{"report_id":"9bf34bc8-a38c-4ffa-8f71-fb7ab7c5c6ee","version":6,"status":"done","tags":[],"date":"2026-01-03T23:54:19Z","url":{"schema":"http","addr":"drotia.space/pregara","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"172.67.186.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"drotia.space/pregara/","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"title":"Real Health","dom":{"size":3755,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"92daee2dab7d795585781418caa53dc8","sha1":"adfbe910a9c0a73b684763d4ef1b8a0a02c828a7","sha256":"2810e7c66a4827cb94059ec6f0c0b39f46a09b614fd9f0a4fda588fa83c8f621","sha512":"8af7ee384f60b361a9e761ee2be5d1d1f1042540abd6e97fcd22a861f78771a120f3a89f2e9dfd4c69c74dd1e27351fe86cdc1c3c0079fdf0b350f182deeabe9","ssdeep":"","tlshash":"c771a63be2fa02af120215623b1a72c8ef12806f63766844764c5158af85f618773ea8","dom_hash":"domhash49ac088f6a64caa42ddbf18f45d8a7e7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"drotia.space/pregara","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"172.67.186.153","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T23:54:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"track.drotia.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"track.drotia.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":22929,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"drotia.space","ip":{"addr":"104.21.76.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-12-31T19:24:38.164262Z","last_seen":"2025-12-31T19:24:38.164262Z","alert_count":0,"request_count":5,"received_data":2511166,"sent_data":2332,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":3,"received_data":69857,"sent_data":1595,"comment":"","tags":null,"fingerprints":null},{"fqdn":"track.drotia.space","ip":{"addr":"85.17.65.238","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2026-01-03T23:54:19.550138Z","last_seen":"2026-01-03T23:54:20.038742Z","alert_count":2,"request_count":1,"received_data":470,"sent_data":484,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"track.drotia.space/uniprelpclick.js?attribution=lastpaid\u0026cookiedomain=drotia.space\u0026cookieduration=90\u0026defaultcampaignid=\u0026regviewonce=false","fqdn":"track.drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c63ef9c3ed8e3e839b16043bfb3e5c84","sha1":"a6ebd78892d6db96b8f2f236f1dc5b9c5da14575","sha256":"5a4dc62b5cd3ee8173979753b1014144c44ef7b1b1c588a2f66b6ff06bdcb772","sha512":"878a83d2e414b6f555ec3a90fbcb212489fc9097ab6c39e148894fb61d636ae8c8c375553cb06110fc264afd641003137d721f52506817f4bcf0e463001db0be","ssdeep":"192:T7AlA/yqQ0JpiWKJe2lSTjdxyi7em1CjEtxObe0q9xWFyOAUO5:tm0qZFtS","tlshash":"41d11298a5c3092b45937538a86d55247172441b33e9d805fe0dd3a02f1ce36abfafe6","size":6415,"data":"","first_seen":"2026-01-03T23:54:23.374806Z","last_seen":"2026-01-03T23:54:23.374806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Barlow:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:57.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Barlow:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drotia.space/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 03 Jan 2026 23:53:58 GMT\r\ndate: Sat, 03 Jan 2026 23:53:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22243,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"29ba2ed5b996b6b96eb00b1e95c8033c","sha1":"0760b42ba470fb6d3b8546240616e27750e3617d","sha256":"462eb7b2de75421505b8ef1a169a9d757a746b7fc92b672c99e6f4d0e650941a","sha512":"bec123318b3392e72adc12186b889cef484fd8eb60e95de0fd4153a9a23315b46dc4cca92d08c4ec649e1120981fc3736b0834a53e99321d1aa21c91563b2423","ssdeep":"384:cD383Y3ZDMnUD7E5D6rQDnoVDYLgDuV+D5O3D4rA6IVpCiFzmROmF:Wws5IV5q","tlshash":"0ba2dd92046bb100ea975dd123de7e32ee9e62617440d5ba7ffd18c8ec9ad25332870d","first_seen":"2025-09-12T19:00:26.263654Z","last_seen":"2026-05-10T05:51:33.699446Z","times_seen":981,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":112,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drotia.space/pregara/assets/style.css","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"104.21.76.