{"report_id":"76ed6547-271e-40c1-bd72-2b6fd80f156e","version":6,"status":"done","tags":[],"date":"2026-01-04T15:09:21Z","url":{"schema":"http","addr":"sunperp.foo","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"172.67.174.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sunperp.foo/","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"title":"Decentralized Perpetual Futures Exchange | SunPerp","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sunperp.foo","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"172.67.174.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T15:09:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"sunperp.foo","ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":51,"request_count":51,"received_data":9163863,"sent_data":23137,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sunperp.foo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:32:46.555821Z","times_seen":368182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sunperp.foo/sun_logo.1a0502cb.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /sun_logo.1a0502cb.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5920\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nbxquopxj7RTFtUOMda5Fioopht4WJ1fjZnelOEzojcX2XI%2FJN9pDhDYrczH0dp3bySt32cDJM9ayjZJQ33YwSc3mWNPAW1HVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba7799868b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13802,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b302d7c74e23439cc9f5c12c8d6fd75","sha1":"54a3a5ce0631d7b05c73cdbe1bc52ce4fcb60ace","sha256":"9ad8767f59803a16a731b872d433dfa1531480e8714e6abc73cab4e1f895d1bb","sha512":"5900c21dad906ed8b2d5af9b3ad5058469ffebc36480763299bd32f96e46408cb777773ab2c9d1dbfcd384e8fd65b3e82809521ccf92d0d6e40a661e3a7093d8","ssdeep":"192:8S5xvWfOFm4scJoSHng9Q/OzlpLz+4mz5RAfY4pKkGDQAgCMKYa0qNkD9uyzwx1/:8SFmQ/qtumfXbhaLlNkD9uuwx14JIV33","tlshash":"7052c6d463f9a2b4f404f7f886769435bb1728f62e12c9b883e22d54ee5105c4ca4de7","first_seen":"2026-01-04T15:09:29.582741Z","last_seen":"2026-03-29T18:02:37.199408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/1b2850a46061262d17e08440d4c582943414ca09.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /1b2850a46061262d17e08440d4c582943414ca09.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 7311\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0b1UtEeaEa3Y19FzYD%2BS2MhHu4CLnIRTZXDgeZXR7bmG%2FqfqCg4cXWL2OR3Fms0P9cmQT8lLmTO6hMayJ5mQqCeX%2FQHOMX%2Br9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c885b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 390 x 98, 8-bit/color RGBA, non-interlaced","md5":"e13455752a17d8ec7fdfebe07297986e","sha1":"1b2850a46061262d17e08440d4c582943414ca09","sha256":"df6f64f7494b5ddc84d68d5cacd7f575155b512753773f9647219063b7f5fe7a","sha512":"25033b4755f0e392ed01b3b9e0c062afbfb01bb089aa84adabd726088478ddef2ff2864578eff813a00cc34b3e3c4fc901e5c6e3a66238d9447da25758898031","ssdeep":"192:F6k0O4W5YdvVCV2mGTVC/WFGWBv+t9OMsYska5zuTPSfzSztGwFHA:FP4WidvAV2mGTVweBi9OxYsT2PSf2zLG","tlshash":"27e18d9362b191eec0ef5a72ec1d3ee259295e3e8c9100625889c45478d2b9345b3f9c","first_seen":"2026-01-04T15:09:29.586655Z","last_seen":"2026-01-04T15:09:29.586655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/33972e1923500c4b02a5b4430abf1ec8196065e0.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /33972e1923500c4b02a5b4430abf1ec8196065e0.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2393\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2%2F8%2FnHjniEJXl7CV7TOnaFRDtcux6XDekEP3tpVa9PdQMWUA4YIalD9h2sGgGBP%2FZ0ChQspm1d01Os16G0CDpeuHVvx5GzX%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c888b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"acb3b1289edab94ddba64beeb8aef410","sha1":"33972e1923500c4b02a5b4430abf1ec8196065e0","sha256":"00f6549a65d2cc96db4178c907d2332b6d4014d02c6a4953c9a7d22d4d20cb93","sha512":"9f51142ca644f682da6dc73c133d76f5b82d45e2dab2e5d00e9316816e64aa050e430ebe4a678702e59e72d0cc11d8dad1fe99f54687d4101bd7d3f941104693","ssdeep":"","tlshash":"60413b86e6543ca5d8e8d7e7908c83da99f64fc06c35ff973086f726d632459022839a","first_seen":"2026-01-04T15:09:29.588755Z","last_seen":"2026-01-04T15:09:29.588755Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/regular.woff2","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /regular.woff2 HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/v4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39592\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BEndgDbo%2B8TgYYmZsueSkiR9ZFPEAdDglNB4TAHJ53dMcfLUTZc9weCZzRf7eYNVmmi9AbuYK7N5zNkkLj%2BLm%2Bs9ypANRJ9Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba77d2902b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39592,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39592, version 2.26214","md5":"06756c14aa07bcf59d628909bcf01ecb","sha1":"6d67eef3f6328ca1119255fb68f6ea74a150eb2f","sha256":"843ad3840a8c536338597da26059134e3611d9ea30bdab7b704de2377a2fd7e1","sha512":"aeac940775a7b09b742debd821adfa29a16af9f31dd263ed2deb7dbf322bd1dc449d0eba86703bdda5a9f8cf55705ca37ee8c7918eb79bcca67c731334eeb945","ssdeep":"768:gMXsafuKgl/a96weZyO4fEkOxd7Rx5duQixBaQejItiGP08xiAGvD:Pswgc96w7jEkuDtiOQ2LQRMD","tlshash":"cc03e11b1de16cf3461c35fbd84b0d3af9b0d93550e29265f5870bf6a424b3622e7091","first_seen":"2025-07-12T09:49:26.22927Z","last_seen":"2026-05-26T04:40:40.308556Z","times_seen":19,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/a4de47f69f72aaf4a3f347130d701c456648faa1.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /a4de47f69f72aaf4a3f347130d701c456648faa1.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2312\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UK%2BJHqY%2ByOWqoYhJHot1kI%2F1t8qTJVw86zfhPQIMnQKpzaADHiuIPwfroIZ%2BZv5KcfU1AxlW7w9eG%2BpXtFRKHOj3e5V4hAKXjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c882b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"52a1eee829cf73feec8c39e15aa6a274","sha1":"a4de47f69f72aaf4a3f347130d701c456648faa1","sha256":"a14e3b798c40d081975b2ac6a858fdf554df62e0a5b9b796e940690a9f0f14ab","sha512":"dec6246df24a9b4457c7581000aaae3acfd0180bef9a756b7c0bd59791956906374d308f16ad19a82694ae0e27164a06073454533c9e033e86e33322fae07746","ssdeep":"","tlshash":"17412bce18998823f49bd1f6cfae0942510cafd5aa31dd5f9e1b7aac683d80ed504d0d","first_seen":"2026-01-04T15:09:29.592214Z","last_seen":"2026-01-04T15:09:29.592214Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/trade.ba2c0e7d.css","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /trade.ba2c0e7d.css HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 2963\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yALOd%2FVHlhwR%2FmVRmldWn9oybDK0ogzDab7FhfDaPOow%2FTQe3XY0ki6ya4P8PXg2hsvH%2BuVVLC6G8DePa05OE%2FXg5sruWf2LmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b8ba7799867b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19457,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19457), with no line terminators","md5":"00f90ba423e7586def320875040515d8","sha1":"76c6dacf72e3552cb1ff66f0e0cf87b94084909b","sha256":"e8bfb8809d7e159e1dc05291862697a831a303d94e4bf10824ec16a6dab63a5a","sha512":"1b55679d5f1d072505bf44ddc85f28847b3081a3dfef3f5d56b27d85b7de6289dbbf392a858464811e4129773b7ca632f586d924f08fefba2ec60579d17c38c8","ssdeep":"384:Bzpi8X8R8TKceyzOfe9hna64NWESCCASzY:Bzpi8X8R8TKcdzOfezaNa0","tlshash":"26924c3061193ffcb2a6c382b84c78996819be42f4771fa4e700ea7954d99f36e6570c","first_seen":"2026-01-04T15:09:29.593746Z","last_seen":"2026-01-04T15:09:29.593746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/4de7d481b8ce320ef5ca41183e0c58c1ce14027e.