{"report_id":"9dc4b88c-84db-4a18-9aef-b66bf049f0eb","version":6,"status":"done","tags":[],"date":"2025-11-25T13:11:33Z","url":{"schema":"http","addr":"spinprotection.id","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"spinprotection.id/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"title":"NAGA5000: Situs Slot Online Gacor \u0026 SpinProtection Terpercaya","dom":{"size":42386,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13445)","md5":"7ddfadf186066253dbb3290575092bbe","sha1":"946f59a98fbb426f515546c8b064cd448466bcb1","sha256":"daa8a401d0c8482d8d57f9bb032ebde4a7ede0ae39bc14eae28f695e23a5c69b","sha512":"0265cdfa5f62a4c9e5768f2579c02f5e48dba7e8b606c8cba96c74b274cbe3a11ac6828c6f09d9767811bdad19829d60a20eee5005aa9cb8f2bd184954b81cec","ssdeep":"384:TLv3yvg6eKqhL76uJ0zR9mztFPRYBf2LUyC+STx5oco95zicymqo:Xv3Cg6eNhnxCR9avNgDXW5exho","tlshash":"3613b92977d0146b189781f1f1e3fb1ce228d287db2b4598fead80256fc7daa4953318","dom_hash":"domhash31e97fc15aebdf1f71bd37389b392314","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"spinprotection.id","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-30T13:11:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.no","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-11-23T22:16:23.620145Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":769,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-11-23T22:16:23.556285Z","alert_count":0,"request_count":1,"received_data":851,"sent_data":1064,"comment":"","tags":null,"fingerprints":null},{"fqdn":"spinprotection.id","ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-06","domain_rank":0,"first_seen":"2025-11-25T13:11:34.964961Z","last_seen":"2025-11-25T13:11:34.964961Z","alert_count":18,"request_count":18,"received_data":1485270,"sent_data":8181,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-23T22:24:30.388573Z","alert_count":0,"request_count":1,"received_data":24436,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-11-23T23:10:52.00958Z","alert_count":0,"request_count":2,"received_data":815961,"sent_data":826,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-23T22:16:03.791483Z","alert_count":0,"request_count":2,"received_data":788974,"sent_data":875,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-11-23T22:34:44.823958Z","alert_count":0,"request_count":2,"received_data":41982,"sent_data":857,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B9VJ28CV30","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0c5cd48b6782e28e2f846e0b59ee034","sha1":"7c617d4a77a62454e654df1dfed7c7b6dcad9487","sha256":"07ec5ba4d69cf214306562aa978d8c175d14696b5fbdde9d44bfcf876a5e72df","sha512":"f3a084df1b4ed584c9ef6197cec7d946c2e8e8017fb85e90261ab6b3f73f5c23c719c52ef50536c19a166ba1020fcb3b91fd8fd5ca2bfbfb33ff56bd09172ba1","ssdeep":"6144:jJD+BUKitJeUI2XDsUUHHUVWo6O7GQEO7+s2ElV11oOraIe:1DyDi2UnoUUHBO7+My","tlshash":"5db409df73c67426639af478502f01cba97b24a2b45cc8aab1c9cdf02d3459a4167f78","size":508088,"data":"","first_seen":"2025-11-25T13:11:40.680564Z","last_seen":"2025-11-25T13:11:40.680564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23364,"data":"","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-04-04T20:47:26.18445Z","times_seen":3899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8eef68d083a679cab917649fa9f3ad3b","sha1":"adf725b998ed21f7455d63e7cc35aa3a11b1acf5","sha256":"16c22909eb1d29e0291a874358738017b344001fdf6ac5db12aa4fc3fc04e32c","sha512":"7eb7ac5166888e09921564a6e2f579fa2cd0fa2d6a3c0c5e32f984d1b66abfceb66504ccdd1a82ab345c1f1f04bffe5e4532b273b32134377c490b9e3bba299d","ssdeep":"","tlshash":"87b02b603012303124c320b23027a9054d930100150c54240371411e9d7f39f2c4f5c8","size":128,"data":"","first_seen":"2025-11-25T13:11:40.683203Z","last_seen":"2025-11-27T03:14:17.026645Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09a4b3e1841bcf52785cf30cf9ede0c9","sha1":"2079d110162a868326a485fd9eb86bd5858c67fa","sha256":"c1b37413c3fd2e7448c19404af36705cf78cabc42c44ceaaae451dd599a3858b","sha512":"95a433752cebcdd76c86193a0aa5d8e9b5181af40644201aa3859ffff76eda3e33808d49409d84dc5dbda2fd8a22510e8d0229931ca113fa7a23e7c589c73d8b","ssdeep":"","tlshash":"66d012d8631d7d7445fa7a405f3eb154b05d3a119c906d715d61234ca121d1b7744871","size":210,"data":"","first_seen":"2025-11-25T13:11:40.684193Z","last_seen":"2025-11-27T03:14:17.027249Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"634809a93e425c72e4e955465bdbef2c","sha1":"88b8540e10eec0fcbb8c344ade904c0daafed4ed","sha256":"b7c86f3eedc68644ac3a4041be93d25a0aa90c9af200fe3e25c68f4ba146118b","sha512":"045277b5dd8d9bd2c61931e0aaddb39f3f6c282f982d05a2a412cd466c887ae681dde200b07dbb92ca0d9e796c8043361fbc2bc181fca9193c17a583fc7b1445","ssdeep":"","tlshash":"03e028da74550db170dd05f533b1a1187143511c680a1c32cdfdc9142c185c7cc136cc","size":342,"data":"","first_seen":"2025-11-25T13