{"report_id":"95989e04-a56d-4144-a34c-ed1ef4dcc9ed","version":6,"status":"done","tags":[],"date":"2025-09-22T18:29:52Z","url":{"schema":"http","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"title":"Zeefliz – your Ultimate MOvie HUB"},"submit":{"url":{"schema":"http","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-27T18:29:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-22T18:28:10Z","timestamp":1758565690,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":46926,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-09-22T18:28:10.473479+0000\",\"flow_id\":1913337419536731,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":46926,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"zeefliz.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":913,\"bytes_toclient\":3517,\"start\":\"2025-09-22T18:28:10.465243+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"zeefliz.icu","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-22","domain_rank":0,"first_seen":"2025-09-22T18:29:52.664483Z","last_seen":"2025-09-22T18:29:52.664483Z","alert_count":15,"request_count":16,"received_data":675525,"sent_data":9442,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-22T18:28:10Z","timestamp":1758565690,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.23","port":46926,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2025-09-22T18:28:10.473479+0000\",\"flow_id\":1913337419536731,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.23\",\"src_port\":46926,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"zeefliz.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":913,\"bytes_toclient\":3517,\"start\":\"2025-09-22T18:28:10.465243+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2f5c68b5605927095fbf71023720916e","sha1":"e56cb63cce7e689989135633c2dae2ca19978ad8","sha256":"985151261051d2774f92bcf177f30e4f5729d262fe59774432b59b81e22e9849","sha512":"05edbf3e2678443ba7e1bda13eae0b8f09ab66fd47bc54ca3d05bd204acd24e1d07231f854d885b7896b182becd09c4cb7833e7fc64bd8ed99aed603095f0d2e","ssdeep":"","tlshash":"d101ddfd7258617e03b4b9d211557e02b4863427ecd8bf4a853e086481be02871bba6b","size":657,"data":"","first_seen":"2025-09-22T18:30:02.308638Z","last_seen":"2025-09-22T18:30:02.308638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4822fa4ed30cad7ed1ebd0c7bf1d5243","sha1":"df1f8475e81d12d3d3e353cd98a0614d111786c3","sha256":"bc7e7f5c11f49c1b80fc36070d4b6e3b8d2532177df9bdc0c40c42ac16f756a7","sha512":"7f808a70b84adc1a352a4b0f89e8753f429221ff07778f03b2f531a41f6ad8a775932c99c49dd238b802baa1c2f10c91568187ea1c924877a676c1d37ae2d390","ssdeep":"96:tt9rnR1rHoO4bIYNOE7yYSVAVKZrZdV3X2my3ntVDP6cegLCzSIzTLHRXJ8o5MlS:tN1KIk7yYSyVC7LydVP6DDSIzTLxZZ5d","tlshash":"27911ea13a3ce5fbd81a40533a3f2b6df431b1971c110aa2df3d8ceb9178d093961285","size":4211,"data":"","first_seen":"2025-06-21T20:52:38.268284Z","last_seen":"2026-05-02T12:10:42.340151Z","times_seen":378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02d97551a12f1a19902b9bcdfc947ba1","sha1":"90b02514b53281c2a6bbe29e8282eff694d16881","sha256":"102cd7beadf4abe9972be3357c25e806d4bd2ed7877af18cb3f1b395bab1ce4f","sha512":"82f3bc163cee0de02099198728f1f13c7c183fc5da99350e2dc2359c20e76140ce36082ec01cc671f1c6d94eb253604d2c25a64f5bb6bda33c6d9e0ebfef8c46","ssdeep":"96:QSLg7F7y1HfLA59cPJ3b38PxVNRznQLdtzaysLjvLpjsuyiNsjvS5Jjg2:DU7F7ylfMncPJ3bWxjlQBtzays/vzyiD","tlshash":"b28127545b349fb843b916c210a6fb1a986e3a73c454ac8fd76c4e2d584aefd308225f","size":4137,"data":"","first_seen":"2025-09-22T18:30:02.31046Z","last_seen":"2025-09-22T18:30:02.31046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