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /4de7d481b8ce320ef5ca41183e0c58c1ce14027e.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 555\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WccUL8EjaEKmAuBzPYXZZxMfzFbFvDtuHHcy0cHHflXGvbIBfN4EB08%2BuU%2BduDR4v0CDtfHKCdxT%2FqNpI1AONHzAx3lMIsa6Pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779a86eb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":555,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 61, 8-bit colormap, non-interlaced","md5":"ae7494c4f5934ecb0c9df497f4c4d363","sha1":"4de7d481b8ce320ef5ca41183e0c58c1ce14027e","sha256":"c1be1bfbe407e5503c34525a18c8b49a350b35cdf4f24738bdf67d6567d0d495","sha512":"c80b2ef49bf220a4cfb019d353c99882e50a399ead07f8f0281070686d3bea2412b0af45d74712050d3c3ed8934294ccb522e303903514059220aa07fc65febc","ssdeep":"","tlshash":"6cf00e8e76625a399727d0206e76e88232b6ee28a258cc226449b1766a71044d2a9c53","first_seen":"2026-01-04T15:09:29.595128Z","last_seen":"2026-01-04T15:09:29.595128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/b7dc89e3ac8ad7376e755d5edb4229d0b0a841fa.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /b7dc89e3ac8ad7376e755d5edb4229d0b0a841fa.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 289\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejA8rB%2FjuNdrGdfADKsfKpvEruILf%2FgDJzvFXmoQgXawceqXhG0C0bTayqqnIsvjyekVHMV%2BCIQ0VSnwslwg1v6VaR00G59Pxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779d8a6b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced","md5":"a2c27dacd8215a9eabda03ec42f47101","sha1":"b7dc89e3ac8ad7376e755d5edb4229d0b0a841fa","sha256":"5aae792b09f9e20376a2d6aea7c99a99931251c6e3732e82edd1905685bf8c5b","sha512":"e62017191aeba298ee48a3adb5b400f0068a0546fe6afe14b1623742cfae49dbea551b9ee73f6061da22102f2ac13fa03dbdd70ce722b4f341a796078634a54d","ssdeep":"","tlshash":"1ed0ebc33108bcb9cb4603b705c6111222af807d0a90390cbd2ce52d20a9ac2b296385","first_seen":"2026-01-04T15:09:29.59663Z","last_seen":"2026-01-04T15:09:29.59663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/07a3888a2c317aacb99f2a0aefcf08dd6305ab5b.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /07a3888a2c317aacb99f2a0aefcf08dd6305ab5b.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 340\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZYSEMCkkRQbQ3jK0FJWnZOJvzAn9UG2qtOIe4hzoCcV04Q3obQ9eBaRJvuTdweSiHx3mhkd8U2Jsr%2B%2Fg2BjB%2F8AE2QAzVLGBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779e8b8b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3aaba9bf9cfb5f8362da9060364db1c","sha1":"07a3888a2c317aacb99f2a0aefcf08dd6305ab5b","sha256":"4d6f3c96fedb95c5ac20490efc9cfe0556c8e6be4a4953c4aad03a7ee9e8b16b","sha512":"48c80eda73a6330fba48cacba34cd60db6cf8f8ed8b6f7b1add5c7d2603035942524b5a9a60b55f60e8052c8fd6aa981d9b836dfdea2150355c2a97b9b09280b","ssdeep":"","tlshash":"ba0199bae2f962c0112687940007707138a770fa3604e528fb29067af6054ceadcd980","first_seen":"2026-01-04T15:09:29.598037Z","last_seen":"2026-01-04T15:09:29.598037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/921d5bad8e0ea5ce9c583319b6309f5d46f4900a.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /921d5bad8e0ea5ce9c583319b6309f5d46f4900a.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 818\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sozpo%2FdBH6QQhxPvSjm7bm9qoaw2p6xQCz6QgcZ8AjlUpsCVfXeH8kxmBKZo%2B8sGBCrtP9RUeYpc701hL348cs7PVrYJrvTTyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779f8bbb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1741,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5188632dd7ab91e053bb73beb5feaea","sha1":"921d5bad8e0ea5ce9c583319b6309f5d46f4900a","sha256":"6c983d83e9a7534c501c2682e3f2a057e159dfe1a3de95e1ec8891a9f43639aa","sha512":"c9c9a6e45894f48c44116f5cc7ab593917d855c20ed7f2761b7cb27bd32563b84dc6d48e0506a8b283f7f728ef5708fb208da8db362b9fbc50ef063aa81558ca","ssdeep":"","tlshash":"1631216ed3da72e0f407ebe44316d071354a39f62e6dce9907b01b90b91200fd18a8c1","first_seen":"2026-01-04T15:09:29.599244Z","last_seen":"2026-01-04T15:09:29.599244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/5996eed96f68ca65ebae4bd96576d60a23f2606c.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /5996eed96f68ca65ebae4bd96576d60a23f2606c.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1249\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2BirETi7ipBpjR2FspL2sofGKNTes%2FPqsX%2FxyG4%2B6L68PqOAl4g%2FUigXqdqgwtyLUmU9QxsCk8OP8c3HccJZan5AV9LE8CA1ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779f8bdb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3116,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c59b57a1b4ba9885254cb2b8bf85c0ab","sha1":"5996eed96f68ca65ebae4bd96576d60a23f2606c","sha256":"ae1b6d16549ebe352cd6e7c5ee819304195e731bd1740e24eec93951b4cb3a74","sha512":"d9b9b487bc0a08ebce47c4802f20448271fd5a295318ac28ebf7274658e317dbf5544e52ef07ba796f9554404f111e91c24e65912d4067bc7914cef670d9b3c8","ssdeep":"","tlshash":"225121ebc3c8b7d2d90ae7f1a465a4b6317f34bfb665c30543a96e92da1602c459cc40","first_seen":"2026-01-04T15:09:29.600293Z","last_seen":"2026-01-04T15:09:29.600293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/cooperative_partner_bg.e16ec22d.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /cooperative_partner_bg.e16ec22d.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/styles.a0ac1910.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 50418\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2BD2ZjWcMltfSVdS6Sp1l0SuNNvVEi%2FzRj0JmJNBrazaURdk99im6FBtfhBSWeLiDAk6pTeANQRyQk%2BRiSiACj8Q8vU77bSLHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba77dc908b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":50418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1306 x 700, 8-bit colormap, non-interlaced","md5":"94595ff7874b9ba972001af46399bd7e","sha1":"07a59f002a7f0d8310e9a399406217daa078ac32","sha256":"9e9bb7ef477c836a63306dde61a52e9d630d3b436b5cdf6dc734fc0fa99a5f16","sha512":"4780a9d1cfa8581b82d517ed3e27706a2cf09c90073b4a4c18f2fbf583de55151cc141604482b29d715387ee42b90e1af4fe52e0be2a726aeb4633402d21bf80","ssdeep":"1536:uPX8t4AAXEy+Vzw8PJmzdGmOnZQYJVcZUN1:ntNGk+EjcuN1","tlshash":"623301a5044a185efa2181b1c3b896d0df4787f2abf25a263045d2373a7778917b35cf","first_seen":"2026-01-04T15:09:29.601252Z","last_seen":"2026-03-29T18:02:37.184341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/4957c5680e33399dbf8eb1de962f9b6c43a8873d.