:11:40.685137Z","last_seen":"2025-11-27T03:14:17.028461Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/analytics/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dfdb14bf1d30441e551b9a877f3a7f5","sha1":"76694f0c3ebb07c12eaee29a2a65c05b9863ac9d","sha256":"c102e941fc11e291347bab51b1f5e65b4a8b2548737be4ecea62e42639ddb1fc","sha512":"ba5826e50c005a726eb7b20e5a37f3eec890344d21b586c00c8f82e2d64ae9ae8ddd93446de96df3ef556669d7e3de616784a611c3f40f34ec0b521f9fa53d7f","ssdeep":"6144:jJfjkuAWgKEtdDUI23+ZaUrgUVW66O7GQEO7iBkIaVBKBLat2v3Y:1fH33E3UH6aUriO7iLBQ","tlshash":"eeb41ade73d67022539af478502f01cba97b28a2b45cc8aab1c9cdf02d7459a4177f78","size":534296,"data":"","first_seen":"2025-11-25T13:11:40.664867Z","last_seen":"2025-11-25T14:33:45.373518Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/js/scripts.js","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddf0ca8da6e67a3ecb8d5934fdf4dc7a","sha1":"c55cb60121b37f706b2109eae1efa3af7e769990","sha256":"449afc9827caaef638ead1b81a75f0f87f8f0959a1cba9c172c307fb858970a1","sha512":"11e6baefbaa5925cb08fa7bc27e2b09f4d45caf4dd71f259be5f8ab302c30ed6d0d68a82e82e749d2f118733a7b958b085eed396709dd9f99901c607a0d7023e","ssdeep":"","tlshash":"0071537ae8513d3b04ba6b6022b6b68af934837393401c2b74bcc19c1f37c145999eed","size":3548,"data":"","first_seen":"2025-11-25T13:11:40.662675Z","last_seen":"2025-11-27T03:14:17.018346Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef1a8736409647a5671ce0d8ae659035","sha1":"25e991943ed5e708932902174aaf2e5e60b39036","sha256":"ce46b7ce6f309edd318d3f3a92a3b01fbc4145b26c2473cb33c8eae70d74d522","sha512":"530c7bd45cd93972109a2b573193fd019a81001c7417a4f8a80572b8ada567b85bcd72a7f0ec57ae3055de37802a7bfd6d455abb4bbe01f6faa921f7d2eddace","ssdeep":"","tlshash":"c9c02b8c220a0c7041f737409b3ff600b042321498d4fd31881a23044d30f0bf744810","size":153,"data":"","first_seen":"2025-11-25T13:11:40.686216Z","last_seen":"2025-11-27T03:14:17.02941Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T21:05:49.724996Z","times_seen":28826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KF678D3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9306b922e1a44439f2f16316008d2876","sha1":"e024197ec8ee2ad9273ff10fcb386ccf48dca3d0","sha256":"e434f8866305aaa6a2fdf757b402c0f6ff3a26b9d06062100508895cd579e6ff","sha512":"5f2f0547a8f7d8ad2bd6110c1bd5a28bf86bf933cab1a7f0fb82792d5efbf1f6fc69314188a4a45daf9b2847d47d580c8d08e43b23d22568515839decdaeec50","ssdeep":"3072:DRvNCv05vkzUrqMo0ulFe1dRGeefSJQWfQXr2XdArNbE0fcVWo6O7nGQUO7O/f4:WvBU2t+eUI2X6u0UVWo6O7GQUO7O/f4","tlshash":"865428cdb3dab46243a36474503f114bb23b7992f84cc894e186d9d52e70aaa4277f7c","size":279633,"data":"","first_seen":"2025-11-25T13:11:40.664145Z","last_seen":"2025-11-25T13:11:40.664145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-04T21:53:25.782813Z","times_seen":16168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"spinprotection.id/assets/img/JACK_AND_THE_BEANSTALK.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/JACK_AND_THE_BEANSTALK.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:36:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 129032\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2D6kKtNyLX3XP1u6weF7z19Igxy1BOqpZYKfkoYH4CrB876dNUtHGuiwyNzA5gX0btojVKpGZmRStgxyafX178HrntwRLO5SsepV1BNDjFCh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcee65b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":129032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a4592c581da730e2a27ec4cbb3d31e3","sha1":"3e48d99beade1696a981e89ed970878cf250f39d","sha256":"ebb301f5cadb70a23b0668ebad311f5292f04a5c14d53cd1f757474960427a77","sha512":"3b13191d59b4cdb1278cc71deb634c5478192b730908087a029f3283036f2fd4b89314e8051c9612726080d8eb9c40416a41abc7de0e020f99b9838c50ea35f4","ssdeep":"3072:FsU1w/UgDSsXH8Ywhf14jAOkrkkIaEfrlc/F+KuoGwr58N:FyYsXcRfUAbr78fpZKXdrKN","tlshash":"29c312966294d93275feb3174c9a638c7c115bdd70b294abf2af07e21b9ed863000e1c","first_seen":"2025-11-25T13:11:40.661252Z","last_seen":"2025-11-27T03:14:17.010581Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":508,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /particles.js/2.0.0/particles.