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:57.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drotia.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 15:30:03 GMT","end":"Thu, 19 Feb 2026 16:28:28 GMT"},"fingerprint":{"sha1":"88:8A:33:E0:FB:88:7A:21:32:B7:9B:C0:B7:37:BA:05:A2:81:ED:12","sha256":"92:46:20:C9:C7:10:6B:51:08:4A:B1:89:25:8A:D7:18:6A:95:E1:63:4F:03:85:98:76:DE:09:C7:42:41:8A:05"}}},"request":{"raw":"GET /pregara/assets/style.css HTTP/1.1\r\nHost: drotia.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drotia.space/pregara/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 10 Jan 2026 23:53:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Dec 2025 12:36:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 501\r\ndate: Sat, 03 Jan 2026 23:53:58 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPfEnWZFi%2FHc%2FZan7YRjQOYqKS3xKgsnK0VCbdn7scCH%2FkKJduBVu%2BOWfkK533FYeVxPJpWBB0F4DBoCAvwVdgtN7IY1WMzS5G0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b866b28edb4b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1397,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5a643cc053597cbfe647276fd8ee42c3","sha1":"df279813263db0f6eda6d52aefa98914b6a8ef72","sha256":"ca515b4ead4e7ee1adf5ff4b85839ecc1b63ff6e26d3ebfe367ce8255706fded","sha512":"e3ff4e25d4715f9f4f152f84a696dcff5544932872418589938517dbfa0ebaed1e2e844fa1f2098a5bf08113a355d12328de8c50f3800093389b1ebea160be4c","ssdeep":"","tlshash":"5921ce99db480104b376eda477535b26bac88562670782ba3eb010d8f2cd5a942b1fcc","first_seen":"2025-08-01T10:28:48.195093Z","last_seen":"2026-01-11T22:30:44.101798Z","times_seen":6,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:58.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/barlow/v13/7cHpv4kjgoGqM7E_DMs5.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://drotia.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22196\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 17:04:02 GMT\r\nexpires: Fri, 01 Jan 2027 17:04:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 197396\r\nlast-modified: Wed, 10 Sep 2025 16:22:46 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22196, version 1.0","md5":"81419bf5abb50ae075ddf1aee89da819","sha1":"4f0f26f139db2a7eee91dca038012399b3abdc47","sha256":"b0a8ad37ac45f5fb22ced461576db72e44e295107aad7a9c8a7a4bad728fd03b","sha512":"2445e12945aafa3ceb309e854253949361a3ce080197295d48b7b54fcc8d8cf2da24dc69dfaeb6c98c6a402742e4cc4bae2d12f57cc2ec3e79a676440fba35f3","ssdeep":"384:7wDo/T9qjZ6Qlb3pgWw/1n2vZvYUwVlykCtnexzuDDxlNN8fsbB:7wUQV626X1n2vRYUwlykMou/vN","tlshash":"04a2d084dae9716a4cc18aa602830aaddf76a048917c9f0cb5fb129d19425747f0fbf9","first_seen":"2025-09-11T18:14:34.493772Z","last_seen":"2026-05-10T16:57:09.380007Z","times_seen":8053,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":96,"dns":1,"connect":15,"send":0,"wait":15,"receive":6,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drotia.space/pregara/assets/img/fav.webp","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"104.21.76.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:58.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drotia.