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /4957c5680e33399dbf8eb1de962f9b6c43a8873d.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 5084\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIPCtGepWMtS29UbmY3EK2INekLjClCWh6QlFUrvgDYOSTWdWiLw9tT1Dcdq7qJcVpqAOBk%2Fxd2VJphFwD4OT0poS8K8sgMK2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779b876b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5084,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 131, 8-bit/color RGBA, non-interlaced","md5":"a0fdea6c3c1afbb8b10cc4ad54549eb3","sha1":"4957c5680e33399dbf8eb1de962f9b6c43a8873d","sha256":"4eb3540480775c2a2f628f54f9f3be51a3ca425d0855ba06bfda5f0d30723d4e","sha512":"6c096fd6b91f3fd82ed1e54b8d1192a1c29b4fda699f7606026c2bf8671c3c7f4ce8ab88f0daba79c9b17830f3411353cfb5929ff02f158dfea31d1179eb549c","ssdeep":"96:y1If910gYg00ccjL3MPpHA2r0Dd0lRsIklMhHkCSLgzE:oInKgHcxP9Fr66lRsIk+htwg4","tlshash":"29a18d825748892de1ba9b781c750fa7022b58eac0317cbc171a1c679c4dcd39db79e5","first_seen":"2026-01-04T15:09:29.602309Z","last_seen":"2026-01-04T15:09:29.602309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/v4.css","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /v4.css HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 1293\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxwDUgvqVX6mtRdQjJocw8uajT%2BfLX6lhdv6j6Cm4akAcHvDe6y%2Ftn08bQL%2BaEJz9V8YmkR8u6%2BGzv2khzC8AURotzABItgDHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b8ba7799864b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11095,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"41a51fd8736fb08db4b5fe99e08235fd","sha1":"1b604ad390136eea4fb57bb46dcf9f9d4cd1efbf","sha256":"d60b13645ffd4699805b83f1d63381bea63c11a2eb4396c6a11ce4ce08f38999","sha512":"372c0a9ff3c6cb5ed12c6dcab86a3a45e58128c018c4b6fc5bd4ed9b9577d5fa0b57920b517ae95b1d24f6d23ac7742caaa93cfc23d1341f4b61bd0b7c41f6a5","ssdeep":"192:FmDLZ/PseDI6IrImPNxjp8k06y/r2O3lZOkD34KGrf1xGlYESlE1m:fpcmPNxjGtSvV","tlshash":"6d32d064e2a1d6f2797f263f73cfe90c3a79a8028d18db46be9511510c883ffa1d2915","first_seen":"2026-01-04T15:09:29.603416Z","last_seen":"2026-01-04T15:09:29.603416Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/styles.a0ac1910.css","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /styles.a0ac1910.css HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 89167\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zx%2BrmYF32%2BE5kUxBG1BwyI8vgmg%2FDUenGkB2RZxq7Z1hmeWvEpEXwYD4G7AtikhjtIeV7WE0AV6rRmN31RwX%2BTlbFi4Y0VD0fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b8ba7799865b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":721271,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d1f9e9061a216e5b4e522dab2978bd67","sha1":"f97bc680d69460a2988812db412d3b92e7afb2c8","sha256":"9456fda6834a6f50d6451f6459cf131dfba911b22d6c9d99844407089a1290e4","sha512":"2c496c8393c1ac61407a1940b1d26b980d0b5c4621d216a4eccd8f334334d2f9e97bd7590e68f9c3da8ff0b2ea5c388cb88dcb840f5e4625240fd3036d7cb029","ssdeep":"12288:BY4Y8RUN3VZvSCurD/o02uJcqTeFl6Kemh9LdfT:8ZvS8OPTeFl6Key9LdfT","tlshash":"d3e4c730fa1a163e756bc936f0d4aa997425d911d9671bfef204a039c1cb5f31ba2b0c","first_seen":"2026-01-04T15:09:29.60486Z","last_seen":"2026-01-04T15:09:29.60486Z","times_seen":1,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/web-en-us.254b952d.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /web-en-us.254b952d.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 120721\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NZlLhO9RjFtXMJbcC3a4YM3YvE05ZR4W76RmwtPKZ0UNGiXOCoVVM0jI48h7DHLZ73LX%2Fe2J5nzJNTl33%2FZ0FpGxe0S4WWw%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779a86ab4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":120721,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2400 x 360, 8-bit colormap, non-interlaced","md5":"6bff0ada774b9df6b57692b507ac3f63","sha1":"0589c639ba1ba9188d6728fd72f734fd2744fcf8","sha256":"8d3021390a207bc59db45f32d0135134f1113dddbbf371ddf9116371d0a748c2","sha512":"a80465c05ab12362225b31aec55e82b7d72aa7a0185e5010cae40adb006bd2e753831485a345e786661888d169d4bf8a9d113bab44761fd8b081a2aa920f17d7","ssdeep":"3072:YRSQSVp5Cc7mfNxjXSO1AWVM9/n8gbO3Hm7kgqd5w:xQShjqf3XSkAWVM9v8Z2Y7m","tlshash":"8ec3120327f80edc2fe867d6d262416ab3e80d8d5e5ac6584c5acd80bf12bb851b1e75","first_seen":"2026-01-04T15:09:29.606238Z","last_seen":"2026-01-04T15:09:29.606238Z","times_seen":1,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/9ed1fa185d25f431094f9303f118632bdd96ef17.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /9ed1fa185d25f431094f9303f118632bdd96ef17.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 363\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQa4iUpIdktX22jQVA9dVay6mgqs1gCuUGlS%2B0%2BcrAFLURsoG2aPMJi8aGkZif%2BChEGUgaUtn1WtAaiu0TPXXFnTD%2FjZFNuUWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779a86cb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 61, 8-bit gray+alpha, non-interlaced","md5":"afb93ff4821de6ef29063437aa3f7b12","sha1":"9ed1fa185d25f431094f9303f118632bdd96ef17","sha256":"2dd9abae2e0fccad4c6e00e0fe2ad22c3086ca720197a866a90a2810a42d15ad","sha512":"2d4bf2eeffa36bff0a08242217dc0ec313c75d0f0d3a1dbbd6443588bd53da52e66dda0f87e5aa9328db917914f91c99ec37ed12600898ebb28026a4c8646cd7","ssdeep":"","tlshash":"d3e0c0e9a720d811dbd172e4553a638abb331b9c781130c60296da9339074e8b4446c5","first_seen":"2026-01-04T15:09:29.607706Z","last_seen":"2026-01-04T15:09:29.607706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/sun.png.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /sun.png.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4331\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rc0mOxxaU84wmIS9GdIqrcsTE24NUUpYFJAGzARytXrbsSO3pWy50HCaiQah%2BaGHLAbfVfGie6AVooBWDy%2BbZJ7mjjEXI3poQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779a871b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31250b88dabfa233ff4db6e75c4a07a9","sha1":"47dda5e67abde38e7c4d116fab0e32ecccdd1fd0","sha256":"bd409c921d7aad85d0e4e42c253c905f4dfd4721996790efbb7c8cb53a248c38","sha512":"2325102cf4b545c1c54258b0a9338cf3fa4c20ae4be96aa01f24a50774ef345fc866581ed64795d69c5e0c903f88d8e5aa5528f9f951dc0ca01698670d658056","ssdeep":"192:2hGi4vvJnx0eoy3gobgTC+2Gy2DN98bylNMXSJ6OqF5gCezlruefEQpn3lvRzMxJ:2h14vvJnFAiUduSJVc2Ce9uefTt3l9MP","tlshash":"7f12b699b3a562f8f004b7b85212ac7539672cf2be23c46dc3d66d2ae06540d4daccd7","first_seen":"2026-01-04T15:09:29.608902Z","last_seen":"2026-01-04T15:09:29.608902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/dc0e6114c91f12e95b5bf95e8d6ec9415e3a6fae.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /dc0e6114c91f12e95b5bf95e8d6ec9415e3a6fae.