29cb827c889536b93542da7400ba2561","sha1":"c22206a64d52482d06abc95601a65e2d2618adc7","sha256":"75f68cc47cd2a01b9813306e0f24f97fc501482bfc8750e18f0f1de7b7c9c5ad","sha512":"4054359fb2336e1bbce8d640c274be1cc260e4fa94c141f229ee15f1e5ede5427a4894b3fec12dc8548cb05359fda9a93dc7a0867d18f97ea541884cecc994c9","ssdeep":"96:tQ4FaoczjF3YmjwfQVxviC5kHcKm40jn3IT9VpFxlKwEJz4z/Tridj:tQ4oosjF3XwixvPOjm40j3IT9VzxlKwa","tlshash":"c8a1b7393e6d9b7109df841d5a3beb4cf63090d62492d880552ecda804fced25cba98e","size":5049,"data":"","first_seen":"2025-09-15T10:43:04.054429Z","last_seen":"2026-04-29T02:29:21.911219Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb8b1463d199f75c51520607e346d03a","sha1":"ce72dc9c890f9c5db7a6ab2d035fe19ebc358531","sha256":"2b5080f35360c0c2e23c3afa18a2bb963dfac5784d627b9b9b699aed317be6f0","sha512":"1333cdb21ab6e78ad4fd3e833522547ff95d31563a9104e89fae1453b13c8d22e447d2515529129af5d6eda406ad6361d0cd315a3e875a8eb5117e4dcdd902e1","ssdeep":"","tlshash":"cb2112a64b188a7742d7a33f373e5bf96534e3c2360606d04a56cde44894c9da2dbfc8","size":1362,"data":"","first_seen":"2025-06-21T20:52:38.274351Z","last_seen":"2026-04-29T02:29:21.912552Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6be78812ab93321ecb922272edea8c76","sha1":"a6fc394e53d02034a28b5ae2e6db601719243aae","sha256":"2d8458f745c5b1f0615678be444accfbbb0ae4c1eb0a771db1ad16eddda8fc7c","sha512":"bff307638347569d32001dc730bdd5ea49a85705f960a82fe99a54596ab355e970497d9a4771f94e6ed83834175d8a0e9ceefd5336e885a14c5e02a801ad6b3d","ssdeep":"96:tGhI54fc+J7XNHErC1sRwg7NyUtLv59scUnNBjCRVNJDMPusg8V/+6ikpWwSok+i:tGbc+ZXugsqUtqDj+F4/6MkFwqj+Ube0","tlshash":"1702c7a273dc52bf789710136e7e625da42c215763354af0ffbd5cb1ac64a013432766","size":8996,"data":"","first_seen":"2025-09-22T18:30:02.312763Z","last_seen":"2026-04-13T12:57:42.174858Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"862465cbc439e235d67c5edf9376edf8","sha1":"cbb4768d946262d741f9da71a921bcfa35718c7a","sha256":"1bd5938e69225f8c915a82f8fae873f686a330dcaaf103686bba7bf0e08bccd7","sha512":"27e0710e36a9d4d89177bf1d1e788f4a447087f712ea52f4ef4f6873f8c856d7ed5214b938a4e36c9d50388a8923417f7e988478175039cf11155708626488f1","ssdeep":"","tlshash":"62e07d312f46802e53a286a5f07ff104e590013b80105c06801e84ace794f40f287bd3","size":320,"data":"","first_seen":"2025-09-22T18:30:02.31401Z","last_seen":"2025-09-22T18:30:02.31401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41ac39923f6963a044ca2bbb5b27ac48","sha1":"874069af2fccddddaa7b0a1e2c3c0ef97c96312e","sha256":"f85fce3457893170ce9ea80d32f0f974de93d60c40ef3753d1d6b13f6cdb854d","sha512":"4e1c2336166bcbc5091eca50e769da1b4311e8204eccbaa2c6041ae969709159fcdd2652d58020e688e96fdde4adbdb1b3b10cd50f3cc6978ac9e930e90bbd4c","ssdeep":"96:t4qUWQwI54fc+J7ZhdEF03ZGVpT3M9oE9F8kIZUpPepkPo9YmSDMvT80uzHupHX2:t4N+c+ZZwiZG3Tc9o4F0KPsAhmrT80un","tlshash":"0e91b836b62d7eb718bf10cb989fa2feeb797556321255b0c544a820fc50d9034723a7","size":4337,"data":"","first_seen":"2025-09-18T11:56:50.993186Z","last_seen":"2026-04-05T12:52:44.360997Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1b61e7d786d9895ac1c34f6aaca611f","sha1":"b73ff095f17ccfafbd714471e4b6ebe4eefde899","sha256":"e8cc3cf9de389f2f5a0140b384be4f57bf1f0da1aeadd43e1c9bccfa2a75226a","sha512":"1d2545aece62aa60c7dfb253d7dbdd5e55909d3773097d7db50a0c7e88d8ed01e93970b7269d4f1e181ad5ffdacb235efe1e8415c4a76c4071be7457faa93189","ssdeep":"192:t4Ecz4WAjlbQ1qGTvnEVKH0gHXf7Y/GP7mBqXjDr29r:t4Xz0bQ0gvlH0timeC","tlshash":"87d15170514e15bb09ba857af3220311ffbd01657036d099ba2cadc86e5db4262a39fb","size":6406,"data":"","first_seen":"2025-06-21T20:52:38.280681Z","last_seen":"2025-11-21T05:09:23.812149Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/themes/zee-theme/dot.svg","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:10.