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 15:30:03 GMT","end":"Thu, 19 Feb 2026 16:28:28 GMT"},"fingerprint":{"sha1":"88:8A:33:E0:FB:88:7A:21:32:B7:9B:C0:B7:37:BA:05:A2:81:ED:12","sha256":"92:46:20:C9:C7:10:6B:51:08:4A:B1:89:25:8A:D7:18:6A:95:E1:63:4F:03:85:98:76:DE:09:C7:42:41:8A:05"}}},"request":{"raw":"GET /pregara/assets/img/fav.webp HTTP/1.1\r\nHost: drotia.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drotia.space/pregara/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 10 Jan 2026 23:53:59 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 18 Dec 2025 12:36:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7300\r\ndate: Sat, 03 Jan 2026 23:53:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBoyzLM7fJ%2FsOi8VBbYs%2FIPt4a6OHz9JS9jFpek9krwPGP6MyzhtlUGiPowcTno0gBLQ38LE4iHq9FwlvSjdxKawsevwLlurk4Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b866b2dddfcb50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a246ec588d3da1d708aeaaea559d73c","sha1":"c554285f007686c076792de8ff9c552d13d9dc81","sha256":"3ddeda8642919cdfae515f5ceb54117a7c239bd875627a8e00de99fb4977fe2d","sha512":"8cf52a506aa813057dbdfc0462cd2903423752bb3a9d7e436ee213784aa9cba996558b816866f56f446b9b6bd51a75e1d04840f5d33b18e0bfe604ff9a9deece","ssdeep":"192:zDu/57zXvYIAtkKSLoMuZdoug9ABJDbLy6S9zgI7+W:PGXvdPKZ9ZK9ABpy6SiI7+W","tlshash":"cfe1af2bb6730e87d9fdd57a44b46387ed1a0ef25223e1c54a084c86fc62c95394282c","first_seen":"2025-08-01T10:28:48.175342Z","last_seen":"2026-01-11T22:30:44.099931Z","times_seen":6,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drotia.space/pregara/","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"104.21.76.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T23:53:57.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drotia.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 15:30:03 GMT","end":"Thu, 19 Feb 2026 16:28:28 GMT"},"fingerprint":{"sha1":"88:8A:33:E0:FB:88:7A:21:32:B7:9B:C0:B7:37:BA:05:A2:81:ED:12","sha256":"92:46:20:C9:C7:10:6B:51:08:4A:B1:89:25:8A:D7:18:6A:95:E1:63:4F:03:85:98:76:DE:09:C7:42:41:8A:05"}}},"request":{"raw":"GET /pregara/ HTTP/1.1\r\nHost: drotia.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 23:53:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 24 Dec 2025 18:11:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAuPUaZ2K8RgA7cgiBEJvMdW0L7PY8cNioeGdTiGOhrqZq%2BpDvTQ0ldNNYYExYE8qFd7LrUM7zAXSu%2FkOUoc1CLwy3s6qElTcXZCgw%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b866b24683b2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3887,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4d5d59b1c886c35e8ca9d1225dbb7b0c","sha1":"9c387997974543b247866c971561e43773096d8e","sha256":"f70eda296934acb2ca3b9e6dab4df2f8ee97974a6285850f0be7a21975229b39","sha512":"6f5d5bd125d8e0f6c0a6b9d41da540c4bf0f851d498b3f91d7072239a17441182e4df76b021ccb5375d2cb9f5e1ef5ff5a7087db70bde188e131e0bdf7cdfedf","ssdeep":"","tlshash":"0881b577a6c9126a123241633f1a728def12809f63663844764c6157afb2f608b73ecd","first_seen":"2026-01-03T23:54:23.367632Z","last_seen":"2026-01-03T23:54:23.367632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"drotia.space/pregara/assets/img/play.png","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"104.21.76.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:57.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drotia.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 15:30:03 GMT","end":"Thu, 19 Feb 2026 16:28:28 GMT"},"fingerprint":{"sha1":"88:8A:33:E0:FB:88:7A:21:32:B7:9B:C0:B7:37:BA:05:A2:81:ED:12","sha256":"92:46:20:C9:C7:10:6B:51:08:4A:B1:89:25:8A:D7:18:6A:95:E1:63:4F:03:85:98:76:DE:09:C7:42:41:8A:05"}}},"request":{"raw":"GET /pregara/assets/img/play.png HTTP/1.1\r\nHost: drotia.