d7c55402fcd12912e292655c6b2bb88f2016c4beacba696a21dfa5325fe2298a45c7e87835da84304ddef9eea9e881dee6a636cb2ae62ae790f","ssdeep":"3072:vcXeGaldKgkmVeTWTmlrOEUiK7yLVtJRnBI9uW/mfBU:vccKVTWcrOhknB6zmZU","tlshash":"23d312f7b2710d36898512d6ec38e07324f9934cbe65e51f24654e2feea1a13c1076ba","first_seen":"2026-01-08T07:39:36.081865Z","last_seen":"2026-01-10T08:10:07.127466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1037,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":707,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"13a25-1yL6mYLaiqSN+IJRuxiX8Twds7k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nage: 1537620\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-19T02:10:43.148607Z","times_seen":14408,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":14,"dns":11,"connect":16,"send":0,"wait":21,"receive":8,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T08:09:38.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /cimolla-t0bbrt-c4nt1k-b4ng3t HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 08:09:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.33\r\nset-cookie: PHPSESSID=ka8u0t62idbagptnsschr71th3; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=5,cfOrigin;dur=540\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6XxCtA0kyGgglbKh2EGNdeqHcHTnZmaqD1sRg7ewPkKl5Jyq0bcHQVggB3hFbdBRSdG7bnf9dHkkmfafibpZFngueGSbE29\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bbab17f1e3e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":20685,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Generic INItialization configuration [Direct]","md5":"8e8b527bfc305680224c288c1d39d023","sha1":"0188526a4f9da4b88490bbe576f83b6ae1ac736b","sha256":"bfeb7d673c1a2cc9fac210d8429c9f3e45b17a059bdbbd35b81387352de54648","sha512":"0ca537b616846307b25f6663563be24f7b3e0dca209388a5a7844f498cc097914e8ece4a068f550de9e28c8a77fe97c80d85f8f314a79b5d65c39d7a20517797","ssdeep":"384:Q4SNsEOVWms3rK2AodG6Zzhpq+9UlG7waz:Q4SNsEOVWms3rK2xspX4nz","tlshash":"b492742544c214278173d2d49f719b49fe968247cb8b669536ec2bc78fb3c90d863b8e","first_seen":"2026-01-10T08:10:07.135047Z","last_seen":"2026-01-10T08:10:07.135047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":77,"dns":58,"connect":1,"send":0,"wait":550,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/hepini.io-logo.png","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /hepini.io-logo.png HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 12 Nov 2025 10:39:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6238\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIM8O3%2BFQjot5Or7NiZEa8kr2iKoxRkemC%2BBbyxkCww1ZX9h0P5A2d7b5KrmvaKhpLcRU6lNRkCDAm6Crf4SqYgHk5ECBOwU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847ee223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 50, 8-bit colormap, non-interlaced","md5":"54bed7c9969a75c19ac01b462839301e","sha1":"2a59f80ef3fdaa06a85c16f671d16eccb7c118df","sha256":"aba298f6e24d4fe2359b590c798211b3941fb5911c0c162333a118b2ea4739f5","sha512":"e8c7e764831d44b272ac19144956f9a7a76951999c6dd013bb01d03277093abc5296dfbf6a1d31ccebc6023c06db82f23206b560dcd685448f87db6dc1d8fb09","ssdeep":"192:3MulDXIWI2DKS3KlsmuKUnWXasSZGNNmO:3VXIWh3KIWXPN5","tlshash":"e4d16db4947501b793ebaa85a8fe7c98c9530dc4a9007359dce2fd930fb198686d2293","first_seen":"2025-11-13T04:26:18.78546Z","last_seen":"2026-02-12T07:35:44.624675Z","times_seen":8,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/ads/bicolink-ads-ref.gif","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /ads/bicolink-ads-ref.gif HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 13 Nov 2025 09:13:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1710371\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfGTlUCUGzvBU7xdE0F1PvD9%2Bbj30IR5JU4XXljYpBue4YjE9Gv9wrKvz3%2Fljib9ocQlbjOSZ35ufWmZHmZAyaGyCrwVC9ng\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847ee623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1710371,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 250","md5":"3d74bcd12271f0ff1638cfe681e7c854","sha1":"8327507cbab54a3c8d50dee8f7943ed9615354b5","sha256":"1e4cef0d42066b428904f0a32a98fff3ef94f01530ebc170d44529a31a29a407","sha512":"7b516a1fe06348992ad6247cc6a6be1893340adf0e0309771c9751a9924dfed1ab1dd8e7766932559d2cbd6c64b02c5284d8438e5c7f96b1711c019eb45e15e8","ssdeep":"24576:Lq/19o9inDUbEYmU4siaHCEY6ZppEX/usGNZC4d:+Xo9i8E/USaBpPsGK4d","tlshash":"b225236340a662c1d6287ef92eeff15118fa69a8b5f2f4205c4157c0f7f4c5e22e15ac","first_seen":"2025-12-19T08:35:58.715847Z","last_seen":"2026-02-05T23:52:35.201643Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_679661b769b8f2.14327017.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_679661b769b8f2.14327017.