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/themes/zee-theme/dot.svg HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/svg+xml\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:21 GMT\r\nlast-modified: Mon, 08 Sep 2025 17:57:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEvwz7%2Fg%2F7%2FhAvrKCXuTHVYBAix9X04SbceakhND8%2BTAKCRKNJ5%2BEnA9CuW9MDka0DhtdV2h%2FnFQyebi6e02UPZeB4G%2F1Amb1A%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9833dc502cb3b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":169,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26b7f67377500acb92acc0dc6c193b45","sha1":"ca80c982384a87afe109e22526ff2a1ca345506d","sha256":"b1f479a0bc415d4d92d6510c60d303a04a828962ab6b4c4aba5265d1b6c8d8f3","sha512":"047a9b108311bb42671c3c046a937a81f8f08bb2b60a83214ece69931ade708ffbe00752b78b2c4c6d59856d388290a616bc04f1f425d8124d0d8c3b38891bb5","ssdeep":"","tlshash":"efc08c36a03cdc0a9a08c078906334a231af601b0346675cf1c03f3ae6058e33c91238","first_seen":"2023-05-21T21:27:24Z","last_seen":"2026-03-02T03:35:29.1585Z","times_seen":9,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/2025/09/cropped-photo_2025-09-08_23-15-30-32x32.jpg","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-photo_2025-09-08_23-15-30-32x32.jpg HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1256\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:21 GMT\r\nlast-modified: Mon, 08 Sep 2025 17:46:01 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S2fpzeefILiWgZrRmt7vemqLC1Wj7ASJ4uzfCM8bVtKejOWPmVO53n4tQZextuDx70Pc40takbpjWK%2F088bTTcTNr04DkPBLg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc52df17b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1256,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 32x32, components 3","md5":"fb7954657df8bdf15c20e5373cc03201","sha1":"760e7644f8988a10c36a1baf3a2dbdcd2195df82","sha256":"4d8d71c50d4989513b0477ca9441cfcaa24ced922eb76008345145f2306e64e0","sha512":"4c597f32ea20de1f84ad18a0b6561e176b60168f8d93b1d32f86e9d23bc9ac95a3e805a22e7f34854b35f1a860788213a51a7114a38fbea898e9ecb266faf71a","ssdeep":"","tlshash":"0721d73e4307c2f498128d7b85a4628eb3890b85fc49f30ab771c6e2cb208ded8466c4","first_seen":"2025-09-22T18:30:02.271101Z","last_seen":"2025-09-22T18:30:02.271101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/vijeyta-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/vijeyta-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15758\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 15:17:44 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYbamJNmn5xb83Bl124pm4TM9B07BCC4h0i10h3%2B9jtiTs8hNK21V72KXF4KNxlomiyMqtQZ58QvJunAynCMUlnOtv1bIRkHxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc541838b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f327bd2305e5167f8c2f33b0311d8496","sha1":"63ccfdc9a4bbf7a8e8f6be20584c5ea6824a8ad2","sha256":"107e9a8a099b99045222843ef178206fc5d6ef3c05b8e532e63ec24c38722ada","sha512":"2735a88fe7ef2db68bb8ca5dc48a54ed1e6310f78cf44ecaffae78a6f1fcd7202d13011b53b0993193526472f2cca85662cf3bc66f76de583f691a3c206a4e58","ssdeep":"384:A+luF0vX1DrHKlYOX+Id6UUV8HkJSnl8fQADOklcNbsu:SIX13H8YOAUUV8HkJSkDdOF","tlshash":"fb62c08d1b684364f15ee7a240bf2634f3e6b71049289349905b32887dad722cf6b658","first_seen":"2025-09-22T18:30:02.275115Z","last_seen":"2025-09-22T18:30:02.275115Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/rise-and-fall-season-1-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/rise-and-fall-season-1-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6938\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 