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6197\r\ncf-ray: 9a4163fd2a0ab28a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"5b44-gBf4sYaQd9tyhXPxykaEoAr2lGI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220194-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 384875\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XoTgo5agb%2Fj3keKCPjS8dVSdKXUnGI%2FCmPwZ%2BnqcAeMGoX%2ByVmpPoDsh3YWDkEQwTEuEKpYf5SNdm5cvrmX8pEw6LvaGxR2fnqeK4XFOOOpu%2B3qKbi6QeytuRVVwbWVPsc4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23364,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23002)","md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-04-04T20:47:26.18445Z","times_seen":3899,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":5,"dns":5,"connect":1,"send":0,"wait":16,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/js/scripts.js","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/js/scripts.js HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 10 Nov 2025 13:21:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1192\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKx9QZ9q5XK79fjR6xh1Ij7jbNy5Lkkw2eQmzSlkMZFoyyY9km%2BDft5sfCcxCrXV6gON%2F5rCzMKokBqLJjhEkwDGDy8uTOKrh42T6BfzDOyO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9a4163fcee71b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3548,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"ddf0ca8da6e67a3ecb8d5934fdf4dc7a","sha1":"c55cb60121b37f706b2109eae1efa3af7e769990","sha256":"449afc9827caaef638ead1b81a75f0f87f8f0959a1cba9c172c307fb858970a1","sha512":"11e6baefbaa5925cb08fa7bc27e2b09f4d45caf4dd71f259be5f8ab302c30ed6d0d68a82e82e749d2f118733a7b958b085eed396709dd9f99901c607a0d7023e","ssdeep":"","tlshash":"0071537ae8513d3b04ba6b6022b6b68af934837393401c2b74bcc19c1f37c145999eed","first_seen":"2025-11-25T13:11:40.662675Z","last_seen":"2025-11-27T03:14:17.018346Z","times_seen":4,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinprotection.id/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::zrxjn-1763519216515-428a84849afa\r\nlast-modified: Wed, 19 Nov 2025 02:26:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 298516\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTBokHLBiKkyW3rxivXwoN0rNcNsrv%2FQDJfDyke6L0MdfZtTiiU0mfGP9LXFeqtGJO1yeMj9veWNiVMEzDSDlg9HLXIeBRy9ipehrMvIC4YqSQ%3D%3D\"}]}\r\ncf-ray: 9a4163fd4b8bb1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-04T21:05:49.724996Z","times_seen":28826,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KF678D3T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:50 GMT","end":"Mon, 19 Jan 2026 08:33:49 GMT"},"fingerprint":{"sha1":"48:8A:E6:98:60:86:BA:71:57:34:7F:7F:AB:BA:86:86:8F:73:20:E2","sha256":"AF:F1:47:F8:37:C7:C4:95:30:91:49:71:1C:6F:0E:A8:5A:0D:92:0C:E2:D9:F4:A7:AF:27:C5:6B:39:0D:33:46"}}},"request":{"raw":"GET /gtm.js?id=GTM-KF678D3T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nexpires: Tue, 25 Nov 2025 13:11:12 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 25 Nov 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 97852\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279633,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3306)","md5":"9306b922e1a44439f2f16316008d2876","sha1":"e024197ec8ee2ad9273ff10fcb386ccf48dca3d0","sha256":"e434f8866305aaa6a2fdf757b402c0f6ff3a26b9d06062100508895cd579e6ff","sha512":"5f2f0547a8f7d8ad2bd6110c1bd5a28bf86bf933cab1a7f0fb82792d5efbf1f6fc69314188a4a45daf9b2847d47d580c8d08e43b23d22568515839decdaeec50","ssdeep":"3072:DRvNCv05vkzUrqMo0ulFe1dRGeefSJQWfQXr2XdArNbE0fcVWo6O7nGQUO7O/f4:WvBU2t+eUI2X6u0UVWo6O7GQUO7O/f4","tlshash":"865428cdb3dab46243a36474503f114bb23b7992f84cc894e186d9d52e70aaa4277f7c","first_seen":"2025-11-25T13:11:40.664145Z","last_seen":"2025-11-25T13:11:40.664145Z","times_seen":1,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/analytics/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /analytics/ HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 171235\r\npriority: u=3,i=?0\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a4163fcbe4fb28a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=900\r\ncontent-encoding: gzip\r\nexpires: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Abvu0KZLjiVkz5rt%2B%2BW4m1F6ROfuVGxOAcsXcAdoctWfWA34C0og6BclAarBy2NvbiDSmOSoabI%2BKoG2nVft7oezjvMbNnuoXNmX1XFXB3k5\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":534296,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0dfdb14bf1d30441e551b9a877f3a7f5","sha1":"76694f0c3ebb07c12eaee29a2a65c05b9863ac9d","sha256":"c102e941fc11e291347bab51b1f5e65b4a8b2548737be4ecea62e42639ddb1fc","sha512":"ba5826e50c005a726eb7b20e5a37f3eec890344d21b586c00c8f82e2d64ae9ae8ddd93446de96df3ef556669d7e3de616784a611c3f40f34ec0b521f9fa53d7f","ssdeep":"6144:jJfjkuAWgKEtdDUI23+ZaUrgUVW66O7GQEO7iBkIaVBKBLat2v3Y:1fH33E3UH6aUriO7iLBQ","tlshash":"eeb41ade73d67022539af478502f01cba97b28a2b45cc8aab1c9cdf02d7459a4177f78","first_seen":"2025-11-25T13:11:40.664867Z","last_seen":"2025-11-25T14:33:45.373518Z","times_seen":2,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9a4163fd3c2bb51b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 213653\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 25 Nov 2026 13:11:12 GMT\r\nlast-modified: Sun, 26 Oct 2025 23:27:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01K8HDJRGH614A319Y1CPHT2M4-fra\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-04-04T21:38:05.906879Z","times_seen":30990,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":43,"dns":36,"connect":1,"send":0,"wait":47,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/sweet.