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 3183\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=An1vbvjNI5YkzbPHkQTw7hiJhyMmpksX0p41BRIg%2Bjdea1PycCtypQVWQxhI2xmKq5P5nzUSZ9hLd6%2F6HDrv5p5pSqWc2iT6CA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c886b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"13dfa6f7e9c6c20a98c1ff89270a57f8","sha1":"dc0e6114c91f12e95b5bf95e8d6ec9415e3a6fae","sha256":"07c16108d77c3b0fe87dd3317bb02ef433fc63f49c18add78b4e8ef76e8632d3","sha512":"c76433a1efc772da305b3584586c41eebf1b46fcb67c241a5ca3ea88c5b59fddbe07c6d690239656788f05373c3c028c0dcb255d69365cd7947a3644c218cc75","ssdeep":"","tlshash":"41614bca47d3f231dbf8927071cd26a036850f075764665684abb07b52b3356653da0e","first_seen":"2026-01-04T15:09:29.610025Z","last_seen":"2026-01-04T15:09:29.610025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/eth.png.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /eth.png.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 229\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FsKsH3HxF6h7J%2BV1ugK3QsRlCTWW0YL%2B7resusVLcsdVfo4vDjzro7WiwaMZ9wO45gCXcl%2FrfrIVdZ3T8hfjpFhecEgu1X4eA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779a870b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8a57c2396575a058eb68a6c0e32caef","sha1":"6495d31828866f3dbabc4aad7c77e02ff457cfb8","sha256":"b05bb6169930a076c463a15280a165560bd30972e2599f71ca62f44c023d666c","sha512":"7bf60d4e2903aa9f5be3e9268a3379da63feb8a312534d17c48686419a4fb52993c0c75b3686ca004145502266f58d9fa39cf59f19b7ab9dee6b503b877c3f58","ssdeep":"","tlshash":"f1f0a498354a14204804c77b1adead3a625329ecb7a6c0c5bfd91b0b79c48eb3cb55cd","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.035689Z","times_seen":494,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/e1b41ab0c29af99744e4ce6e2fe503df15375652.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /e1b41ab0c29af99744e4ce6e2fe503df15375652.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2718\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qIFkSdOMdeeXOnzp6mOkmqiFRRzpNsjmFYp0zVzdlLR%2BedYzHsG%2ByJQYJRjwxZI5OA1KvjU4OXFkF4Yr5n3xznXAauyGnqQeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c880b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"2895f7cd22756ac96b0878489c4fa616","sha1":"e1b41ab0c29af99744e4ce6e2fe503df15375652","sha256":"5aa1a7b33d8eb7c0c1b549d1fe2bf4ef66f057b97c82f3f9fe617e6d830d9bc4","sha512":"e3def6e1500ede677a3d2b6687cb7d6a9c1ab3f408eb5c4e4b573c53a89dfdbca00c8beada33d8f4da390f000cdff162a27fd608e2a5220089a0679ad28e9736","ssdeep":"","tlshash":"32513cc3274cfc964162223d160416a9d8775d787b12afefb31df801647d4a4c9f926a","first_seen":"2026-01-04T15:09:29.611756Z","last_seen":"2026-01-04T15:09:29.611756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 04 Jan 2026 15:56:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NidI7JjbNEEnT8%2B%2Bk24nO125MEHtUPrGpfNgbAzw1LBYzM%2BMf%2BE1jF2jaheyeAJUs0EHd8Y0L%2F8o4ZNMeiRhmNaaEomtlFjpWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncf-ray: 9b8ba779f8bfb4f1-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:32:46.555821Z","times_seen":368182,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/bnb.png.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /bnb.png.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 423\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4o4NAcmE54eedkdAHi%2FRXJa1NADaT202TOMjV81s2qj86Z3ASJWDSZocUormFNi0AwXVGSkeFnh0Y3KdyXER17heWdmtiFhMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779b873b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bed74791845ecaea0b78be9b10c690f6","sha1":"ca96e3d4056d851ed301eeb4a2adf8e0103b8c4a","sha256":"7a938ed34bf0bbd6dba92c49cc3911052777ac55306abee47300bc36b0e6aedc","sha512":"cefe77f1b27c043db212b67fd228a6a208b5e63f079ccfedec269fae9bfe964c9be8b423737c3e16d0f112237808a623d101f4bc9e6f5b039e13747251db50f0","ssdeep":"","tlshash":"20110ea4730cd2511e0cd35a7b29dcb97652b4e6d782910015c6250aafa4aff1c70fcb","first_seen":"2024-01-11T12:12:53Z","last_seen":"2026-06-01T14:38:08.594515Z","times_seen":247,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/b6163458868e4e3bacefaba2ee70da9fd07a353e.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /b6163458868e4e3bacefaba2ee70da9fd07a353e.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 5580\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTenUn0dvH%2F9h0O8jBav%2FApDNRVqN%2BthZRVVQi0oFIdcCsI2xTUhbZky%2B4%2BxpOIY%2FAzEHLYu5WqfhjGT206yyCChalmjDh6%2F1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779b87eb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit/color RGBA, non-interlaced","md5":"2e9c02152b1a22b67d7c21bdd9465934","sha1":"b6163458868e4e3bacefaba2ee70da9fd07a353e","sha256":"e655953f2836f0363494a9c9edd7d545b7e7271253c85371234059a4a424dc02","sha512":"95dc30eff5eae431df1aaddc4b6b89ac534cb04f511a258748a1d4fb1663c74ab8b12391cf029656b407b0f5983ee44dc81330944ee6863e5251fb9436987f10","ssdeep":"96:Th1TX5inMIUzuLCeYA2Q64alZEneLSQ3vxIKQ6pivEA2riKEL4tzMP0v0:TrX5inMIIuLpzn6XzEneLpvxIvEA2ril","tlshash":"7fb18ee47775e2d9e8601ffc868340108d7041b9ac6e7b94be8461d50c0d52f8b9d967","first_seen":"2026-01-04T15:09:29.614579Z","last_seen":"2026-01-04T15:09:29.614579Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/8fd5f346df6d07679a5795a94d7cfa2f3ed39c28.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /8fd5f346df6d07679a5795a94d7cfa2f3ed39c28.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2398\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMBlyljgq3AxPQPULzwzJ73TiiW6EioufmdAJy%2B%2B9RbNFWM%2BYSnTUZ6Ea%2FAzQhD%2FPHyK%2BdeV7BpePnPjIBpmm3fbsprqK%2FFK%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c88ab4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"8b24f9fcf7a2713aad9854056549ba37","sha1":"8fd5f346df6d07679a5795a94d7cfa2f3ed39c28","sha256":"f93228f41dec3496995324c24f8591027d4ce615e78d1846f7cfb8b1da6cf0d1","sha512":"24426dfd6671eb105ffda57c24433d2d5d9b0024b1bf9ce0ea0c2e3afddb1b91a10ae532daa57f74e9a44df9356f1df54e2e674cd6067690a9d01451bc172454","ssdeep":"","tlshash":"6c411a68f8b6e923bcc0c3e89c8e18388cd7bf22844164a6c194f1586c3707d4e4209f","first_seen":"2026-01-04T15:09:29.615798Z","last_seen":"2026-01-04T15:09:29.615798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/9e6a63da22da317b9e39101c3c61f59f3f76dd4b.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /9e6a63da22da317b9e39101c3c61f59f3f76dd4b.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 7409\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP8f%2Fgf2ZzL%2Fvxb%2BHPvzuKK4jDxzCwgpJ5pebTtZuftyfztnQ5oNuF1KtObCjH%2BLFD0FGOe5TtgjS9q6%2BJ2GMHduMNLgMrLNOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779d88db4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 131, 8-bit/color RGBA, non-interlaced","md5":"c0e908fadf51f4de40adc05dcd9fd267","sha1":"9e6a63da22da317b9e39101c3c61f59f3f76dd4b","sha256":"6c12136c486888e9b147b130d40c6e37f347644d6a2ae7e2bf1d6fbcdd12168b","sha512":"8b33603f9d7378e3a0c86dd033630d03c10441fb8d3a6a07c846871381d9a6a05ef61f12db51c81f6d8191b6403be55f3faf15a777d96945123102a1bef0e06d","ssdeep":"192:9lHbpxtxElmr2OQn68QUu8C80b7T/0qB7P:3zbElaOJFC8+7T/0i","tlshash":"f8e19ecb0c9f7070f5eeb5f96f4067c82797718d149066545961f2cd8e236068e1ce0b","first_seen":"2026-01-04T15:09:29.616857Z","last_seen":"2026-01-04T15:09:29.616857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/bold.woff2","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /bold.woff2 HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/v4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42492\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5yoX2DKTlBkVD4NmAr7vigx36uTqP8Vv%2FMNG9a%2FTdl8%2FkWBeNRLcDlVqGCcdAJH4ckmycB1xMQXWiWHu9qNowg9fp9hqT14lQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba77d2903b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":42492,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42492, version 2.26214","md5":"cb02bcd51f1b58e2bcea38c5b50d0728","sha1":"2860ca60810c482ec983c155eaeb5a6500775b94","sha256":"f03300f0ae858c3b3278bef778442272abe18b3ca8b57fa9d9c490df6be73ff4","sha512":"6b6f5cc5407a8d06fc13076ac3b49379b35317e5e33db984b3e9d4f569a57e1bc65763defa37f116313392a18ac3f92ee441d266c81c6199b6ff1efff2a323ad","ssdeep":"768:qWEty97kklE2GUx6dSezant9REHCIatHbYALmrLiSZGFw6FuKTQZix5:2ty97HM0DIybMLR6FNMZiD","tlshash":"2e13f131e9f93c1b51876652b002f9645bb708270351a3acd03fb79f0359bb7296b62e","first_seen":"2025-07-18T17:55:38.012323Z","last_seen":"2026-05-26T04:40:40.358513Z","times_seen":13,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/iconfont.e4bb62ac.woff2","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /iconfont.e4bb62ac.woff2 HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/styles.a0ac1910.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5472\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:58 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXgpwYnuQC5tSs1NirEKUQiYtFOEk6DPd7y0Ym9xS9tW%2FTB59C8Nds1sEmer%2BPPD0dZQKuZYFNVk0%2FKfr9nC5zJQmEhRSgQRng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba77dd90ab4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5472, version 1.0","md5":"1ff2f88a3520270ce105b4cff2e7081e","sha1":"0f4a6c2d71a09dcd074b48041e2db5277953fa7b","sha256":"ed8213188571271eea055881888de429eafbff90baf97eaba172c26617310aae","sha512":"ec3e149fcf1020b113406f88968a1de084b9be18614a750f932057da346cde67a028af18a99a227e56d685226b808efc78e7f125146dc0b7d28153496f2aba5a","ssdeep":"96:Z9apJKIKnbnRXIiuk752NSKtvaYSuTgbO8oNuHnSJDS3v1b7gQ5sK:Z9apgvbnFDD75cSKghbH+uHShS/13gQF","tlshash":"74b1aeeef806d9fcc08652a528459f54b16cbf2296e0efcf73c9c94a04f9a43609c558","first_seen":"2026-01-04T15:09:29.619522Z","last_seen":"2026-03-04T13:22:08.453852Z","times_seen":9,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/aa6b5c1a34430b5711715ce8003cce76deb1943c.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /aa6b5c1a34430b5711715ce8003cce76deb1943c.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qy4JFuHBY8Q0tmQxl9lc2N1lmyMV%2FC0BCGdT7ZOOLtPcYBB5a9laZBGj4vzU93P1IFnO2gzNUhK5RycJlZYGQCDOYCH3jo5wWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779a86db4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 61, 8-bit colormap, non-interlaced","md5":"6204164dcc66320598571d0926330c9d","sha1":"aa6b5c1a34430b5711715ce8003cce76deb1943c","sha256":"bb405f4120ffa84a715ae26627f8bd9d050b2f3ff9ec290bbd93cba7cb87bb83","sha512":"5376a27c07dc5ecde810a05f93d498b974222cff01dede531d384a09ea7f82aeade809e30510159fb09d3206f62afe1a1c3a070a71cf96df61e3f0e90a3e3a73","ssdeep":"","tlshash":"5201624632026996cbfa4030c820d0f00e693cb51c4c5b06cdb0389e52b99bc84f2752","first_seen":"2026-01-04T15:09:29.620611Z","last_seen":"2026-01-04T15:09:29.620611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/btc.png.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /btc.png.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 922\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHZch9ffp6vvnuwDT5KOKvr3hxr43M30gn%2FCcPULGGWpxdYdlgx3EygGQvwn%2BzKY1op%2BHP1GwE1atVtKz%2Fp6IeeEWqxJhKFUfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779a86fb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03c74454bc971a3437d588396a5e610e","sha1":"1a359cf1c14e757eaee1c5c807cf6c7732646b15","sha256":"733d0c0a99a79f263e8b548b8b1988ccfe80e156d36120371495955b4e51e382","sha512":"dede5e3cd5e0f080f4662e4e2df58482d19df970a2cc3f505eda82fb180a736a4c82523fe35b7a613293f572197e44c3bf963bcbaa32174c00d80b0b1e08bb2a","ssdeep":"","tlshash":"24419620d7bec18cf00196fcda29c87479971cc53e28d089d6e9485ab66405d1d72cff","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-02T07:26:04.034886Z","times_seen":471,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/trx.png.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /trx.png.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 376\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jq%2BSpgiJ16YaouEQj2XY2LcIXaRyRvWZiPkkgVYknJDGWMOFpWAqbKKVSnu2mgKAZAruV%2BT%2FlVEv6cqBxkV1s0I6szSylL1hxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779b875b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa5e0ed0ccca4786eab1919b25315d77","sha1":"af9f30c1aaa3f538a3d4098f97383eab24de8fff","sha256":"e8b3e58a9f8dfc0781d9aced44cfcab05c80b3e283d7e9d71cf7bbabe75e9081","sha512":"12d2f9c2aca6f36a04b86cfd31732336d78207664de83972a69402f3a014a72f38d764813bd96cea5e4acb8ec022926b142bbe7064553b567cc79fa4c9cb9579","ssdeep":"","tlshash":"2801d38a305cf1759904ab7c411e34b053b0b1dcb64bc008b7f01d6a254cf5f5ae0768","first_seen":"2026-01-04T15:09:29.622222Z","last_seen":"2026-01-04T15:09:29.622222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/2e49bf2d8db21777a3a5aefc0f13dcc4a083ce71.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /2e49bf2d8db21777a3a5aefc0f13dcc4a083ce71.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 3154\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z67GuEI5uQZ9FKYmdFjgntDBoP%2FDaP9c4PBb7QYRkHE6MMFrP5jxjlDkhBGj2Tion5121ZOVr0p573PK7OdcMlghrH4ceODCrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779b878b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3154,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit/color RGBA, non-interlaced","md5":"5568008318a098d206e312466e7cc80a","sha1":"2e49bf2d8db21777a3a5aefc0f13dcc4a083ce71","sha256":"7bc48617efa7aaca6a95aa2fc9b1e82c5eb58ac267c03848b58a1ccece1640f2","sha512":"c191aba77e8aabe89be72655012636f7e6f2070ebefead3d61e6561f3315fdf39c6f1bcec18a50e536435185e226d792fd0bdc1e49438b1816686fe7c2a21b0e","ssdeep":"","tlshash":"07515cc35b015e78e66328f4105f84d84476fda7af8f2389ac02954e0c68e41616e9ef","first_seen":"2026-01-04T15:09:29.623248Z","last_seen":"2026-01-04T15:09:29.623248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/08bf8fcfcdfcd18a99bf84d8c1fd9feaa7f381bc.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /08bf8fcfcdfcd18a99bf84d8c1fd9feaa7f381bc.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 5021\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Ft9EBwnAlfLG3hNz8JYw5apiZ7NjDG5YDHr8aKsYnnK4VCyVgtSUQWxahbWGkgpqCVvzqPRL0db5x5t7Xp%2FxthiliT8vuxWf0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779b87ab4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit/color RGBA, non-interlaced","md5":"ada269efdc9bd9438ceec6dcfed26460","sha1":"08bf8fcfcdfcd18a99bf84d8c1fd9feaa7f381bc","sha256":"4f3c78a9b4b6a5bdf77525825ac06c1a04a6a20c523c7b2556d89f83e926a31d","sha512":"03aa3b2743c94df5a0e79a74fa2f8189cde7e80c18eb7df2fbf9a14e66eb36b352cbe18db5b4f3f451b4f56585d8b0dabb325cd3f463b77513e90ef1ffdc4d56","ssdeep":"96:TrtwNxitH76iwFHWFNW47ZI2YFMqDrm4H/JQNWYFosesx+Nk:TmHRi13W4tEFTDrmssosJ+Nk","tlshash":"faa15fd05b059027ffd65fb15fa9347033b443558aa61df865da62e0626ca48054f41e","first_seen":"2026-01-04T15:09:29.624284Z","last_seen":"2026-01-04T15:09:29.624284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/27cd38f17874cd7590069884cb747da1357435a5.