{"report_id":"7cc4c750-c47f-40cf-900c-39039dcb88ef","version":6,"status":"done","tags":[],"date":"2025-12-09T13:25:23Z","url":{"schema":"http","addr":"urlvanish.com","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"172.67.215.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"urlvanish.com/","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"title":"URLVanish | Free Anonymous URL Shortener","dom":{"size":50809,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (587)","md5":"f2aefa0f5d5f64d7f1c949e78afaab9e","sha1":"5c4999ab75d702d9ba34491404ea68f0f32f5198","sha256":"9ae31aa1c86a7085d54a4eac2af4d2f589bf0a4aec6b8a1017b4f1b2697b2e78","sha512":"e559b94a58749e911d68ceafe5c1d906d81c10ff4b4a0e92a49582b9791640bbdca73fca7f12f8c4ab4cda3f2a0fb7a406801c8a70f76c63134cdceca7e3b2da","ssdeep":"768:ehxokQQcEQvVlksHSkrG8vME2nrJMnvOY:enQQcEQHRknrJi","tlshash":"7e33945965f32012145394ba7bb38b16bb648007c50ecd997aec838c8fc3f969da779c","dom_hash":"domhashbde927f6012f1e87af36ba84f8545a96","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"urlvanish.com","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"172.67.215.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-13T13:25:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"urlvanish.com","ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-27","domain_rank":4964821,"first_seen":"2025-06-03T03:24:46.603101Z","last_seen":"2025-12-09T13:02:43.408855Z","alert_count":16,"request_count":8,"received_data":438054,"sent_data":4109,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-07T22:16:37.28363Z","alert_count":0,"request_count":1,"received_data":433070,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-07T22:19:32.033314Z","alert_count":0,"request_count":3,"received_data":444998,"sent_data":1495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"urlvanish.com/","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"493f0f1f058216490d7f137878a4130d","sha1":"b73aabcd14814cc0b0853dc471bce3ab823c1493","sha256":"bf17949f2dcdbe68a8355bd26b662e6699921f87e6e0799fedcd206eb4da7b11","sha512":"623faa76b529015661d9677588bf80b8eef160c86637305d7e30f6871adc1f66e3bdd51f2768fbf90dd9c77738bbd434e212e3a85fa2d759a188d6b70015b47e","ssdeep":"","tlshash":"7ec08c8c210b0c7341e72a010b2fa200b00a322294d0aa203d0e63488f20e1bd794854","size":172,"data":"","first_seen":"2025-09-08T03:01:16.320954Z","last_seen":"2026-03-18T11:34:18.453461Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2175e1a3aa8ab9c364cc7b61fe416cd5","sha1":"1b58aa83ac4a755a638bff6c52b4932a1b3c7b4b","sha256":"57b825394e63f3d6a31f0a72dac87d4303b62851327d44f60ba855673c3b65cb","sha512":"eef25f3e811d8393833cfa2c4806016f8c6cd93d4c2e56a69de24673ff4e592a4410fe5b840d00e76abd5d56684d0bcb7e86aab3e7eb1b21046b4564de0b4d9c","ssdeep":"","tlshash":"c6210d66b062243b405f28d9738f45dd3f38958bea054413799ccf0d0f6399299e29fd","size":1165,"data":"","first_seen":"2025-09-08T03:01:16.322939Z","last_seen":"2026-03-18T11:34:18.454017Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90a3dde28460326403c257949e7ef96d","sha1":"341157ca11cfd6a3ecd08d78b643e698145fba4e","sha256":"3fa71ccf3296c67f65f038d5a40dd8fa878b5221ca7b5eca4339a7785303b3c8","sha512":"5e2f800848bcc12852f3c7c7ac478267787a79e11ee933781803d3d84f6b2f6257608b9dbf6c5beec9d83e867654238d2176513b4c3558dd09975b69fd89b12c","ssdeep":"","tlshash":"4ae0127f319615b