{"report_id":"ad641c61-5ab0-40c6-8816-c43fb6d33f3d","version":6,"status":"done","tags":[],"date":"2026-01-04T15:48:17Z","url":{"schema":"http","addr":"Ksi303.org","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"title":"KSI303 - Platform Games Slot Android Resmi Terlengkap","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"ace335ce0578a79c813c91454a83443f","sha1":"4759bb2bf16e45b1a8176e093ff31b076a02f72c","sha256":"0efad4b2290cc64a2873b7c598cb5cf03215bb5b2024261a6beba682eb0fd7b7","sha512":"d2b2dae25a340002b9b8c603c4b6b547d5f885e9449a1d620a6eb6cab442c9e6cb0f807d959919c16dfdb1dd53439ac1b2a89b792d199f13c7046b6943f4d662","ssdeep":"","tlshash":"39e020e96c65c83565a0038610f5e39c1a6071907611d64482d9dc674f11fe34ca2958","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"Ksi303.org","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-08T15:48:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"ugy8n1py.snaslelv.biz","ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"domain_registered":"2024-01-09","domain_rank":1873549,"first_seen":"2025-10-05T04:52:28.024346Z","last_seen":"2025-11-19T12:07:18.039927Z","alert_count":0,"request_count":14,"received_data":2183957,"sent_data":6589,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ksi303.org","ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":45,"received_data":16871170,"sent_data":24542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":1,"received_data":281036,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-28T22:20:33.111263Z","alert_count":0,"request_count":1,"received_data":84989,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ksi303.org/_next/static/chunks/main-app-12309b691508e534.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"099bd202d3a289ba55d44ef441cefc35","sha1":"c692b4958b47d5205074a1de49f5150931816056","sha256":"035e00ade8582fa1724cc8d524df08314c19f7906ad94daa2ccfb6a2ddea0455","sha512":"3dd0921fa70124c64e3f8a1314088b976844e98b1bcca4ae17de77faee45cffd2c253a2dfbd73552e5da69f0a93ca4c3f3e0031864fce9e0eeec6566974391f9","ssdeep":"","tlshash":"a5f0e9ee269cf66f18276930fc575c22681f4035742b48942802edb12c73bacd7b180d","size":520,"data":"","first_seen":"2023-11-26T13:34:52Z","last_seen":"2026-06-03T20:23:40.293284Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"83d434355f2998856926deb224859a6f","sha1":"2572a32561ed014c701cdf8fd8349aa413c6f140","sha256":"becc1bb90392583dc8321fbca9b08a4257b8c5d16fc9b6acbf1d1714815c3324","sha512":"400c00af926412bb96e4d21b6e699a5aefa7f5f503ff831cee764d8abff41b0524ab7db05ee2fe9537995a9ea16b654a848e61f87f08d78ec513549ca8da8088","ssdeep":"","tlshash":"c8e028da75150c7270ed05f633b1a1187143120c68095d22cefdcd1468585c74c138cc","size":342,"data":"","first_seen":"2026-01-04T15:48:34.480612Z","last_seen":"2026-02-04T22:22:09.551641Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0329ac60cdf67d3c3279ca8ddd74729c","sha1":"546f571a971978b3c273a6094ec633eccecb26f7","sha256":"ce0dfc194d40302c7adccc015f7a40aa60b7ee3679baf6307dd3aa10d727ff8e","sha512":"a67384da1894b8f