16:10:40 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ahyJ1eZ3YnpdLa0UkIslyNsFTYPyYDqKFYlzxNRAHTrPRMD4CYK7x03vHyxg%2F1j8cejkI02xgIuDfx2fT32C1YHK%2By21fJHog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc540826b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9ef79680fb8b98d9ba0e169be10e64e3","sha1":"6f8b27bd597c266ce12b0d785d97cfd052f3e39d","sha256":"48dbbf9ae3080fc446acb43b1461ab19360709dc590068de15bac41df48aafeb","sha512":"e4b8dee12cf097b19b70f6154c98a364399c24abeef26f7385bca37863f34464db882922bfb541c929c02c44477745d75dd91c3bdf60df284202a5e066dae84d","ssdeep":"192:8wU8wcyJNY6ULyhB+gl+EnNj8FOW5cFii6WOo:88SYW+alNYF9cIpo","tlshash":"fbe18edc1c645a81da6234b1289d1f87468ee26394f7a9bb03c72122a20f77f176f855","first_seen":"2025-09-22T18:30:02.278195Z","last_seen":"2025-09-22T18:30:02.278195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/lights-camera-achhan-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/lights-camera-achhan-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29188\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 16:10:40 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3d1a6hzuF71fUCcepsKuMeiA6LIOMs7tFgxe6KcXFWxT2wQiskdugfpKqgW5Vhsfo3W8C3CAlZHxP%2FXqV3857De9r%2B%2FO0yW2bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc54183ab51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2bdabd28cd6fe2ba280c4f8a9b1af230","sha1":"6d1fceb64e38c1364df5c574d4642637543dab60","sha256":"19e2223c2dfcf160df2c4b0ac675f709e1252be1147cc3bc89bc8af1fb4983d6","sha512":"0c1701b7e11f6577eac9a9f8c0fc2f6e8d7bc63a43c3dede96f968ac6facb14630a7a484efadc8942afe9c726d9d80ec7de6b6080a6bb683931fe567632bad35","ssdeep":"768:sOnkbCS0zGnXeo2TW08wzoSFhSt4E4wX1UY5:sBbCS0iOpM4hS3ZX1j5","tlshash":"81d2e11b63fc467978e9985bc9f0c0b5582dcc733cf8d86259650b436874fb9321919e","first_seen":"2025-09-22T18:30:02.281566Z","last_seen":"2025-09-22T18:30:02.281566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/nishaanchi-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/nishaanchi-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27454\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 15:17:44 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M9AGPAoCeFihZFO%2BnEXXuClt%2FRgQR4W0ijJoDSJxfFAoft%2Ff%2B2236jzU%2B9pOf9t0%2Ba%2Fv%2Bke3U8%2B0jzIOTDhKRJyeCfBbrccRYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc541841b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ac4b8c398058506e75d09c0b135a667","sha1":"8c97d8bc6cbfba3d1f4563db35e1d0617fb23582","sha256":"48ce940d0e35901cc383f0b862235fb728cc74c1f9bd8b52d31de7cf26266833","sha512":"a18c61f83c5f5e298405e014c750f601aab0d44748d1021a99278b87d8437715e26ea18d0e68ad41354e3d06f402325c9b8e178dd7a548f933917d2c4c6140f5","ssdeep":"768:WkgSArN0ca9g/LmoHZcxSeXrVt/kOtLD2v4trm:6NPDk76ci","tlshash":"2ec2e1f6a4adf862d42166ca2dc48fe565f88181db47b1c30d1e507abe67029468ea11","first_seen":"2025-09-22T18:30:02.28493Z","last_seen":"2025-09-22T18:30:02.28493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/FONT/zeefliz.icu//wp-content/uploads/al_opt_content/FONT/pro.fontawesome.com/releases/v5.10.0/webfonts/68d174eddb888af6b1347b41/68d174eddb888af6b1347b41-2de2a530b2c689d8dc9548acfcf670a1_fa-brands-400_converted98800fd7f685658b4677f838fb02806a.woff2","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/FONT/zeefliz.icu//wp-content/uploads/al_opt_content/FONT/pro.fontawesome.com/releases/v5.10.0/webfonts/68d174eddb888af6b1347b41/68d174eddb888af6b1347b41-2de2a530b2c689d8dc9548acfcf670a1_fa-brands-400_converted98800fd7f685658b4677f838fb02806a.woff2 HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeefliz.icu/wp-content/uploads/al_opt_content/CSS/zeefliz.icu/68d174eddb888af6b1347b41-079002011e5e192dec68b5a2da67c0ee_al_style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 71240\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 16:11:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=59RS3rEm%2FsI9im0sCeU1a0y5PQWa%2Ft2Cymv1YB%2BC7wzhR3X2FGyUx3yIfVd06rs3RhZMCggXcIO1SX4WtXraihbUD99oxFP3vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc55795fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":71240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71240, version 330.15728","md5":"98800fd7f685658b4677f838fb02806a","sha1":"a121bc47b49a47ea5c7f3c83ea8a0bc87c63f3de","sha256":"4ef19b97d77619b770644a64e07be0abfc77ad7566fd7aa281fa5c105befeda0","sha512":"475f628be8a307fa486909ad3333573d0ab07b7d06cc80423058ddabfcd7dba087c4c86ace36ec4ccfb55aca1d5f640f39476daf2031834b85c1cc62d65fe25d","ssdeep":"1536:4Nhgz3d7wX8ZYhhmilwfVtR1KPW1OcGM8D4etpe2+O/:sm3d7wX8yWVtR1cfVpt+O/","tlshash":"05630232a69c94d91642da0d2ec100cd98403adf57db67ffcb04bfa79dea0592e5c263","first_seen":"2025-09-22T18:30:02.28827Z","last_seen":"2025-09-22T18:30:02.28827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/2025/09/cropped-photo_2025-09-08_23-15-30-192x192.jpg","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-photo_2025-09-08_23-15-30-192x192.jpg HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8654\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:21 GMT\r\nlast-modified: Mon, 08 Sep 2025 17:46:01 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0nzK2DWu0oH3ds%2B6L48x9sp5rKPpzb1bRXcxDHk6Bkisp39s3niIWignH6UOzlnFMWgJGvIXooSyeD79Fy43TZ%2FxgC4M0%2BEUTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc52df12b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8654,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 192x192, components 3","md5":"261592310becdd5b7338983bf9cb4bc1","sha1":"022617098733d5a930ab295e29b1dd6d0ff84150","sha256":"0588771ddfcc5cba740d0c83f35f95775b14a6ce2060a343566b1915608b6119","sha512":"a15c44d2ceeae887cdd5c13206354d725ec2a7f5437fc4dfbdd491696a9b29586e4ddb25fdf6ffc1162ff0d334eb6600ef4377d1a94dd20617adb4a7f3e8ec24","ssdeep":"192:/Pj9hd3tRSEI6AtxWKTe0zRDSG8DZ56xSjxX2:3jZbS5X7XSG8V56xSjE","tlshash":"3c02af5e5f528ac4b426dcb75e833e83934fa7a6711913522b73dccfc0191c5a1a8ed8","first_seen":"2025-09-22T18:30:02.291284Z","last_seen":"2025-09-22T18:30:02.291284Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/asia-cup-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/asia-cup-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24714\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 15:17:44 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxlMfiMZhdrcZ6j%2BzgRGKK27uRL4haofSzNGkNqkRFCui%2BeuAKn32culYhIZKJJYZ5Mxd5Lpf84s2JyKFtkPSFYzCX9sULunGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc541837b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13b17070ac0c15082cd8b74d4ba659cb","sha1":"71a378d8af0aa25227159bf140f662344dd2a99b","sha256":"d42f7870908122329d3790c1843811facdc1f4ca3019b5fec586258dab878415","sha512":"c1969dec7dcfad17bf6692770e9a5ed97afa10c639e0110747cb030b24cfc8a85ddf2a5bfd0bc54b63b83c2c457e9b9d0f0211c82a9ac55f881f31f163439e50","ssdeep":"768:Qf/mI+QD0u7nq4bYCzPAyarayxJMgI9pbNO4nNQPB:Qf/bD0uLqkYg4yarfYjE4nNiB","tlshash":"2eb2e18d53e6f51ce7d4cd27cd8350283f3376986b101230418afce9aaa9de78e5225e","first_seen":"2025-09-22T18:30:02.294077Z","last_seen":"2025-09-22T18:30:02.294077Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/dil-madharaasi-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/dil-madharaasi-2025-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26386\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 