40c5b9daebc159ba1781161625c03b8047c4d4612674ef6f6c31f44","size":398,"data":"","first_seen":"2025-11-26T03:02:54.238091Z","last_seen":"2026-03-18T11:34:18.454908Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ffda1aa9cc886cd40428cd1bbd6d344","sha1":"d08105baeb2aee4097abb327f7c04ba63ac9e215","sha256":"a33fb60d2f62a61bca36fbf5ed27430decadb80823142cd45fc11305cc9a9f30","sha512":"d61c962b7d5d3ade6372ba4777b1ca24ddd05e5758ec469d9d37e570fadef6df87ca2db37e92f60b0479ea1a6bd0b6d729ad9b63d0b63edc8ea5f9e24250a25e","ssdeep":"","tlshash":"223173486173206ad633963ea74b52242a303203340acd2d3fdd93881fc723a9e927d8","size":1780,"data":"","first_seen":"2025-11-26T03:02:54.24023Z","last_seen":"2026-03-18T11:34:18.455863Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/assets/pwa-register.js","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e66eb2e9cf4ab5ed1d4e8c88b81819b","sha1":"6103ea1b568cdbe84dbc11ea492c80f46f94c24c","sha256":"0fde215a4d8170da199f7075802ab6ce339a44d97e7cf0ae2bfac2c0a2e7688e","sha512":"97f098ad081d900e52ef0b049e0192f37fab5ed4654fa19ac430dd9bbac9c8c0f1963d65fb21102d24a258cdba60cf89eeecfe591cf0f9cc4602e5a14d11dcab","ssdeep":"192:AOXMzt9wj80P6sVpdKBFCnQjzRXFrzbtfUMbaweYj8XRylCeCZJYntKIXupbfLKD:U7GpmFCy3","tlshash":"3042609e2df31475385b52bd1b7b6b063325a043d029cc683fdf47488f8a698a9973c6","size":12694,"data":"","first_seen":"2025-11-26T03:02:54.215393Z","last_seen":"2025-12-09T13:25:25.575214Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Y12JXPDSYV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1dae0ead6184e37a97ecbcc453e94fa","sha1":"98c3691991abfa7041c6c047591b985ccc5fbf28","sha256":"3a068fab378787c4cee143e64e5cfbaef0e8eb448c8941ca8901b4a3837e5f4d","sha512":"62137a707a63bdef431a3637d0f82d278cbf7cd7818dba5c2604c1f95462f5376d9a75c8a2057e3be9d3daf56a308a2645c388e0712d17d61adc4da4f4ef49e3","ssdeep":"6144:LES9mynndgbw4GmPoiB0Mqtw0+TCAZ+EDWBUWSTxNHIT8d:v0EdZ4G8oeZ+EHXlhIq","tlshash":"7194098e73d674625396f078503f018ba57b28a2f45dc89af189cce42e7469a0277f7c","size":432466,"data":"","first_seen":"2025-12-09T13:25:25.57334Z","last_seen":"2025-12-09T13:25:25.57334Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"urlvanish.com/assets/favicon.ico","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150; _ga_Y12JXPDSYV=GS2.1.s1765286702$o1$g0$t1765286702$j60$l0$h0; _ga=GA1.1.1351815988.1765286703\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Dec 2025 13:25:03 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sat, 18 Oct 2025 16:06:46 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Tue, 09 Dec 2025 13:25:03 GMT\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhEtDllNfQ1qPiceWDt8pQCR7mD%2BbOLZM%2F195NV3%2F%2F16OZcPVgv7FXXQfjh%2FESjnaOrG8dWsQ2Xt1onPLK2ZTA52f8zxZMz4Zpjn\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9ab4d3855843b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"6f1044a2e480d5768bbabd2d7791d50d","sha1":"c2d1734307aeec3e09e56fa4b576cb0dcb203acf","sha256":"4eabbe813529604da3b3b4048055eb55884ada5774e7c5908e376f3a145976ba","sha512":"ecd98606cfea8e8ce928e345f3903868c633b7d35aaaf7e50af15fe4f708017cc25d0d34e50e377d15335b52dcb540232a7f727b727918a5f15fd16fe2fabb51","ssdeep":"192:IV5awBYhzGIdK9oBIaCVNjY5tgwHPWSqAg/K+q7rDxjzeMEQ4XT/qqiDkqUJO:AYDdKqFC/jYNHPW9iXeQ4XLqb","tlshash":"8b627dc5b512a4a1d87910b0a4a75ea032a67cd91cc56b0b362b6e7cdc3301bd9f7e1f","first_seen":"2025-09-08T03:01:16.308325Z","last_seen":"2026-03-18T11:34:18.447587Z","times_seen":10,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-09T13:25:01.