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Jan 2026 11:29:15 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 27 Jan 2025 04:24:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43044\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIEc%2F%2F9dYQ6TtJq9GA1A38ooPn5SDu9cq8RFnnwz6ef5YSY45%2FmaqXbu%2F9ybQJIC3uQGKgipZSFEmfCvU%2Flv1YztW9ITm%2BOp\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok\r\ncf-bgj: imgq:85,h2pri\r\nvary: accept, accept-encoding\r\ncf-int-polish-no-vary: 2026-01-07T11:29:16.279352311+00:00\r\nage: 247223\r\ncf-cache-status: HIT\r\ncf-ray: 9bbab1847ee823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":43044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3518f99fdcf27087bda936fc33e92570","sha1":"2a3f335a5d5c5f2ad4ac6cdedcc200a806b63a1a","sha256":"43cf3c98bd805743863bfe4da26bde7c4a7d688d6f231f9af4e38dec3c10dd45","sha512":"565a080a8b7322b26144742983f3760a5cd831f57ccd1e4081617237a911e9e5965a7966e9f5c9960b3ce213e5fc6baf785ca6a0fafa88e81338a58b79c99a3d","ssdeep":"768:s/5kl4CmmUJvj/C93MEvhHfVsF42lWY//vFtom0QYV:shkuhmor/+PhHfVwPvvv3Q","tlshash":"d213f142c49d0e0f8e82e9ea6a406e14543bd11f603b72dd1949c9c19f61e198b9efbb","first_seen":"2026-01-10T08:10:07.138758Z","last_seen":"2026-01-10T08:10:07.138758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_690454ba0f1191.26650740.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_690454ba0f1191.26650740.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 31 Oct 2025 06:18:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66729\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tc4YMwg3HZfwGoaab82Ta%2BSl9%2FIKLiNQx189kot33Ohg7i%2Fp4Ll2d%2BXLZbqOOTKFT2TWNZe%2FGvOl%2BZPz9KAXA6%2F4iDNC0csV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847eeb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66729,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x1280, components 3","md5":"18bb4f5b96c9115d6b708bde65d9c534","sha1":"191ebe4b837437636b70899d8169323e8c400e28","sha256":"f3fa54cba494c538ebc9bbeeed704bad60c5dcf37ed9105f7b2d87b1a6b9905c","sha512":"82c29a6b23864ea9604693ead3fd7d36342f9e6400cd977853fcf221b928920574890b0fe365b62a17ef0aa8b5a3ae105c29b6a9eb4aa3f588f78f5357a8fe41","ssdeep":"1536:HDcRuxvgsIWuN53/hDr7sKgUHWNcXTGAP+aR:jcRyTIWuN53/h37rdr2+","tlshash":"ab6302edb384e3fbe0a7217959c64773e3613e3a85482ccec698974099061f9cf51c4a","first_seen":"2026-01-10T08:10:07.140065Z","last_seen":"2026-01-10T08:10:07.140065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":866,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_6858fe37377977.82949173.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_6858fe37377977.82949173.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 17 Jan 2026 08:09:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 23 Jun 2025 18:11:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43898\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDQTH7%2FbPugdsgxEXTqBXNUcyoQxSw0XZ96aQWaYBpeI095mHwZkUATn4PdrADv9QoyMkMXiebmq8KPHaJqDtcdX8TnqX3dv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9bbab1847eec23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":43898,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x1280, components 3","md5":"95a019810ef4c6b3c44e770ad4d89ba8","sha1":"b967279c1fdb209d3a113f8c4ad997098ac5e816","sha256":"caf2739bf1dc1bbb38e80217d058c5548b8c8a806b4c2b83967f59ad133fd474","sha512":"81203534da340381279da88d2c3eb057e9f6a2594d73e1425bac4bcbdc9e3d9bf4e2e5db8e3788b4100e992e0de0aafecd8d948a7093b1687058b0e2aaabbd3a","ssdeep":"768:a4xSRyeaVQyvc2awqwKgt68noOxlHtWioJJgVviIZyLwm/yTTvs1kx/dFKHC/:aAQyvc2a9/gtm0gJgvoL9yPsSx/eH0","tlshash":"d213019e2b591503cdb45678cafb3675f845bd21b1bc53820132a1b09befa804d9fad8","first_seen":"2026-01-10T08:10:07.141312Z","last_seen":"2026-01-10T08:10:07.141312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hepini.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9bbab184dc3256c6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-19T02:25:35.584565Z","times_seen":332929,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":14,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_69574d07183f21.92643798.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t","date":"2026-01-10T08:09:39.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_69574d07183f21.92643798.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/cimolla-t0bbrt-c4nt1k-b4ng3t\r\nCookie: PHPSESSID=ka8u0t62idbagptnsschr71th3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 18:54:14 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 02 Jan 2026 04:43:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45966\r\ndate: Sat, 10 Jan 2026 08:09:39 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:85,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\ncf-polished: ok\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFfpO3dES8iWehTDcjDy2Iixo3I5dD5DtSAcm9q8HG5nCmJWoXubRJCsWoo2rj%2Fh%2F9cGQ7S%2B%2BtC1eeqcSTwg3YKwQ13%2FZHOr\"}]}\r\nvary: accept, accept-encoding\r\nage: 393323\r\ncf-cache-status: HIT\r\ncf-ray: 9bbab1848efa23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04009efa54ec7b88c46839d2368d0582","sha1":"9e15b9437ca0719d987d099bfbba5d5696fcce47","sha256":"6d6debd8a63837dd9425333b565483234c62c24ee36f6509d2b3231950013d07","sha512":"3842a83af9b265fd4c678d2ff059f98ca75f879f53fbdbdcb57c9379c3a99ab0006745e9fef93b5e4beba2dbc25c258b490fe8c642408fddced05d26a3dc1023","ssdeep":"768:nlkc3GRuMAD68EU8TA4wS6zYJRKnDERK6bvGw0L3wPm9w:nlFGE/3EUxXDX6bv50rwPcw","tlshash":"0223f29f0790a9e08b7604bd5f2cb1c239cf8a8e9f58f90d692618fc473161a963ed10","first_seen":"2026-01-10T08:10:07.143301Z","last_seen":"2026-01-10T08:10:07.143301Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}