15:17:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2Z8TolPtFEL9jrnT4%2FrvCMfr0fhPHVwPTo1bGDzGgiVMl0o3jSvcsbB0Mq%2B5m7DMtbuXGuSEWsWLPj8XdRw9IG1o914bsCrAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc541839b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"83a63a3bbc682c07abcf4ebfa2397fd5","sha1":"cab3f42332bfe4a15557946a8e586ef9fc617337","sha256":"db894b0bba5194d3800e981dc008d7bf2885d8287731b1a5cca04020d81722f1","sha512":"ab85138fb3af118bc4cc1e70b12d227747659a5374bd88a4e7bd630d7f2aeebc4f22b0de0fb7ad2eb65bd4a86fc486683e91f30fffea8186795be96007527f86","ssdeep":"768:b6LQD2O0HoV3Pb7KAzLw3pvVz67cAYUG85h8IUja:ms6mfb7rLIJV5AYUNPUja","tlshash":"a4c2f1ed126c8e9be476984e6c373295470b50f080defcb2cb258e659250357ff24c66","first_seen":"2025-09-22T18:30:02.296525Z","last_seen":"2025-09-22T18:30:02.296525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/the-great-indian-kapil-show-season-3-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/the-great-indian-kapil-show-season-3-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14116\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 15:17:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ew83IqLeB%2BJQpBgaXDH7B%2Bp00PhIZzP0z5OuY8aEqTT2KgGwyP3lQqb9TtODnxSc5Zb7G3SwGsDa1mUf%2BVLKPRr7IHnKIRrXYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc54183bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14116,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"01fd1f3e80f453484937c77722880e37","sha1":"5a2cf4da88f6c8a8e948b7e0a79772bd10274ac7","sha256":"00c79b620e4742e66d1993ba3558ac81f038e54b0bbe1e3164e6894e997a2b99","sha512":"adee19ae1f686272a08e9ff5d3cd8615a1ba1e1be5fb66846d81cd97f0c7fb31df5cec25f915689e0e644f0d34abaf2382fb9e404528c3e8f54fa81f977233f9","ssdeep":"192:sxqjygIVI7lvFGRsqTTym3Gy6JICtsPz7Dm/Ka8w71TeBXUhcYoo2QYHhIepTv5G:s/ArOsqEftq7DkHw6cxRvB/TIEbjWyU","tlshash":"f652bf2672c548e8d71c3adbd50b819210bae402c3b2dd052c76efd1a47f256249b99f","first_seen":"2025-09-22T18:30:02.29898Z","last_seen":"2025-09-22T18:30:02.29898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-22T18:28:10.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RHTY0mbz08vWSZne9W%2F94RKFt2ARqhjOiwa1dbYDzfCs%2B%2BEXMgod%2FD40DCGtKYI%2Fy5H4QFA6FF%2Fu0JRuKHEwHxnet1bUsqQP6g%3D%3D\"}]}\r\nlast-modified: Mon, 22 Sep 2025 17:56:30 GMT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=7200\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: 9833dc4d8939b503-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":271000,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5122)","md5":"7cbf0724b5c8f3a818538f0659710d21","sha1":"1098cde1609634f87e0df5c948f0b1e87ce2348d","sha256":"685c668e183265c9a59d77fb19e39974927cf055fb0ad4519feab5ce5be2e103","sha512":"868fe666f9f324b0d78f392c1ac5f403142eb00e311028fc781c57f86f47c90b499d514b73679ec535430471188c4eaf7991fab2cce2c88915f5fdccf196df1d","ssdeep":"6144:nvqUj8T3lGLedZL/R5oJHd4MDyzk8yXl/qbsLUsdd7:nvqUj8T1GLedZL/R5oJHCm","tlshash":"7b447db7664d193fb31b92e1e7e93b5970255013d9164ce8f2be1438cf81da4b0a3da8","first_seen":"2025-09-22T18:30:02.300971Z","last_seen":"2025-09-22T18:30:02.300971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":52,"dns":28,"connect":1,"send":0,"wait":122,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/CSS/zeefliz.icu/68d174eddb888af6b1347b41-079002011e5e192dec68b5a2da67c0ee_al_style.css","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/CSS/zeefliz.icu/68d174eddb888af6b1347b41-079002011e5e192dec68b5a2da67c0ee_al_style.css HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: text/css\r\ncontent-length: 2047\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 16:12:37 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2F9LPW%2BoB8bU9ed6Ne4FYn8fcPdTwHBi6Q21OwvFxcP%2BOvoe0n1kizMqlbQ%2BsXdvMngthY%2BZqNNyb5sviQeXRKfxuHVKrQdiLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc53f81bb51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34934,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1818)","md5":"079002011e5e192dec68b5a2da67c0ee","sha1":"e6d973a2ef7a5b367811303ed9a7ffb866fb4979","sha256":"36d6e944888b4630b17689a41cbab5cfcc0282a391643fdac79a8ded0a5c02aa","sha512":"bf15e0dbd3a6753bdc9c9ede0d4be8de17a0b6138d2aac0f8ab4e5c8d72eceb8ca3fb58621a9d80b9abeb1e7d7c70feb9c31127ac9c69acd0bad09abfabbc57e","ssdeep":"768:ikB8JJZ7F29vf2zo5oyZ+gTK0gyBB0mennZmZTZlZUZZZXZsZLkZEdb8ZOZ5ajdK:ikB8JJZ7F29vf2zo5oyZ+gTK0gyBB0mt","tlshash":"15f2ceb16557a08283c208c165ffa913ab0df2209c5c997953fd14ccecd6639b2fbba5","first_seen":"2025-09-22T18:30:02.302682Z","last_seen":"2025-09-22T18:30:02.302682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/bigg-boss-season-19-zeefliz.webp.bv.webp?bv_host=zeefliz.icu","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/IMAGE/zeefliz.icu/wp-content/uploads/2025/09/bigg-boss-season-19-zeefliz.webp.bv.webp?bv_host=zeefliz.icu HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zeefliz.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12360\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 16:10:40 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ohaQEZadbhCBZUpQgy9wGNKdQayh1CemjIioMYQskUSRJ2iRmEDXdZ6wlrkNKLFGUizjE7bs8kVdz60RxHLAW9B8RUuXnlm4TA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc540825b51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12360,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 300x450, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"336951a2046931d3b93af623fba3e607","sha1":"d85c55f89841839ddd8ca5efac86150bf2c67816","sha256":"c281ec76323367ae219f74a555d69736fa227b29fc8998795e8d3b86e91088b1","sha512":"b56de9ee84ce20c79514256eecf882f6c795892b00176a2fa5990543764e1ecaf3013d594e4c7920b2053a05ce9a2749539c2ecc95927dc9bec80a8cc4a7b56b","ssdeep":"384:sxDGtVNrH4inT/nbsIBJa0oM/YiFx8xqhmp:sxDG5j4in0gJa0o4YiFixYmp","tlshash":"ae42c0b86d013e9f69bd3d267be10dc005986f578bba766dfa224712f5ad720c2d3040","first_seen":"2025-09-22T18:30:02.304273Z","last_seen":"2025-09-22T18:30:02.304273Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/FONT/zeefliz.icu//wp-content/uploads/al_opt_content/FONT/pro.fontawesome.com/releases/v5.10.0/webfonts/68d174eddb888af6b1347b41/68d174eddb888af6b1347b41-88fd444847dc842d15e229df26571b03_fa-solid-900_convertedb94e275e04a86efd140c5ba18f31d71e.woff2","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/FONT/zeefliz.icu//wp-content/uploads/al_opt_content/FONT/pro.fontawesome.com/releases/v5.10.0/webfonts/68d174eddb888af6b1347b41/68d174eddb888af6b1347b41-88fd444847dc842d15e229df26571b03_fa-solid-900_convertedb94e275e04a86efd140c5ba18f31d71e.woff2 HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeefliz.icu/wp-content/uploads/al_opt_content/CSS/zeefliz.icu/68d174eddb888af6b1347b41-079002011e5e192dec68b5a2da67c0ee_al_style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 111652\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 