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsIoTbbpibRkMzWJkVnHhuk0%2B8DDUs3PyxfcdHeL7OlwyPtCOT9YLdJHf57327erH449Pq7YZ2jJw57BRmHUh4WstuR8vXIO1Bs7\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ab4d37e7c220b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":51254,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (587)","md5":"c64546b4a04bb49be21ec715bad7d54d","sha1":"d7f9769f99828ee6b3eaddf4683c82e188939443","sha256":"ec2768da7799ef0726c58cd1be8d41d8081d4e36b22ef39380b19054556a76a1","sha512":"37a527b328218759ccf24b1bd5ca9e4e6db85891ea34ddd9ebc28db18c77455fa6743459054cc83380a5fda713cbe3b7bb63b812bc48282e888cb8d81d5e18df","ssdeep":"768:6YxokQQcEQTVlkxHSpeG8vMo4nrJMnvOR:6yQQcEQyRqnrJH","tlshash":"3933945965f32012145394ba7bb38b16bb648007c50ecd997aec838c8fc3f969da775c","first_seen":"2025-12-09T13:25:25.572511Z","last_seen":"2025-12-09T13:25:25.572511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":38,"dns":15,"connect":1,"send":0,"wait":262,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Y12JXPDSYV","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=G-Y12JXPDSYV HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\nexpires: Tue, 09 Dec 2025 13:25:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143134\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":432466,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e1dae0ead6184e37a97ecbcc453e94fa","sha1":"98c3691991abfa7041c6c047591b985ccc5fbf28","sha256":"3a068fab378787c4cee143e64e5cfbaef0e8eb448c8941ca8901b4a3837e5f4d","sha512":"62137a707a63bdef431a3637d0f82d278cbf7cd7818dba5c2604c1f95462f5376d9a75c8a2057e3be9d3daf56a308a2645c388e0712d17d61adc4da4f4ef49e3","ssdeep":"6144:LES9mynndgbw4GmPoiB0Mqtw0+TCAZ+EDWBUWSTxNHIT8d:v0EdZ4G8oeZ+EHXlhIq","tlshash":"7194098e73d674625396f078503f018ba57b28a2f45dc89af189cce42e7469a0277f7c","first_seen":"2025-12-09T13:25:25.57334Z","last_seen":"2025-12-09T13:25:25.57334Z","times_seen":1,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":136,"dns":1,"connect":21,"send":0,"wait":45,"receive":60,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.0/css/bootstrap.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.0/css/bootstrap.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 22881\r\ncf-ray: 9ab4d3814b8d8be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"659b12cf-5961\"\r\nlast-modified: Sun, 07 Jan 2024 22:08:31 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1563855\r\nexpires: Sun, 29 Nov 2026 13:25:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4LGYYLw3vLFNzg%2BIPDffhb7TT%2Bs5Yhi6LQqK3ICh7gwNT77w%2FJAJv4lq2Uf%2BAn%2BZR0ZLpBPwA1d2ebfqdIZO4hu66NMzaIsVl1UTZddMJEuHyDJKXZM4kUXKsSOzqaKEvKgSZhlj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-03T20:13:03.025316Z","times_seen":19696,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":20,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/assets/styles.css","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET /assets/styles.css HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Dec 2025 13:25:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 18 Oct 2025 16:06:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 