953bf82b2800151e1f2781d7c6e6a166297fa120cd0b532d5a7aabacb785f78bd22ed65a48a6ae44dbb9e395f093f308be8a5eca2876aaa91","ssdeep":"","tlshash":"c4e08c9fb25f21a0afcf61b7156221c8243f92193c0241606fdb85c511e2b56d7a7954","size":318,"data":"","first_seen":"2025-05-10T22:11:18.211539Z","last_seen":"2026-05-31T10:57:29.73787Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"99de9a2b8479185173e14470a66bd3d2","sha1":"8224d3cd12f21bb0652a23b75463aa4547e2a51e","sha256":"100dbc745a3e325893e66caf2efff4142e6c35da327865754c1f715e99327bd2","sha512":"7c5bf3d084a6da37169a7265f4ca487e23f9ed5ca90dedd87d2455441a307701bb8c360faf5bf3e546f1e1868377dbfb15c7c77c865d1bf67f56907af865de44","ssdeep":"","tlshash":"60d02320df4e9c1bcb79707c5939e4d2f03d07529954e9d3d900559444847155c04d7d","size":229,"data":"","first_seen":"2025-05-10T22:11:18.212406Z","last_seen":"2026-05-31T10:57:29.738975Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/chunks/webpack-e30d72a36c0ae6d3.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2064323a43699a1778f13c596d83a56d","sha1":"cef7928f6aee580a353f8fa996b301d3f47db1f0","sha256":"6def17b0527b9d3c34f5ec15ca9b597f4c97c2e0ceabc22766d53db5da10b067","sha512":"a757bb48f2e4db5a5f92b566faca5dd7b46555c1c01ab8e900b1598568ceebc3e3dafea1f16360381d00ba409fb9454952765734b55937fdeaffed4e62106034","ssdeep":"192:nCtMQ9AaU9NRLZVdbq+bxo2JLRjKRK6yaDBCJMe5:CtMQ97U1VTbqCJ9jKzDYJMs","tlshash":"86e163c93be4fc5735e270d4c42b6335b11fd023781e5892ea65edec68e44a9833aa35","size":7059,"data":"","first_seen":"2025-05-10T22:11:18.190821Z","last_seen":"2026-05-31T10:57:29.727934Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"69fc1fe1eb8966169be6de272f650812","sha1":"58ca47d9b56b0fdff78767cd4432335ab7d14c10","sha256":"b05257ea195ece773e3e55b86ac447099fcf0966d81532281cd73f875fbf0090","sha512":"d8c0ba99932b7b9b8bdfa490252683330aaaf5ef4bb7a21308519904643a1626f8feb164e358a18eb4bbcadcc8e4ea9c713173aeb4c814e12ceabe97b21269d4","ssdeep":"","tlshash":"310128d7e35c393780fe2167a3e961f93a3d10e6ac0208bb3d9d8d080581ac586614d6","size":769,"data":"","first_seen":"2025-05-10T22:11:18.213324Z","last_seen":"2026-05-31T10:57:29.740159Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PSVVBSWK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d43097eab161e2c7a0b5d2bc9defa975","sha1":"a5c532f8793098dbeac945a00adcf1dfd2768801","sha256":"17f36fbee59c1a97bceb50ff2d252a69d477db3ab5fbe5701f4704f548d0ef9a","sha512":"44f0c2b5ca927aad27b03e1762d5ae86155feedfa0b4b2220b426782a604afc85026d26b5178f7c607bf8fc8117f959005d36de3d8ab03aae2107586e59ce858","ssdeep":"6144:+IeJk2bulKYv9VHDmHYmyBFzfnsqNW8a0nd:n4bu7llDns8W8aK","tlshash":"d15429cdb3da746683a36474503f114bb23b7992f84cc894e186d8d42e74aaa4237f7d","size":280387,"data":"","first_seen":"2026-01-04T15:48:34.427343Z","last_seen":"2026-01-04T15:48:34.427343Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/chunks/1179-e1ca092b8d3f3375.