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drotia.space/pregara/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 10 Jan 2026 23:53:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 21 Dec 2025 12:22:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2491231\r\ndate: Sat, 03 Jan 2026 23:53:58 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eFLmSx%2FDGB3ZxZ0mgc1WVN4mZ1M7M2U97r5M%2F0AlELtHotm7epYfhx8eD6gPVsztlPT6hvWwi%2BNeoYW7K%2FOR0Obd1vlIemrAqrE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b866b28edb5b50b-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2491231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGB, non-interlaced","md5":"4d93d91e7265d360df9474bccf6bd5b8","sha1":"c070405c757931f3e96ed51cacbc71ec4b7b3348","sha256":"3363f493fa53e407e957730329cf55c228557942df9f10247c54e673fd59c6bd","sha512":"698071ca893d85e2f74b58a82159e05690d500476989a7344e368a8e240cd3716a5bbc71be832743906a823cf5abddd0f61d7b7759f1eb7e118bcf0e2cf66b7b","ssdeep":"24576:kdTk8poDOEAQLp5DAnRFhZGWlbYbb35GVXfN6KVG8lXwP7R4bpMww:kZpOOEAQtanv3rNmGFlgDR4bpJw","tlshash":"de2533f72121a1ff986b914a597f88dfe8981141c086d73012c3ef0b9ed2db65216b7e","first_seen":"2026-01-03T23:54:23.369631Z","last_seen":"2026-01-11T22:30:44.10244Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":557,"receive":895,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:58.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://drotia.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 17:07:02 GMT\r\nexpires: Fri, 01 Jan 2027 17:07:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 197216\r\nlast-modified: Wed, 10 Sep 2025 16:22:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22788,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22788, version 1.0","md5":"15481e4eab6dc3277d89f1d5871cf08f","sha1":"25ba8a978a3a493ec9f835f7f2cdefe16b55b295","sha256":"2d797dd8b35dcb3413e1af9d7052b3f4f8c341a147cdcb01f4f06af80db53289","sha512":"bb5ba24476faa25680e6644dba33a98afca6ef0936f7be6ee3888d09c2d7b658ccfaae395f173ded5331529e4548b25d923490be1363132ed30e0e368812dace","ssdeep":"384:Jc/2c7dFz93/eRqONl+60qnSY8IkG5zjP2Z8VgG0BFrnIZbp/QPGIZgdT9mEl4/2:JM2c7dZ9vkq68606SVzGJ2uuubbYgDmM","tlshash":"36a2d0de44d674a2d12f32f43c832d1c13bd3558075ad59b6b1a068bf2bca7621e3527","first_seen":"2025-09-11T19:29:34.815552Z","last_seen":"2026-05-10T16:37:33.804797Z","times_seen":6383,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":160,"dns":3,"connect":27,"send":0,"wait":15,"receive":4,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3j-ws51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:58.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3j-ws51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://drotia.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22368\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 19:47:50 GMT\r\nexpires: Fri, 01 Jan 2027 19:47:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 187568\r\nlast-modified: Wed, 10 Sep 2025 16:22:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22368, version 