677\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QoY181TqfNkY03ypjxtL%2FYceeBtuF7pvLgW%2Ftw%2BREdwd4PDoH8mJveCbr5vCnop0zSUrDYRpA4J8wKSrLy%2FnNn0NYfZyIXSWq4gv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9ab4d3812811b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d8ec5d96aa36155a20ab0e4e1b5e84e8","sha1":"7bdd9c022532a5ff4f29ee782ab710a42022b48a","sha256":"55ed6f61379b6d19d68c177dc25ca58ee764b5d73cf2c83d96f484f96b884140","sha512":"be763f686637a23218730f47f3d612b42bf83f9ba5c503413e53bfa427fada147345adc3f7a90695fd1caa32e536049587a3ad649c38012d29d8efd3409c9e40","ssdeep":"","tlshash":"84519c8ceba7085334178459677bc790272d5443c80ddf6d7beab2f48fc8390b5a9a48","first_seen":"2025-09-08T03:01:16.312817Z","last_seen":"2026-03-18T11:34:18.443966Z","times_seen":10,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/assets/pwa-register.js","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET /assets/pwa-register.js HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sat, 18 Oct 2025 16:06:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2784\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xe8uEYhBMOWq5u5wFC0F5Vmw8ITqWtui6NlsuxlzCGp30K0vv1A%2BvbDgqbLwbIs5Zi4KDk5E2w6%2FJ8MKvTYdEQiChpWyW32p9zmn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9ab4d3812810b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12696,"size_decoded":0,"mime_type":"text/javascript","magic":"HTML document, Unicode text, UTF-8 text","md5":"3e66eb2e9cf4ab5ed1d4e8c88b81819b","sha1":"6103ea1b568cdbe84dbc11ea492c80f46f94c24c","sha256":"0fde215a4d8170da199f7075802ab6ce339a44d97e7cf0ae2bfac2c0a2e7688e","sha512":"97f098ad081d900e52ef0b049e0192f37fab5ed4654fa19ac430dd9bbac9c8c0f1963d65fb21102d24a258cdba60cf89eeecfe591cf0f9cc4602e5a14d11dcab","ssdeep":"192:AOXMzt9wj80P6sVpdKBFCnQjzRXFrzbtfUMbaweYj8XRylCeCZJYntKIXupbfLKD:U7GpmFCy3","tlshash":"3042609e2df31475385b52bd1b7b6b063325a043d029cc683fdf47488f8a698a9973c6","first_seen":"2025-11-26T03:02:54.215393Z","last_seen":"2025-12-09T13:25:25.575214Z","times_seen":2,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://urlvanish.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 125064\r\ncf-ray: 9ab4d382df78b515-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"619c057b-1e888\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1548980\r\nexpires: Sun, 29 Nov 2026 13:25:02 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gDluf2jEf9%2BMrC4sm7v5aZVD1w9GUVdRE%2B6ZoRD%2Bbka8poD6OnnNIHCZPTnYKCqTH%2F02lHTM477sTNh4qJY3I5B%2BxbK2EW7GlMFm2cwVsk%2FbNB0oRGguqlDQ%2F3l48zEaCYU4Knmp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125064,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 125064, version 768.67","md5":"57b380d27f14f16e737bcca7e849cf79","sha1":"2e4280929d4d76fc0e31601c98f167f14630c209","sha256":"94e1bbc1c2a41ebc73fa5253fd563256c0035b4d69181e48f9aef9e474a11251","sha512":"88dd2321cc4711333411a24dab612daa68caf7cc31c892405bcbb9e89629ca15fcdd781bb26d7485f5819b5b48170ec8eaa2135701f4695cf94a1cb0c15bf649","ssdeep":"3072:W0ZXsLdN0s2s3suUQwuHn6XEedsYoDAEMUdAgofJ:W0OdNj10uHwsYoMHPg+J","tlshash":"b0c3122be28d689365654613aedd23ae1e795b7d8c4b6315c1bb3046f7ac7b83003b13","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-04-03T20:32:24.564108Z","times_seen":11394,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":24,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/assets/support.webp","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET /assets/support.webp HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Dec 2025 13:25:02 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 18 Oct 2025 16:06:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17366\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8qVUTE0F3ib0ZYKxOEwsghFxdowi2COhxvxbSDnAtE3w8t6KsOmPnKISzi1gVeSuh2OKmYFbbDqM%2BsCjB%2FaNIVkbZTDmAEuM2Knh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ab4d383782fb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19fc89cf9a9a38d6f2b7e59ff603e4fd","sha1":"4d1565b4c4963f0a846520662712006fd4a60b7b","sha256":"b7d60fbf159bb5c167b732a326005ecb5bbe434c6b418b6d054d9fb3f832bedf","sha512":"ab6fb65d622b45f27675101473e2f593f75fe2103deeb614f1e28b2944bec68bc6b28aaa745be58eac7c11588578cea7e2e71632a3794f866fd77ac20ff0151f","ssdeep":"384:Nodk3O88ogAsJNVA30XlG2RmBo7f8vVtuGaVs+wr73oz:Nodl+eJNK30U2N/GaV946","tlshash":"5172d0452dfa56cdf343087eb1caa5f64a7809464706cde7a225c905cccc27a2b5cbc8","first_seen":"2025-09-08T03:01:16.315875Z","last_seen":"2026-03-18T11:34:18.448418Z","times_seen":9,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/assets/urlvanish_ext.svg","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET /assets/urlvanish_ext.svg HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Dec 2025 13:25:02 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 18 Oct 2025 16:06:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 783\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4L8B91P0GBLIUOZeWogy%2FHl3Z31Ld4K9erM3FsvWp0mzy4MQV261Rgzg6GpL0e66E0rCa%2FgLMEtaH24QX74vHadyr0w%2By4L%2BBBfb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9ab4d3837830b4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2318,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bbb431d2e9fb94bb738bea8e1e2e218","sha1":"479ac381ef226d54e998a30e8210f14b87028e93","sha256":"d2140d44a0416ba4b09271ef7da2fb106bab382bad52e105d82786f305e38e90","sha512":"ef2c0af6ff991b58bbbe45fd0290e16a73fff69daa7d40d56acbdbb1b8273444cfe8df1626e3f6f3e093ac3602ab1bf92fcfae89a3e389d183417b0e4a7ab8cd","ssdeep":"","tlshash":"45412ec3b114341a9d998798d7ef60a3526f21eda289c79c30409b2e95296ef6b10ed8","first_seen":"2023-12-02T04:14:36Z","last_seen":"2026-03-31T11:39:22.075137Z","times_seen":603,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-ray: 9ab4d3814b928be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619c057b-3a02\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1595000\r\nexpires: Sun, 29 Nov 2026 13:25:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ood5ew7eXtYGWfr0vpnjjAmCP1c98whcLh3yM6ZUp4Ulz3xiHboeJ41aEFs9bDpu0SG3lX4v7TAGYW0VOabF6I3qOPC143ZeLcYSUVxtSrszQQmZbdWt19FcBgfeeBP7gJ7QUQeT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83981,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-04-03T20:32:24.574797Z","times_seen":16025,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":13,"dns":3,"connect":1,"send":0,"wait":10,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/assets/logo-dark.png","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET /assets/logo-dark.png HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Dec 2025 13:25:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Oct 2025 