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83162f5ab62925bf5b8aea2df5c938de","sha1":"c0840bbd8ce4e4b9b97697dac553ecb542e52245","sha256":"49e6f0d87e34f7c79be5328532e02ac02e7a6cd8f7289a2b382957627d965720","sha512":"21ed53389f9c0cabc937babc77a91c23d79c24c07c7552f5b7fdd857e4519869a199c688ac3dfd219fd0d983d8b534cc010d2216ace0ca55b26204100799fa1a","ssdeep":"1536:xDvWBLdr7nJHpIjbpZqjOsbri+yJA1qQO3rz0clb0cGs1KCkO:SNcVZWavz0ekO","tlshash":"c3b3d7b672d0f8e1079740e6843b400af3755c3a146f7490a3e6cddab9a14ded1a3f6a","size":112669,"data":"","first_seen":"2023-11-26T13:34:51Z","last_seen":"2026-05-31T10:57:29.698508Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"103c1ef1ed9a217dd8bd05bda14ddf9d","sha1":"8a8e11696cab145e833dee704b8d355dbafaf61f","sha256":"3138f04f6a1db82263c43944d66bdf0d375f451f6616399284384a38539f05d9","sha512":"a28bc101cf1632d198adf4466c51d0809593d08a52e9a3589790a32dd77efc5e141acc3824a8f3c31c479aeea6e38b9b0424bdf0b78620f9b9ced6159e2ce069","ssdeep":"","tlshash":"e8f0e9f3a76c392285f720672a294689303ee13524436da33c9bd1550459d80e2f7f30","size":520,"data":"","first_seen":"2025-05-10T22:11:18.214263Z","last_seen":"2026-05-31T10:57:29.743401Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7fce3abb14e0bc64a8fc050c0182edf","sha1":"89bfb4917b873d038d9033a887d53029200c25ae","sha256":"95d8a184aa5f01d7dbcc2c1e0f6be103c57b620933f53e437375d24d3ba463ec","sha512":"b039ee99bdccb0f3226788cdc8731fcbc2f53e770a01c944c1ea1cf57357e5d7919740066686362d008d6a0dbae985ae1997830c917ddf44804f8e6faef3083d","ssdeep":"","tlshash":"1f014995e31c7a3a43f913db69d873d8312c00f9a801ec47bc8cd8071556ee68bb04d6","size":664,"data":"","first_seen":"2025-05-10T22:11:18.215143Z","last_seen":"2026-05-31T10:57:29.744543Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84c80ee06f90827c34af542eecb9f79a","sha1":"2233ce08acb5c322cc6255959ed4485076f0cc0e","sha256":"47a024b4304af46081c33d1db7dcec155ddbdf12f0fc8064f5803b33ecfada45","sha512":"e4cd9635031f6cab01e377a8b8ad2e75063f76c6e225417c98fb65f98b3bf05e0886f12e3e24a1fce3f74713bb2002ac72e48778953e546ec05caff8bb8947e7","ssdeep":"","tlshash":"ec0147e1e3cc202709ee9010da3f9ada267d3037581a04577c0c5ded049067cd0b1986","size":748,"data":"","first_seen":"2025-05-10T22:11:18.216073Z","last_seen":"2026-05-31T10:57:29.747499Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f229fdb71349416971c001ebb21e4bbb","sha1":"aca82c33af11e200231e400be0eef95fd920f315","sha256":"7c800ac3f0697d982f27563c340d0982def13b7663fb30e586fb2abc27adce80","sha512":"a53b3ee9c4072c220ee85b852c2e71ad319abaf8ea555bd03a41e155d4845a1b6764baff233660afb6a0e309c3423edb0f1d1b379c4e5850c9c41e9ab82dcc7f","ssdeep":"48:t13zbHI4znI7+r2h33kTdg///LXo9suYmL32fdb/Id2FUabmCibHshB/dn7U7HdM:b1nldgOD6anY+LiSy","tlshash":"f8a10d2536681871c933715fb78fe14424baa20be504dec87ccd4fd51f918a84aba7ee","size":4786,"data":"","first_seen":"2026-01-04T15:48:34.487495Z","last_seen":"2026-01-04T15:48:34.487495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7424d5762db064c211f93eae7c826717","sha1":"713d2fe07c2014f523d601986316e0f4a28d7cc0","sha256":"f18288b3cadac9d20fbccf0f7d3acf3671635ee6495660787caf0e3c4db2d557","sha512":"07bd9fab645b368d267f75e0e3bbc25a241511f78d736085be43d64137b