16:11:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPs3n54rs%2BRfZMdvJ7yxhvH0xpoZuuKWkaxiYm8Uo%2FZ2VxO3ckKNZKL1tqD5YcKcqeudOhVHfMtqImfvSV7o26IWd4O2IqFIDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc55795ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":111652,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 111652, version 330.15728","md5":"b94e275e04a86efd140c5ba18f31d71e","sha1":"2a911eb37955a57768c45a6341c95e616a8fb9df","sha256":"eeb0e9f4d621e5b1afe911b096b643ecd089e5d194d6fbb7d3ad16a69b53711f","sha512":"bb6356513f03d760434e9db440100a9be02f9cfaecacea24f71b1370b673cf54eb2d33909c768bc2dd8f1c7d3e56dbd9428939405d2e1aeae2778fd5c47a3549","ssdeep":"3072:6w23yJ6FqFUJJBNC54GpiyCh9gPwsuvyAssD:923e6Fq2NNy4KwsMssD","tlshash":"42b3121a35edcd4cf6b0ecb0832d66d3811968b0b8f1feb3418a3586ec89d554ae5c36","first_seen":"2025-09-22T18:30:02.305827Z","last_seen":"2025-09-22T18:30:02.305827Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeefliz.icu/wp-content/uploads/al_opt_content/FONT/zeefliz.icu//wp-content/uploads/al_opt_content/FONT/fonts.gstatic.com/s/poppins/v24/68d174eddb888af6b1347b41/68d174eddb888af6b1347b41-9212f6f9860f9fc6c69b02fedf6db8c3_pxiEyp8kv8JHgFVrJJfecg_converted32b5498534afc766a1621de2c7eaf427.woff2","fqdn":"zeefliz.icu","domain":"zeefliz.icu","tld":"icu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeefliz.icu/","date":"2025-09-22T18:28:11.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeefliz.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 14:12:09 GMT","end":"Sun, 21 Dec 2025 15:05:55 GMT"},"fingerprint":{"sha1":"F0:6A:23:1C:B0:DD:BE:C9:93:AB:A6:21:EC:28:39:D7:B8:81:7D:07","sha256":"C9:AC:1D:A0:4D:E1:C2:77:59:97:88:CD:1A:B1:0C:A9:8E:C3:B4:AE:BF:34:AF:97:D5:D6:96:58:A4:6D:0F:0D"}}},"request":{"raw":"GET /wp-content/uploads/al_opt_content/FONT/zeefliz.icu//wp-content/uploads/al_opt_content/FONT/fonts.gstatic.com/s/poppins/v24/68d174eddb888af6b1347b41/68d174eddb888af6b1347b41-9212f6f9860f9fc6c69b02fedf6db8c3_pxiEyp8kv8JHgFVrJJfecg_converted32b5498534afc766a1621de2c7eaf427.woff2 HTTP/1.1\r\nHost: zeefliz.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zeefliz.icu/wp-content/uploads/al_opt_content/CSS/zeefliz.icu/68d174eddb888af6b1347b41-079002011e5e192dec68b5a2da67c0ee_al_style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 22 Sep 2025 18:28:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7180\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Sep 2025 18:29:22 GMT\r\nlast-modified: Mon, 22 Sep 2025 16:11:28 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81dKboqLJyHwXh5nJXfWW4FMCkTZtGcNsrE6eb7rAuiU35dAD6JhZwMWM1Q8uaSw9GM6mtOvFg%2FmDQ2yTj0X%2BzHKLvvvEqSGyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9833dc55795db51b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7180,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7180, version 4.262","md5":"32b5498534afc766a1621de2c7eaf427","sha1":"c865bbc4c1456a017c9c6eeefe0c35667312d153","sha256":"fefbd7258a8b007a7227f0393baaffca3db5b1928b8cfd035eb094c96edfdca5","sha512":"6828c9563504e99cd15cc6e24eca1f5e67715c99386750494958f92ed2ae9a30bc72d3a30b206b5e951a52d2df27086bea21c1c9afa19d6dc7c326f675528fff","ssdeep":"192:IfD3zKdLMSw3Gb6mIMRrp2zIliuMA1KhSX4oMPjfkhPQm:IfDzOjw34IuMAMhSJ2rkhJ","tlshash":"cae1aea9e4ccaa13fb55127496e6f1c9b73704c397ea8f361eb140f3442426eda01917","first_seen":"2025-06-25T06:41:02.690565Z","last_seen":"2026-04-28T20:46:03.640297Z","times_seen":50,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-22","alert":"Sinkholed","trigger":"zeefliz.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}