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/sweet.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:34:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 149786\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjfnxb7nc3DdFfGIxcpDmswBptYZ147yReiy91lrT4SaBXujt38qQDSl2iX1uJs%2Ba98zHG0S66Ih%2FeQ6TKK%2B3rZY8DUmOHIsdx8SVN7QVPfV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcce55b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":149786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e4b1de4173d371cfc2c3e8bfa827534","sha1":"588b9d4388aafbd3f2fc2d63ac15c8a3626e991d","sha256":"5442e1e2970747fd74646fde3eb29860eb2d682574a9e9105439a6413b78508a","sha512":"66bb0c334cd2a5a7c1e9ae59927f242b1aef84d61c1a02e356b5d261f59c8587325420fad4af7f648ae6a05a4e06bce54b3f37ab8a4cc1cfac9da2b9b336f693","ssdeep":"3072:tJJl6bXIWUWUL60b5jXUyWIEgd0XvZ0h/IAQk3gd/Nd0qHYO9DHED:/Nrxb1UTrgdqB0h/I8wV0qH9w","tlshash":"15e312b721523697cb338dbdfd17af9cdd15ab38d4794d22a01c2227943e2899d0b48d","first_seen":"2025-11-25T13:11:40.666151Z","last_seen":"2025-11-27T03:14:17.012372Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":516,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/bandito.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/bandito.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:35:14 GMT\r\naccept-ranges: bytes\r\ncontent-length: 102596\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kluRG5CdiiohXJaBPxqelNsdm%2F0CRpYPDUbe4tDxf02RU0KRkV6MtfgmVvsDlvbhLBCXhg0iRoVZHUOGI4KBZWBOlDr9pQYXb%2BO2DWfyMTc%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcce57b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":102596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f057980fcdc9b812fe29170fab328c0","sha1":"f5d23532c4d3dd73801ce65fc0bbc67875057584","sha256":"778ec93ec546c37f0ceb2b30df7ab9296487d6cfa3736859df4585c65c46d822","sha512":"a0c246db878d37909da9b56667699707f263a02cf34e5dd8c54348c777ac8f26e36993e682159e1f86e1de2feb55c51489565e5e5e62b7c7be395b5240b385e3","ssdeep":"3072:DJJw0zW+LjI/SNas/lyYEsn0GKWRoBBj7:k+Lc6Nd/lyYEQDK8K","tlshash":"89a302a8fe17748dc8a66b348ed97ded81e3a01aa320265f3cbd171517e0c899ec514e","first_seen":"2025-11-25T13:11:40.666971Z","last_seen":"2025-11-27T03:14:17.016938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":336,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/scatterhitam.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/scatterhitam.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:35:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 82444\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bJoyvlB6VdVLtjMqeJiNv8%2Bhb5OEsI4ir3r84QU%2B0ioP1zm88IzonMMMmLp05QO6Pzl9I2pbxDaNag6lquZQqE4DP%2FdUuv7IeoyYEb0ptHI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcde5ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82444,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6487444ae453e24c8dc69b072ba5e35","sha1":"6fab8d05d643a27fc4a659f8f79d38eb0c03f9ac","sha256":"fe1b184656619d298458f8ac080688658ff8ad826aedefdea9797e53cd40dfe3","sha512":"735a128a5a5e2aa8afe18673169343f0e7644ec4be980ad32e67c2d6816b4916af95568c405d3fd72c153d1e79c589ac65de74d328689520a565a4e3a0bffecb","ssdeep":"1536:KJJt+nyV+6Hte+28CDlRE9uGYTc3oY/WSHsBKBCrF78Cgg41ZFXS:KJJtiyU6NvelRcuGYA3MBg+8Cyc","tlshash":"b68302604da193f2cf64a2f025b169e018577429eb344fe86bbc2752f381c71a7e91db","first_seen":"2025-11-25T13:11:40.668039Z","last_seen":"2025-11-27T03:14:17.003679Z","times_seen":4,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-B9VJ28CV30\u0026cid=317092742.1764076273\u0026gtm=45g92e5bj0h2v9235440437za204zd9235440437\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115583767~115938465~115938468~116184927~116184929~116217636~116217638~116474636\u0026z=1251346619","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:13.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:36:41 GMT","end":"Mon, 19 Jan 2026 08:36:40 GMT"},"fingerprint":{"sha1":"7E:72:6C:4F:FC:62:5D:F5:6A:35:06:99:24:95:AC:F0:B1:57:A6:06","sha256":"D3:15:60:77:67:15:C1:0D:1D:56:09:90:33:FE:DE:E7:A6:CD:7B:10:2E:B0:63:CB:86:ED:6D:73:65:A9:7C:C5"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-B9VJ28CV30\u0026cid=317092742.1764076273\u0026gtm=45g92e5bj0h2v9235440437za204zd9235440437\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115583767~115938465~115938468~116184927~116184929~116217636~116217638~116474636\u0026z=1251346619 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 25 Nov 2025 13:11:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T21:44:28.430209Z","times_seen":764016,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":76,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-B9VJ28CV30\u0026gtm=45g92e5bj0h2v9235440437za204zd9235440437\u0026_p=1764076272056\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=317092742.1764076273\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115583767~115938465~115938468~116184927~116184929~116217636~116217638~116474636\u0026sid=1764076273\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fspinprotection.id%2F\u0026dt=NAGA5000%3A%20Situs%20Slot%20Online%20Gacor%20%26%20SpinProtection%20Terpercaya\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=2327","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:13.