16:06:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94659\r\ndate: Tue, 09 Dec 2025 13:25:02 GMT\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyfkK9h35Q23N0D9vkIMJGwpGrYBjKY70p6x4bCE1qwL3ef3%2BYWzBpz1%2BBKfJZOjPL6YIgUccHp7AmdR4FrObz1agxQfP4BXnnnJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ab4d381280fb4ee-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":94659,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 278, 8-bit/color RGBA, non-interlaced","md5":"e99778d1a71e2a5596f5ae299b161fb2","sha1":"83999a8771bd6b84574201620cd53009a40b2bd6","sha256":"6fe14fa20fddcdc0195e58d278da126bf0843b301e4fd4d4d5f21e6e8a311563","sha512":"352bea1c41a45dc1572aca093c957b0c432e71ee22e4954e095f3616f77e3c17d68ae89ddfa4fd4dbcec86a328e7b702e25a67b0a680185234e6ecc77c1554d8","ssdeep":"1536:D80LL/EeDEzRrNkjT5FOqgLJw9WxeWNWblW//Qq//1mvaM/aP/xIQAp:TLgfzRxYIhSMlWBW//QI/hM/O8p","tlshash":"a293029bb0c3462bf3aea010bde354e67a0a44a0db73d11364f6656905933ef2de2f44","first_seen":"2025-09-08T03:01:16.314354Z","last_seen":"2026-03-18T11:34:18.444618Z","times_seen":10,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"urlvanish.com/assets/pwa/icon-512x512.png","fqdn":"urlvanish.com","domain":"urlvanish.com","tld":"com"},"ip":{"addr":"104.21.50.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://urlvanish.com/","date":"2025-12-09T13:25:02.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"urlvanish.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 17:10:32 GMT","end":"Fri, 20 Feb 2026 18:08:09 GMT"},"fingerprint":{"sha1":"E9:AC:CF:FB:E2:89:2D:4C:9B:C1:97:70:A9:BB:A7:71:87:A2:5F:70","sha256":"B2:D0:10:FC:96:7D:CD:BF:DF:6B:F2:D9:07:E5:09:AC:22:F5:DE:58:92:EE:56:79:78:27:AC:65:97:1A:EC:BB"}}},"request":{"raw":"GET /assets/pwa/icon-512x512.png HTTP/1.1\r\nHost: urlvanish.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://urlvanish.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=19a64e399324e40bfcb9a0122853c150; _ga_Y12JXPDSYV=GS2.1.s1765286702$o1$g0$t1765286702$j60$l0$h0; _ga=GA1.1.1351815988.1765286703\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Dec 2025 13:25:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 18 Oct 2025 16:06:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 229565\r\ndate: Tue, 09 Dec 2025 13:25:03 GMT\r\nserver: cloudflare\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NOKilpmiawH2Dw8Oe0ks7pYtbdItUbw6gKDGewwlYP0Wd0jLTScy7mZeAH5LUbpM0C19T9fv1FLK2tNZke2r7NTdOXgEA4gFgYsB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ab4d3855842b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":229565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"2b2d00634631fe695b5f74606b78a3f9","sha1":"b27a3c59f06ad1b9d83e1797e4453b968ab50b10","sha256":"974a27d8681884787eecca3b1c5f66819fa73cbbb597b4b195ce7c2b65044d78","sha512":"915f4728b6c3ec90ba9b528b210cf4fb2b89c6d26cd749c30573acd525bba394b25c28283676bff3ba46cd0ce25a43c3beeb7000b0573a9ecfd972400924eea0","ssdeep":"6144:MhiwtNBsR4Xcs9V7kvNFFvyOBogYkIqPJv/MxdKiNPS/Z:MhiaMWXX9V7ajFvyOCk3PJ8PKz","tlshash":"5c2412669dc5bb3335412c23ae1732a40c9764f60e9735e744ac6fae288d1fd88d1d8a","first_seen":"2025-11-26T03:02:54.229885Z","last_seen":"2026-03-18T11:34:18.445878Z","times_seen":8,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-09","alert":"Sinkholed","trigger":"urlvanish.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