1.0","md5":"54fe32444ec1b4f6370aa3b0509a49ba","sha1":"150c46df4c0a7b6bb1b03702032c307d3870cc8d","sha256":"6f5d995ccc4d8ffd9e8cb4c303fc1f3646d6c62d40269ef59463332f12d5b897","sha512":"69d1ce53ece8f02f87c04d89ffd88f0cc1f95d83b00778ca34cb92b50a48071a38f2679fe875dfdbbeb9c5234da84235a8f21f0fcd3cef7f5d1b7e51eb6cedd6","ssdeep":"384:jbFJxXnjdT+zkSzKsGDN9sHmHDhWEkvYXbqmWoOwxkL50emU+roGqErypWH99V8r:/JzdnA0NqGjwEkvYXbqs7c0emlvrySjW","tlshash":"2aa2e2c0f8bef659b0e4f3b28679e0d4c35449a5a35363f96048e69fc4253978390d5d","first_seen":"2025-09-18T10:50:16.407818Z","last_seen":"2026-05-10T14:40:10.484311Z","times_seen":608,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":92,"dns":1,"connect":15,"send":0,"wait":19,"receive":13,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.drotia.space/?format=json\u0026referrer=\u0026\u0026sub19=undefined\u0026sub20=undefined","fqdn":"track.drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"85.17.65.238","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://drotia.space/pregara/","date":"2026-01-03T23:53:58.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"track.drotia.space","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Jan 2026 23:04:24 GMT","end":"Thu, 02 Apr 2026 23:04:23 GMT"},"fingerprint":{"sha1":"9F:0C:A7:E5:D1:C7:55:56:9E:26:84:1D:E7:A3:84:91:DE:68:06:3F","sha256":"6D:C7:77:E4:F3:ED:FE:4C:04:76:E6:15:B3:CD:CD:77:6A:F7:3D:B8:30:43:DD:F4:C0:1E:D2:BB:10:00:50:2E"}}},"request":{"raw":"GET /?format=json\u0026referrer=\u0026\u0026sub19=undefined\u0026sub20=undefined HTTP/1.1\r\nHost: track.drotia.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://drotia.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://drotia.space/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLocation: /disabled.html\r\nDate: Sat, 03 Jan 2026 23:53:58 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\nX-Kong-Upstream-Latency: 11\r\nX-Kong-Proxy-Latency: 12\r\nX-Kong-Request-Id: 81187c3960b4cc602ff14244f5a0e750\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":41,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"30e6e5e3137604d8f2a406eab26aaa9d","sha1":"a2f0917c23e1d2cb7b19d51b9f303c82e9166885","sha256":"d2cc875bc226e4b921adb359c4615e790be3fa2b8dcaa9e4f3d776b8ddcf5649","sha512":"03f2712137dd66a46b4ee24ef98fed4fa35f49743083a540e420d92e1f1e6898a6ca41a525b3ad15c11c65a34712f15fbbae2d7279c21d35addb87aaccab7849","ssdeep":"","tlshash":"4a900200108c24092e774762514419099a421294440529125604654754072242164496","first_seen":"2023-06-27T08:59:18Z","last_seen":"2026-05-10T08:16:05.454244Z","times_seen":4328,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":75,"dns":1,"connect":25,"send":0,"wait":46,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"track.drotia.space","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"track.drotia.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"drotia.space/pregara","fqdn":"drotia.space","domain":"drotia.space","tld":"space"},"ip":{"addr":"104.21.76.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T23:53:56.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drotia.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 21 Nov 2025 15:30:03 GMT","end":"Thu, 19 Feb 2026 16:28:28 GMT"},"fingerprint":{"sha1":"88:8A:33:E0:FB:88:7A:21:32:B7:9B:C0:B7:37:BA:05:A2:81:ED:12","sha256":"92:46:20:C9:C7:10:6B:51:08:4A:B1:89:25:8A:D7:18:6A:95:E1:63:4F:03:85:98:76:DE:09:C7:42:41:8A:05"}}},"request":{"raw":"GET /pregara HTTP/1.1\r\nHost: drotia.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 03 Jan 2026 23:53:57 GMT\r\ncontent-type: text/html\r\nlocation: https://drotia.space/pregara/\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8E281cSYnxwMu13CUOxK32LvAQwColznUkslBnFcat%2BS939W%2FVcl2ON%2B8pyZBGjiRFHFHUMPqLWg5%2FTnCiyErLxIAWWsfZu9G0SmA%3D%3D\"}]}\r\ncf-ray: 9b866b218ad62efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3887,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-10T17:28:19.342081Z","times_seen":14965464,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":63,"dns":42,"connect":1,"send":0,"wait":457,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}