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-B9VJ28CV30\u0026gtm=45g92e5bj0h2v9235440437za204zd9235440437\u0026_p=1764076272056\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=317092742.1764076273\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~115583767~115938465~115938468~116184927~116184929~116217636~116217638~116474636\u0026sid=1764076273\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fspinprotection.id%2F\u0026dt=NAGA5000%3A%20Situs%20Slot%20Online%20Gacor%20%26%20SpinProtection%20Terpercaya\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026tfd=2327 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://spinprotection.id/\r\nOrigin: https://spinprotection.id\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://spinprotection.id\r\ndate: Tue, 25 Nov 2025 13:11:13 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:169:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:169:0\r\nreport-to: {\"group\":\"ascnsrsggc:169:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:169:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":99,"dns":0,"connect":10,"send":0,"wait":19,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-25T13:11:11.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 13:11:11 GMT\r\ncontent-type: text/html\r\ncf-ray: 9a4163f77bc81525-OSL\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nlast-modified: Tue, 18 Nov 2025 09:09:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxCsFIeaqiWt6YK6G4OonU7bS6W9j60x4TAogMI2qNEc4Jzjx%2FPvtQJ%2FbZYbCMeyK4OgUoGNLbpO%2BXxqCN8uC7zMnL4LULc%2FAm3T05TSkIqy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]}],"data":{"size":28767,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (730), with CRLF, LF line terminators","md5":"3474c406e0c454cfcb65802080471d81","sha1":"7601cb3cd9ade383c51458de9b29128c95f94e78","sha256":"11418e31415af9e2467713f891a7af81afbee2e91e48f5cfd0920eb7eb67cd9e","sha512":"853208c3718207735ac27b3ea1b93a82ac7cb2d4d4822ed020ec240dbb50224decff7d9ea84735cc5856cbdc05f4a8ef089820d538071ef12fa0a36517c17b3e","ssdeep":"384:9AMy7e9eKTP1EalrKi+cg1+oQo2zsisym+s:KMYe9eWlVjGkz/hts","tlshash":"bad2742972c1196b11b7c2a171f3fb6cf6a88347c3674588fabc81672fb2c698953354","first_seen":"2025-11-25T13:11:40.670188Z","last_seen":"2025-11-27T03:14:17.020077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":66,"dns":45,"connect":1,"send":0,"wait":538,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.3.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::8v8pb-1764075182481-f735a5f015c4\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 543\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6tHMwt31E2kYIlHH7RFqBvFaOWecoFA5FWkLITdDc9Jv6XKrn4Xsq2VjtnrIp%2BGXTBQokBZLSaWSqCtbiDFja4X4c6c%2FX9Gtudk3k4F%2B0RFGOA%3D%3D\"}]}\r\ncf-ray: 9a4163fd1b09b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T21:47:03.661814Z","times_seen":13347989,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":25,"dns":21,"connect":1,"send":0,"wait":4,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/mahyong.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/mahyong.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:34:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40054\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yOSZsWHnwXFG5tHUmHVYRNqDI4%2FT3xkhxBa5ajhrB2fSdEtjfmNdnUX%2BJ6CCdZ5XSHxLz533lXHTEKQgvLPSUCRqfOiSOxRSZ0vB6tOejuA4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcce56b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":40054,"size_decoded":0,"mime_type":"image/webp","magic":"Non-ISO extended-ASCII text, with no line terminators","md5":"67ada8bfae108c165352bd4af7045018","sha1":"f159409899afe0a9994eed317f1b8e149fa63c5d","sha256":"3c6bc9ad887fa91a1f19b6d32535acfb92afab131eeee2ff40a1426b19c43540","sha512":"fdb89cbc79e207473424bc271e5612ffacef385a1f0655e6361a54e25a02d5248d124d5d924bdcd0e44ab11f481f42c6784303d91947006c169a3f8eb49df7f5","ssdeep":"","tlshash":"c7200000000030000c000000000000000000000000000000000000c000000000003000","first_seen":"2025-01-20T03:35:06.736383Z","last_seen":"2026-04-04T20:19:29.556067Z","times_seen":1050,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":335,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/THE_FOUR_DIVINE_BEASTS.