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /27cd38f17874cd7590069884cb747da1357435a5.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2773\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QW1Lzzp7ZYbF0fSaG9IOkArkLEdrVezi8RbmBdjbIqPe1XMF%2FgUgO7GK2YgOSMxDfJ3C63Lf6fDarc7nr4gikuyVeYE4t4lvRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c881b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"da643418c2a0780a6412809e86eac151","sha1":"27cd38f17874cd7590069884cb747da1357435a5","sha256":"10f495dcc57ee0329673011cc980d549e3dde49ee8095e3181565f05b8c6e485","sha512":"09ab7fb969b9e20cda7b76c116f1d4dad1185d7199d9537dfba5ad321dc3bc91c2d812603a3ec285b6049f490b44ca5d145d129bc4f0ed9bc93e2abf39981dc0","ssdeep":"","tlshash":"24516cceaa24551cf52691f940b188760a785ee3fcb8e92444833b334f78669a6cad05","first_seen":"2026-01-04T15:09:29.625481Z","last_seen":"2026-01-04T15:09:29.625481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/89bdb45401c30ba61021d3d47cf46490db65803a.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /89bdb45401c30ba61021d3d47cf46490db65803a.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 3878\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haWne9bPyDdeMlm7QWd%2FjW0dbLtJnI4Eg0pR0gjbw3XWeltd4X%2Fkfmo3L%2BJpvaiBOnRUnpcrXbSiwguCrBxy%2B1rXaiCF4lMnRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779d88eb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 131, 8-bit/color RGBA, non-interlaced","md5":"efc1fcb2ce15530901f8993c79b0c8a0","sha1":"89bdb45401c30ba61021d3d47cf46490db65803a","sha256":"b0bdd65572d5f99200c32c21cd510545f40d41b0bb5daa15c3c291b6e5350b18","sha512":"9e701f00825f5f85f06824040058f9d9e317e5fe9d10cd139367417844118dc405447164a56afdd4ad6561c7a21ddee8b0952073ea3ddf73832ea309dd92d6a8","ssdeep":"","tlshash":"9d818d0959c90835f02ff7ba2e6cdfa83e179f9e0de8df40006b849878822858a1d343","first_seen":"2026-01-04T15:09:29.626558Z","last_seen":"2026-01-04T15:09:29.626558Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/f3793fbe96ca6f3e7a805d6eb811dc5bbb1e25e6.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /f3793fbe96ca6f3e7a805d6eb811dc5bbb1e25e6.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 233\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A9Xtz%2B7dB5I%2FYVR458%2BtdeGVYTZ4yf%2B%2BImx8224GGOVTjyJO1FtodUs6uN7Q7TbR0ATm6rztIvWAYJDvMC9JYd2q7CrIjuR8Yw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779e8b9b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":363,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d3f53b5ad84cc279ca9d7dadfcdca91","sha1":"f3793fbe96ca6f3e7a805d6eb811dc5bbb1e25e6","sha256":"278b99ce18da2317e8232996877f16aaa1dc7e0eb795fc2ec6401022465f50b0","sha512":"2ed9540c8d916b34f5f73c4fe9632f6f4540a607cf9a14b90ce059b62f773ae9da27cf1455e577a9cec4f4e4dd6242fb673cf6c040e175254d4eaab299f77683","ssdeep":"","tlshash":"08e02874ebcde186850ccb308352186301f734f3addcc0a58650593e72112cd58b4fe8","first_seen":"2026-01-04T15:09:29.627641Z","last_seen":"2026-01-04T15:09:29.627641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/arc.png.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /arc.png.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 14608\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tw4T1AGd%2BJE4EXaNU4LCEmiTwLTwjG4X%2B1SOxUi67pXOysFwrUHvLYUkgZFNoKQ1OdXz2Ge2MYDmqBPXvMYUdnbkT9iIEIzYWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779b874b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22780,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48f7d2738c4ad0cb09bcd8dd0d4b6645","sha1":"8c698ea609b43b45a43be46fc1fa16b6669642fe","sha256":"dae5487bc247eab7ebd431560212bd8216d3a78b86a132bfbb37286eefc5e76b","sha512":"bcc3ae570fd54581e12db59d9fbb931d7181223f0ea69f31ae879fb69c493ff845bad9c57b9f775325b4ee4a5ecae9857ce5dc8d4d12b6c37d7fa0fb6ede1e90","ssdeep":"384:1+reQQQQQoKTDALiqO6pQfaYpdPJx5pQxe5vlATcLluiuitkuGFtQPGTfD+gEEEO:1AeQQQQQoKTDALZfpQykFSe5KTcLxuiu","tlshash":"f5a2bf708e2fa118862ead3ae29e0977dbe0d127639f074d63909559683544e0c99e3f","first_seen":"2026-01-04T15:09:29.628702Z","last_seen":"2026-01-04T15:09:29.628702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/29571ef7e37263b8c1df163531780651252e9130.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /29571ef7e37263b8c1df163531780651252e9130.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2274\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2FEhG18uhFv%2BUU81o9JyjxxsCOmAgCyIxf9VtonSsJaJL6%2F0pQkZdbZ4EKcmbiCYbGSxGCB4Dev5ltaGTOCvN6s7aRlcNLFObA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779b877b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"8166ee29eb94440c8992154d4459c203","sha1":"29571ef7e37263b8c1df163531780651252e9130","sha256":"0bc0bf3bce94d2858f65456e65c27fe229ef822f4bf15b271958267a9a81f519","sha512":"b7b15c3141bd161d8b20c37e9bb9fb514e895c25f015e4083809710c444f3897e9509996c31dcb347ebf5cbcbe0de59980946061c7427ce26149ff90d57ddd0b","ssdeep":"","tlshash":"bc414b0b33b4f55cf58899022a1be62130a24c854b45008cf810baf1937225b8c2163c","first_seen":"2026-01-04T15:09:29.630797Z","last_seen":"2026-01-04T15:09:29.630797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/96de7ad4100b2489d825666ee7b60b010753eacd.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /96de7ad4100b2489d825666ee7b60b010753eacd.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 5271\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTWZH3QRYuKtQT2Q4iwd8AaKKJqJLS4JOOugzWIZLrRM9pUBE0sRt57vDmKET8Y8a6IatifPQp3JZI399WsX4eHRHq5lIiyXwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779b879b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit/color RGBA, non-interlaced","md5":"8b73c3750a52ebca561e0bf68f664847","sha1":"96de7ad4100b2489d825666ee7b60b010753eacd","sha256":"5239277f6a0f5cfdec4cf7bd09a40ff3856d75b615ffd954e234ad806d2c00d5","sha512":"a9f7f526bcce2d949e6f1689d0a9e84123fce2ec33e668f96546972df20b5c8cc4c4bfb1e2860dfc9249ed4e9ac6a6ba198e42c577f26a264164b64371f87ef1","ssdeep":"96:TzV7GBvR1M8tduV/eY5wCrg/90H8oTdUqWfE77KCjsQYbd8NYcFD228I8:TsVrEN5Yl0HldbWfg7KssQxZB8V","tlshash":"a9b16d69a1c1324fd300bff89fdf155638638946e26832209e85e056ca2c0c1e7d3fa5","first_seen":"2026-01-04T15:09:29.632188Z","last_seen":"2026-01-04T15:09:29.632188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/33475438db7ad8b3b3052cc632ee412cc0cd5790.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /33475438db7ad8b3b3052cc632ee412cc0cd5790.