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/THE_FOUR_DIVINE_BEASTS.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:36:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56414\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yThx6%2FkIPF9JTv5HAo5u4kRgI%2FjUVDhfW2mEppsjMx%2BHUZYWcUJgTcSKmGtSChluGqWYkPtHirDyKQVoFcR920cxpGjC3NnaFLodZCLGrjX0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcde5cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56414,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"900cf6359a8b66df217c6582258b8b69","sha1":"6cd3f1cedab85e136df93122fbcbb5bebce3d29f","sha256":"ccd0333af4b862501ed03ec2bc7d5dafc5d37c2b7688e02a6164ced5fa057d31","sha512":"87ca8593c658c87a67e01e4da5f1802b4a00ccc47094a36c4432da29d8c25291c21df59cc16896bc10a4580a66fa7b033cc05c359d226e3430a00aead115da8e","ssdeep":"1536:5PLGPqwumJLy2PssCuy/01KL1RzGj+NGcyaIQvZPfvY:5PLGPqwpyysh01KL11GqNzyaIs1g","tlshash":"3743028eba1f412c674f1e4a6c975197ea004ef698602423e862af5e048e1ce735f53b","first_seen":"2025-11-25T13:11:40.67152Z","last_seen":"2025-11-27T03:14:17.006433Z","times_seen":4,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/TRIAL_OF_THE_FIRE_DRAGON.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/TRIAL_OF_THE_FIRE_DRAGON.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:36:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52304\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8bv0VPl1nytxMkDXMAFu9a4GQCN%2B6DASDHEQ911btkR3bgDSoMS%2Bflsvj0NNhH1b%2Fc%2BFmK9lss88s5oHlPLG1nCmwTdHn2%2Fsvl%2FYsAtPnAm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcee67b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":52304,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cf88d1041d260d6666f6cb956ae597a0","sha1":"a2509d3e6b99c81e00553d90751b68da1ef0887d","sha256":"77897c7166bd6e9fc9a1bd3791414d35b846a9e910bfddae0b54e4a6e506e7d7","sha512":"66e7ef0eb26fbd2b29d25f6e9b850391106ffe8c4c140f74121099475ca50531c23a66ad9f5d92e8282d9c0aa0f8f088b5f9865b914a3764190bc3415db8c5d1","ssdeep":"1536:3wrCbbSC7cmofoiA06sADy1jBUJD8iehui6BunSPc:3w+bbSCIElsAu1FUGBuZ0","tlshash":"6c3302a6eda2e5cb3ddbaefd66ec4e5301332f8d5e6739880dc6063610601454eef606","first_seen":"2025-11-25T13:11:40.672433Z","last_seen":"2025-11-27T03:14:17.007939Z","times_seen":4,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":346,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/favicon.ico","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:13.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:13 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 10 Nov 2025 13:33:00 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ndate: Tue, 25 Nov 2025 13:11:13 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oiLIszFjTg0iFS37FAO%2BSVHtevMuedBLe8Xxbm70koxspqeuPdluNT0h55ZXjmy1mFYIEZ7G7s05fLL6JasqeZ7f%2FmPw%2BJ5Xx6%2FZCr3NVHG6\"}]}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9a416404bf1eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6c5a894adbe6ee95e6dc4e2b3e698655","sha1":"96b5ef4f73dd015ffa01a30cc648f9a3fff820a3","sha256":"9732513e6997c66fb3c21e87b514b29bfa3dbe3a165d634e75c93bb35c080962","sha512":"0746ec89b67b4426cbd242a27ea8e3b3cb8b6c5a555f6a9c221c83ad6a9d0596bc6fc8d3848ca46bbd7eb083a14422018d5f79a295993cd9f303a0dcea2266a2","ssdeep":"48:vMKAa3Qm+aZwH6uwB+I4BC7hCZwaB9WhdsO/5goVAyVt:53vZwa1sIqCyrBAdRmc","tlshash":"659161acf436d01edeff4a31d99bd2f05c248f10d20d805ba16a7da4363e95778aa950","first_seen":"2025-11-25T13:11:40.6733Z","last_seen":"2025-11-27T03:14:17.011312Z","times_seen":4,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/zeus.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/zeus.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:34:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 50060\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UaNzyeryzbIizxbahdmaNOyCReeLCO65PuvUpT%2BJreXr7O5M%2Bm%2BE7ijYqum2bG%2BJl2Xq%2B7Idm%2BPjXK7uQnu9OZAlTiEDzoglSwFqjqsxq6JE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcce53b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":50060,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6b35d4781f69050a60c8333cd0c213c","sha1":"2677d6a08523588d9356b5927b277a50affd7c46","sha256":"a227e0e58f7b9790ee82398f497c7448005edc41bfb3381689bd6e698b9b6a3c","sha512":"9b93b994dce77d73532a291f2899b1c8d92d9ac61ecbec28f99552962649624f797c11e3b16c01b5a2831d3d0d8e5e97450ef2e67e3d869dcfacd1bc543a2bb1","ssdeep":"768:bYytYytYy2yQy9GM2yjV0jWBe5Wxw9HeLviQkBt2IyaUYQbZIyEeBN+exb9qzk7B:bJJXx9PA179OiTBtAvZIpsIeDOxkM8","tlshash":"1f230239be23b357ea39e6b47df09af411f308a5eb3083e9a498167245400f09bc71d9","first_seen":"2025-11-25T13:11:40.674199Z","last_seen":"2025-11-27T03:14:17.003069Z","times_seen":4,"resource_available":false,"data":null}},"time_used":910,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/css/styles.css","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Nov 2025 13:14:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1015\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3yinjQAUgc1nImBcF1C2cbHgPLlqeIqpN50NeqqlQOx0o%2FBjeoO7uXTrGJAyztTpT7BlCpehCW5mVLMg5xTmFyTdqPcI%2FP2xttRQQxIXfMU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9a4163fcbe51b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2481,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bb1feb3be8d42f13d5ee8abbf86378f1","sha1":"9422ea757e2f308918359ac6eb17b693a92964f5","sha256":"b15d2207934a673e1605dd2e2b4967965aa3acc17042409a9d162f158f518b3c","sha512":"80f0cadc86cf1c072cda3b5c01f7e94a775610405d3de9935735db737eb37cbc2d774d9e7f00c8064bcf53f61fac79c339eeb8a89a3e0b06bbb0252371174d4b","ssdeep":"","tlshash":"da5151155a143016823ac7e6afd35244fe6e00139b4a21edfec4f7544fb90bc9426eed","first_seen":"2025-11-25T13:11:40.675039Z","last_seen":"2025-11-27T03:14:17.014716Z","times_seen":4,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/starlight.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/starlight.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:34:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 79744\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUGWIf%2FcIjX0EPjAPSN8JJtnEL%2FIoScwG%2Br89BuzWp6nAapSOjmIqLKOVfCv8hcQhFeBvx4zgkv9WxpKCg0YZjW%2BF91%2BPqh6QPgAyxQQeAVf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcce54b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25cee70f022f382c35294f62539633f2","sha1":"bd88d9022ad46a534e97f8dcbc084ddd2ca223fb","sha256":"d9ba2ad3b0840b49a157b997b26c23b91c52c5ac214d41d90315373118b0263c","sha512":"7a809521fab373d7a5dd3ca737f80c063188264f1fd6ef348d891c67adbed8efd61f052004c041368046ce3e196b0bbaf29631fbaf08f2fc7aae8d86c27d5a86","ssdeep":"1536:yJJEckIRxXrwi6yGq6aLHhRIEiDkK3YcDmSwz+Xdhylf/rlu:yJJEcdxLHhKBtsPlro","tlshash":"d173017c3b20811ae9e4dc78f8f07b9a85609aa9db3091147d39373259d2b02f7cc525","first_seen":"2025-11-25T13:11:40.675878Z","last_seen":"2025-11-27T03:14:17.024443Z","times_seen":4,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9a4163fd3c2ab51b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 378345\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 25 Nov 2026 13:11:12 GMT\r\nlast-modified: Tue, 08 Jul 2025 08:14:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01JZMHK6A5YDBGTRS8NHGNQCS4-ord\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-04-04T21:53:25.782813Z","times_seen":16168,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":21,"dns":10,"connect":1,"send":0,"wait":40,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/bigbass.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/bigbass.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:35:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75142\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoJaV1rgdriVYqwyMvRxn%2FcXifnz8ctPfu8R9DS921NqdJlqzujiQKX2LTgNpLm3JifENxeKCgbKFX9FLMXDy7ZF%2BTWoJ6bHB%2FhxfuPOhGSC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcce58b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c21274d563825b9eada879525001aff5","sha1":"13ec7a5a7ba0841ec2ffcacf229866f477368490","sha256":"ffb75dc22399f6fc8047987eded0527d8d40416fab837f1936b0354fb1b679be","sha512":"8f3d8a81346ea85fdcf4d2519bb8365d347ed5dd6e06422580d8dd86212c1b0fc88a50a67eb3183d4ce592ff6804fbec185eafbf0e4723b6aa06d97c01a32875","ssdeep":"1536:yJJBFRxhOnZ5oNLtzkUk06RJ8bAN5IXxUrenStUWRWGdtdk+Xth:yJJRxw6kUk06RJyAN5IKeSrR3rh","tlshash":"8a7302745ae36936fe625d3d18e86bc183fa09682211dccafa757c5f088e41e7b2500e","first_seen":"2025-11-25T13:11:40.677044Z","last_seen":"2025-11-27T03:14:17.009816Z","times_seen":4,"resource_available":false,"data":null}},"time_used":851,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":340,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/BARONG_SACRED_BATTLE.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/BARONG_SACRED_BATTLE.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:35:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59544\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cROlYE5jtTNcahEk9tJhiY1u5OMibB7MkCBjTCOcnLnuF72VMyuaPDrYvr6CY%2FCNx8W1bC5TfMSa1BYEz2RVTU2LhV7S6uYvoAsCRb78Y1Gt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcde5bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":59544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cddfcfed412919adc558559a4c89fbc7","sha1":"56636bdac8c13558a200296e0d3284a4f4593b2d","sha256":"514448301cacf6bff027abf54e87de1314af1e9cca4f7ebc6f8bfa457101ff7e","sha512":"213d13b70722fbae5db14f17879b1cd310a9ff5439ed2db5041c6e06def48c054dfc2f1eb438e2afb2c4a8df7897cd2787d7aa7702d7d52e142b2c0aa805e2ed","ssdeep":"1536:BgR8Z+DTwcQDIfvBig1p+kbi1TrUPJE+clZfXl6kOcE8L:8vTanrwmfXl6k/L","tlshash":"c343f134fa53b51aeae0269d813361c85233dc756a30e75f6348df07982399bc8f546b","first_seen":"2025-11-25T13:11:40.677724Z","last_seen":"2025-11-27T03:14:17.021705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/vs7776aztec.webp","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/vs7776aztec.webp HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 10 Nov 2025 13:37:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13674\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaDB00kNF9fqZTwdsc9EXmAAK7fb7rCCDURbx61TigMvfJ1fv2h62F0O6rPmBa0hBIz6ZkIu3JGpzQIn%2BfVJATN2B5tmsac%2F0eQp4vJ3I0eo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcee66b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"598c70d43592c891b368dd2411875a8f","sha1":"27a79b6d8a9335d074ce197496f018fcd6098ad6","sha256":"beae69c256d198cd12c58449aafedd0f29a612f3b44ae4264c41809add118132","sha512":"5fedf62512d46963ee8a4af12891d10ae941034d0917c62ad776e1b90e59fc281c2e78a53254dc1b18369b0ff62f27b004cea4338128a72f43401a6ee831823d","ssdeep":"192:dnzJcRfEW51GA9yb2nWWd8axoGZbIbK5f62vYrz7N+ZDCtKI/A2Uykk1iXlDC81t:dzaRfFPlDnr8aPemvM784tLwtkQXljFt","tlshash":"3252bf46a15e6e70bca1a81351eea37196ccf33ab7e90b71dc10b2d417d8a863393558","first_seen":"2025-11-25T13:11:40.678716Z","last_seen":"2025-11-27T03:14:17.022456Z","times_seen":4,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B9VJ28CV30","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:50 GMT","end":"Mon, 19 Jan 2026 08:33:49 GMT"},"fingerprint":{"sha1":"48:8A:E6:98:60:86:BA:71:57:34:7F:7F:AB:BA:86:86:8F:73:20:E2","sha256":"AF:F1:47:F8:37:C7:C4:95:30:91:49:71:1C:6F:0E:A8:5A:0D:92:0C:E2:D9:F4:A7:AF:27:C5:6B:39:0D:33:46"}}},"request":{"raw":"GET /gtag/js?id=G-B9VJ28CV30 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nexpires: Tue, 25 Nov 2025 13:11:12 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 161819\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":508088,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"d0c5cd48b6782e28e2f846e0b59ee034","sha1":"7c617d4a77a62454e654df1dfed7c7b6dcad9487","sha256":"07ec5ba4d69cf214306562aa978d8c175d14696b5fbdde9d44bfcf876a5e72df","sha512":"f3a084df1b4ed584c9ef6197cec7d946c2e8e8017fb85e90261ab6b3f73f5c23c719c52ef50536c19a166ba1020fcb3b91fd8fd5ca2bfbfb33ff56bd09172ba1","ssdeep":"6144:jJD+BUKitJeUI2XDsUUHHUVWo6O7GQEO7+s2ElV11oOraIe:1DyDi2UnoUUHBO7+My","tlshash":"5db409df73c67426639af478502f01cba97b24a2b45cc8aab1c9cdf02d3459a4167f78","first_seen":"2025-11-25T13:11:40.680564Z","last_seen":"2025-11-25T13:11:40.680564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":236,"dns":0,"connect":32,"send":0,"wait":67,"receive":88,"ssl":235},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spinprotection.id/assets/img/logo.png","fqdn":"spinprotection.id","domain":"spinprotection.id","tld":"id"},"ip":{"addr":"172.67.186.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spinprotection.id/","date":"2025-11-25T13:11:12.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spinprotection.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 13:08:34 GMT","end":"Sun, 08 Feb 2026 14:07:08 GMT"},"fingerprint":{"sha1":"9D:56:08:F3:5D:D4:F6:19:5D:77:AD:F6:AD:DE:40:B2:E6:B9:DD:D9","sha256":"91:DD:49:1B:4D:F4:EF:DC:16:11:A6:2C:16:82:A9:FF:12:52:23:B3:97:9D:D4:18:A3:A5:84:57:B2:D9:A6:A1"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: spinprotection.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://spinprotection.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 02 Dec 2025 13:11:12 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 10 Nov 2025 13:33:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6936\r\ndate: Tue, 25 Nov 2025 13:11:12 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krcVVzvbL%2Bj7keDQt%2F%2F0uqYzIayBYPg8s5vQa6Zg52j3r1Xw%2BpCZ4grfpUZp2I41%2Fl8lixSKgreFp5UYZXED0IeYcvEITaBKg4ly0%2Fc4%2B1Qw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9a4163fcbe52b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 336 x 105, 8-bit colormap, non-interlaced","md5":"5bc58e132cce0c96d413cd1462e58a14","sha1":"ac86f6149c61d7e0c8a57e67bcb80f892cab67cc","sha256":"dd8582abf4d39497f4f4f486f763a6d60a082bd408e2998d0075faae5cd8a99e","sha512":"73ae08bdb39f276ef1d070f3d7e804e9c7b984e2b9822c0ec89822ddc8936a77a2e5217db13d12e61e737c596b193e7e97d965cf8fc67f272786da1f8ec01a25","ssdeep":"96:g1yTe5pHg2Qt/cLl/kMQNiPtI9pUigEWLU9EnQ9NSWRW/1+j2cu8M1F:aY6q9tE6MEiPtIHAL8qUIc6cu8u","tlshash":"63e18d08340448985f867ed4e48281cb07856fe86e03a5beedc63ee26df2b553ec6d12","first_seen":"2025-08-14T15:04:36.744949Z","last_seen":"2025-11-27T03:31:41.932125Z","times_seen":11,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-25","alert":"Sinkholed","trigger":"spinprotection.id","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}