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 5177\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66gY3IoCdi8nz3WyH6eCwA7TboflN%2FPq1B%2BaDamvnDXxo8jQn2AUeIY%2BAPH7xMUUqQKQWUYphIWJs41djoE1ZYeXV9K9XWn6Tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c87fb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"019ccc74cd927ca24b085bb5a1329ee7","sha1":"33475438db7ad8b3b3052cc632ee412cc0cd5790","sha256":"81924145bafc997fe057897ee60e93dfad7c7061fd62f88f3e138931680f31bb","sha512":"7438620acd953d1a08770c9ddcfc0979839a6a85b51d2e5e1ca30ec1a5e972c78ea3ed7bc65bed8b026f5bc7ee5033e5ff18eaa503056ce825a3b5e7f5644dee","ssdeep":"96:+N/lBAkeBx3hOlXxUWUkEU7ESCGdzP0OVjiOq4Nz7M/W8k9/:WlreBxxOlhUzkvwOdgwjx0/W1p","tlshash":"c6b18e2f33a0f52e4782d63896c964e56f552dbb8c67d190d09bb22855327c1c705f74","first_seen":"2026-01-04T15:09:29.633372Z","last_seen":"2026-01-04T15:09:29.633372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:08:56.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:56 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 19 Dec 2025 19:47:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJGG%2BXL2OeL3GDlIZgcJNZKjw1wz0FZTNYH%2B9rXLDc01ne3u0F5FfLdHkvGsabNLgiyJzOkVvpoZ6UrJG%2FPDz9Zp7iO43HLR9J%2BD\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b8ba7768a5375ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":74931,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41310)","md5":"2137a578c9caddf8a942a2df710b7a74","sha1":"126132a050c218a58576982a0df3659e6e05fd40","sha256":"797307d1b388f5bda12d126ecadfecbbdb97e6d90a0634530dda2f8664629d50","sha512":"1857964c4615931b7a7a2c6122a5f92f77c12c8ce4dd5fc633df1d20751223907595fd32414a2c0ca17f13e1cb07b8c22ff15ccde5897f8ecb9d01cd94fb4d6b","ssdeep":"768:bd9yCoqgY+pdkSyE4R5Z9GixxHTh66lexW2aS2rCbYrv2:B9ZYdDyNRPceFuWiO2","tlshash":"cc739770d2106926811307c9f5f2db5e11968349cf1308fda7ec1aa7ebcedd8a94e9c6","first_seen":"2026-01-04T15:09:29.63459Z","last_seen":"2026-01-04T15:09:29.63459Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":55,"dns":27,"connect":1,"send":0,"wait":198,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/components.b3b3c16e.css","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /components.b3b3c16e.css HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 6072\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFS%2BzBiB0lx1twjj3sNiGI5v2Nxv9kCgglL1gtbaN3PfT7PfCW%2BVIyfK5OMc5pDwk7pG%2B98HTQcm7wCU%2FdBdj0LDOa2BicYlgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b8ba7799866b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57040,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57040), with no line terminators","md5":"94b1f17565905f26261f5341556b6dc0","sha1":"a50b4db04c9b6480495414dec63f335060055c41","sha256":"0692807ef15c413a77d7f790e257215ec39c82610054ee4ffb7a4be6ef0e5988","sha512":"582353497bc083b58c27cb74043464d0a129b02182d3486745fe99784a2dc3e5f87b5242e7fefcba30a170a4011d9d7859f6d02218f9776b6d1266f011145dfa","ssdeep":"384:icssG9tslT1eFDUiZXsO6eosiNa+vJvKhlWqKbjcvl:icss2fFDUwQ1N3tKhAe","tlshash":"b6430414de6623b4b52f823bfc9b55493e2cf025c49b2dfcee91b518c2ca49502c7a5b","first_seen":"2026-01-04T15:09:29.63586Z","last_seen":"2026-01-04T15:09:29.63586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/51f3628c110062cbc695980ff817ff429ffc226d.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /51f3628c110062cbc695980ff817ff429ffc226d.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 546\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:53 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tq4CocWdiUBFALZTfjMaDCMhNTiv3Kz82GAboMS01ZcHRUo33mz%2FMLsiW6cewhzyFle6plmUzh7eH6%2FxwJBREaQY7MyXaMjJkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779a86bb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":546,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 61, 8-bit colormap, non-interlaced","md5":"1b9d50ecb8e411a9cccf0a4358382358","sha1":"51f3628c110062cbc695980ff817ff429ffc226d","sha256":"1adf5f1ab058b2e031aa687c4f391076f583bdf2d6e516af182cdfa16e7a0807","sha512":"9b34472080ca786f681adad6c51173b65cdd9605bbeee94c8ee78478b612ec231c291b5a016bed43e7e2cd9e7b74d8afa4ec6e113cae0120d5f846ed6cf10fc7","ssdeep":"","tlshash":"74f054c7715c5acafb7442df9715041368ab9d106c54950e4166fc649b373ce309b3e6","first_seen":"2026-01-04T15:09:29.63701Z","last_seen":"2026-01-04T15:09:29.63701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/053a99aff406279b22a985b7d6364439fc1bac02.svg","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /053a99aff406279b22a985b7d6364439fc1bac02.svg HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 310\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AQnGyWig7hjVBX8NI8mB%2FXxMBY%2BT%2FhUmN0ozy4rpkhwWf5GLlQiBl17oRSF5tsFqgmyUfZb1X9Qd80t0thYzd03v3k4XPLjtkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b8ba779f8bcb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"007249b41c0aed1408db618f31ae85c4","sha1":"053a99aff406279b22a985b7d6364439fc1bac02","sha256":"62d8ca7e48cd958a063cf49399804d713b1775980999c941f7ca49daf1f6a5ad","sha512":"d8c8c19a3da9905f74497c981f1920824916b156d82e8160468a18a9ef4753299fd816231f9a8915e548ccc7c15e9c1af64b821d10f096c218cca1402f533096","ssdeep":"","tlshash":"a4f0c9a932c6e181e18cb7f8110414f8657938f23eb8d1c08e86b420e38150d14610e2","first_seen":"2026-01-04T15:09:29.638152Z","last_seen":"2026-01-04T15:09:29.638152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/bar.98dc66f1.webp","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /bar.98dc66f1.webp HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4497520\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrYWcChYi%2BUO8D%2B%2FcaHj29kxbWEo1AW4DDKXJS3ax6b4q4zc%2BF4B9Iika2MVBTHOruNFJSenILEVMzUdq5V6xjQvME5UFDzrIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779a869b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4497520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ed135c95011b3f4cdc78fffb9eed708","sha1":"673432f8e1177adcadd57f4cc72c73d950ac8801","sha256":"160e05a0346d302bf765befd2916e7c0a7e8a9bccc8e3f63371478bbf9a5df1c","sha512":"0b46bddca04bd9f01dc48d571bc9d3329c355c8a8b689e0ad81d1704a8c559adacbf40dbe26e39661d6f7325259778d0eab755eaa5087ce88f103c497e91796e","ssdeep":"24576:HZLR3MImQpudjGDLj/Spe1jVIJK9DhZ46cmYyJab5FB1F:5LRXmQWG/TJIk9Dhy6cmYy+5FB1F","tlshash":"7c2523d263d21e2ac05aa8e7313453b79377f8355e7a53e6353af22f8e98423d75a400","first_seen":"2025-11-21T05:01:11.730935Z","last_seen":"2026-03-29T18:02:37.176002Z","times_seen":6,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":482,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/c90eca1dc2233c68693c22c6545b3127b87ed00e.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /c90eca1dc2233c68693c22c6545b3127b87ed00e.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 2515\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FuzM75dDhpah2OBUuJv0HCc4468ic6WL5%2BuGtweFpyf%2BKhL%2FGN14S416Xf3qByXaCaFBdgvV6Ggv2srCNeIRgOFE5n6kPaAVUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c889b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"69e6e69d871ba86efe85b42f07c2adc4","sha1":"c90eca1dc2233c68693c22c6545b3127b87ed00e","sha256":"28a75fdc7d63edc57f100a8fc2d4749fe3abb9cb82fe7cbe9a6285290356d90c","sha512":"64aaa51ed8f9db534e21306724952e789133ac1ceb24a02e6b87fdf8b3c3fcdfb73ded539f13d28db947e787cf1d3d79f4feb70c5050a70bf2076b8259107ccd","ssdeep":"","tlshash":"5951f7e9a9b42a3fa41ca7b3d4401328d071ee634a01e9391187f4a5adfa0607b87463","first_seen":"2026-01-04T15:09:29.640833Z","last_seen":"2026-01-04T15:09:29.640833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/2c05240e82bd104b0c2ce04205716146198e0b87.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /2c05240e82bd104b0c2ce04205716146198e0b87.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 3230\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLLnJ5kvP4m%2Bi2K426vuDbdcxA46SpZZD2hCUMNpSgma7CIssiX4qDNGQa0TjXwDfQIGCXTO8X8WVl6E3wyBmf5uip01vNq2jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c88bb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3230,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 130, 8-bit colormap, non-interlaced","md5":"4a1468a5408c670266487ff68f4acc80","sha1":"2c05240e82bd104b0c2ce04205716146198e0b87","sha256":"ae897fe7f1d786fc700030e45dae8def944c6862ff7557f3814e7d7120640ea6","sha512":"ab7b2316f2f5a48c2b7bbd1246c4290996de8f0e9d3fdfd804bb801e8ff9f9b79a89a8982464f521015934786febb217f766a9236616bc539633f429872dc1df","ssdeep":"","tlshash":"ef614ba95bc63d3bcd1063f442f479266d711d85931d20b608d4faa004b15cc4aea07a","first_seen":"2026-01-04T15:09:29.642231Z","last_seen":"2026-01-04T15:09:29.642231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/e9c28ac638bbe2f1fa01e8aa5a96b9bb56eb2585.png","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /e9c28ac638bbe2f1fa01e8aa5a96b9bb56eb2585.png HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 5125\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:57 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=omdoXn9PTk08siWG4AzgmuzZXpBqSgeKobFXxTIS1On26qFqGn0fjO6PJdQ%2FYARNTxDmB9Hsi2RRSqlpWskDjy7jdyeBCOwUtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba779c88cb4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 131, 8-bit/color RGBA, non-interlaced","md5":"73a0962fd3668c07f49a3d1201b632e2","sha1":"e9c28ac638bbe2f1fa01e8aa5a96b9bb56eb2585","sha256":"5f3b20b4745005d253c10b4ca6adf22dcd5f68bf9313762cb6d1cd027b46c2cd","sha512":"73166b0d29d74d309dc40e8953c2f4cab1b5f0280a03f51694a77e6b743d0573b82ad07b7063bb9fd5e5f9c1f62c578c1db5c9471b72ded3c9264012e456c82d","ssdeep":"96:0Nv/H1bHfHiAvYFqmTKHDF3fDDMRxbGpJTrcT0vDtHuO65q6be7ebuUE1:0Nv/J/lvPjh7wxEtrcGUDu7t","tlshash":"c3b18ee0a631201eea8dc63941f702d4bee6d7454aa6640938e4cec54f71f41ba5ced5","first_seen":"2026-01-04T15:09:29.64368Z","last_seen":"2026-01-04T15:09:29.64368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/material-button-3.5.7.min.js","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /material-button-3.5.7.min.js HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:57 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 868262\r\nlast-modified: Fri, 19 Dec 2025 21:04:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdoIMl7j7XYg4H1h8rYkLtEbtEM%2BA4hyLU9YyH71E%2FGuq1u16D%2BCupjUhenmWXBiUVjkaRueCPKAzEzHoNbh%2Bda15QGVX5Ys1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b8ba77a08c0b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3303578,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28a87fc070ed43a8592b9e799fec092f","sha1":"8942a66ca88bca8b5d1a65084318db4a965cd312","sha256":"3cf8f6ecdd512116e5f562f3e80e286513ca8580877098c5f6adaf9cd7cf3117","sha512":"c1f55984bc03cbba44e1344c19c702cf084b4cb280f83341ec19e915778f950a48f904be2f05660ffe50c5a1eae83d8284ccd31c858b7c3d0c4c705c0db52b89","ssdeep":"24576:4ZO8/fApsVFHzUSBM4CvCNC0CRCQlTJy5rC4C2C/CiCw6D15GrthWToUT9FusNFF:4vfb+5j1F4/","tlshash":"8c25b403a2e0386645d35fb27a2750daec2d8bef618c5ab9b44dfc3878e4154d6ec670","first_seen":"2026-01-04T15:09:29.645Z","last_seen":"2026-01-04T15:09:29.645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/medium.woff2","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:57.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /medium.woff2 HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/v4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42148\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:58 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:57 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOaMl2O5aifCWIvE9Hp%2BuYgpRnqKw%2BCuYXFD%2BNrtekk9uv1U4p2TKv2zfor4v0%2FHKsvQRJDyM7S%2FXqWlJWJZVbU%2FncjvgN%2FGWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8ba77dc909b4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":42148,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42148, version 2.26214","md5":"f0516870909d597372b5a331713e017c","sha1":"53d365e82ad16919d3d1afcd8b7d72edf89493dc","sha256":"e15a3f138dd30f9e4baffa52cdac546be5f6ae3f817e6d7b551d593883117d59","sha512":"f50d63cdb56f930186cabc800af07902a2e55b6e6d42290b4257742974fefc72e0ec2571ac69c1ad0c2fae323626b3edc6fc54603e4a1f42deb54bcb85fe857e","ssdeep":"768:Z4Zrt51uWHRn0dndhb9KMVQn6RYOk5uL1h2Q3Pbk+3u8LzmdEQBsDMusIpLOX:yZ51VLMVQnQd7F40muQBVIOX","tlshash":"9e13f2198722a2e0a9171973c4eee3b59150830c1b1eebcb90d677edbc15dadcdc9854","first_seen":"2025-07-18T17:55:38.023828Z","last_seen":"2026-05-26T04:40:40.185537Z","times_seen":14,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sunperp.foo/favicon.ico","fqdn":"sunperp.foo","domain":"sunperp.foo","tld":"foo"},"ip":{"addr":"104.21.88.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sunperp.foo/","date":"2026-01-04T15:08:58.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sunperp.foo","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 07:01:56 GMT","end":"Tue, 24 Mar 2026 07:57:59 GMT"},"fingerprint":{"sha1":"85:3D:45:F0:A2:D2:B7:D9:20:4A:AD:40:E4:48:AD:00:46:A3:CC:27","sha256":"12:51:B5:01:B4:22:77:8B:37:87:B0:14:0E:F4:9A:CC:38:89:E2:DE:92:9F:18:19:78:71:19:05:A7:C9:5F:B5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sunperp.foo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sunperp.foo/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:08:58 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 2916\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:08:58 GMT\r\nlast-modified: Fri, 19 Dec 2025 19:40:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjA3BDuEGCka%2BeMGVSpGmQLt30OSPulQHBGkqoMz6x1GU4jA2V1GDMwSspoco7k0tESrk%2BTsgjA6GHUkLfDSSGLV2hK5nTYj0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9b8ba783294ab4f1-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2918,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"b8c5506f5e68a03effdee2a734a6920f","sha1":"40800f01c6c617c0dea5b9f965ac89ea590f6695","sha256":"7636c5912a4800667824d96ea2a49e82396004f4ced42079f93f8f7c3579d8f6","sha512":"1b96d283e3ebe5efa5d1642716a58dfa854e822642f3bbca58cfef7b247e12d8c221780691513de7a16c715ad193ae122d691d1eb5e327f04e56af8ca037d3f6","ssdeep":"","tlshash":"83511abf2d9a5bf5dddfc465542075d294fc082790227b07522183aa42a32c1dae6fa2","first_seen":"2026-01-04T15:09:29.64704Z","last_seen":"2026-01-04T15:09:29.64704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"sunperp.foo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}