4990ece3b3961b81f67c9bfcf8a4e6faa9462995e2e5bb36f62f5b43f55b04b409af4","ssdeep":"192:6/W8pEJcXtHXCiOL7zSPTngIS74D1VooUJ/vPXppx87U5:Jtge7zSLngIn1VoBFvvDki","tlshash":"d922d6ce7205b018026555b2b62b78df916acc7fb8444a0fa2947cbcfb343c67299f91","size":10318,"data":"","first_seen":"2026-01-04T15:35:47.985693Z","last_seen":"2026-01-04T15:48:34.410895Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9530286b96b4fde72fcd9ab7ac44e0b0","sha1":"35434c2164815bfeeb91b140f86c1f57e522be10","sha256":"eb461dbc811b859b7e203cb3c41ad6230408b90d21803bb2ef3e1be71f86e36c","sha512":"3e0d8a67c7e5074f07ff0927f8959d58edac38ba3af76e0788f4045db0c72f3e3906b1b8dfca9d4c58f83fd7775e54638d4f983311c9c1979f8cc66854a19d2d","ssdeep":"","tlshash":"dd11c4753a1a5534c5c54147317de7a93e3260617a029044c36ccc255d18e9714efcbe","size":902,"data":"","first_seen":"2026-01-04T15:48:34.488972Z","last_seen":"2026-01-04T15:48:34.488972Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"803d354d8a7325cefa701d71ffc86c94","sha1":"9623dff8505fb7719be5f4b1cc55248665679c0f","sha256":"c010364dc306123ff6e3885fe44926eb16543b06534d790cfb6ad5bf89022716","sha512":"151646b9be985176a884cd2e98d2bd780bfe29a84e71108ca30ecd4719465956d6289cf4af8c50f90bb2772e7271c92f4780ddb552749217086cc67a7d2d0e60","ssdeep":"","tlshash":"7051905a72431a30ce9b1eff569b525065329113ed5ad22e7b0d82002f17a0db6fd7ce","size":2796,"data":"","first_seen":"2026-01-04T15:48:34.490478Z","last_seen":"2026-01-04T15:48:34.490478Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"86abb3cc987655e5efca8eaf77fe9133","sha1":"6a24c2a549a1ca0e3bfa18ef583f59778ac35199","sha256":"5ed904f4218ea69154c16656c1b2f3fb6f057ad3d78aa048735ef55053f5db5d","sha512":"f773ffcaf6e515f4e73f7663eead2b18c151a29a30544a8e9e573af2a1d2d9551c259497e5baf31aa01e99e683bb871e2a4ed9d0b8a7ee9a8452df4e5a66a647","ssdeep":"","tlshash":"2fd0a7993865c831a595034610b5d3956a6171907651a540c1ddcc1b5a12fe318b1958","size":217,"data":"","first_seen":"2026-01-04T15:48:34.491906Z","last_seen":"2026-01-04T15:48:34.491906Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea220b81d08ea719a86abf21ce7d62ab","sha1":"8ee12a36c846ec88057c9f1d42a87eaeff2c1efe","sha256":"a57bab7b8fd88611e00cdc1438350dfb149a14352cb8d38ddaddaab01cebd4cc","sha512":"4caafff8bead4cd70a5047d161846eb4c3841643d4b81774db4168a878fbf30bc3b72560f9ef1d387bdb68cde4a96b71bd5ec891b9376135a5a7f9c302b4a033","ssdeep":"","tlshash":"7611a36b32c26a314dff3ad72157c3c43b614493a91498223a7dab458f10fc0a036ac9","size":921,"data":"","first_seen":"2025-11-18T02:30:26.213947Z","last_seen":"2026-05-31T10:57:29.750329Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"809870de1a4217817fdf68e929a9a297","sha1":"5a5ea8e93bf09532e2c626fb429bf951dd44aea5","sha256":"389293e2df124cf454dc23d705eb541e1437b93b508fc14ea93ddf1a4673498d","sha512":"88e63185e78624f794a561cc9e6de0acb977c8156b02377ca910c9ec058c131045599d35687cef7eb9c56d9919a4be5f28ecf1ccf108c5385e1a106ba14b4067","ssdeep":"","tlshash":"5011452cf68372600ed3a12f67eb527456aca12362568a0d788e83604fa7d24a459bdc","size":922,"data":"","first_seen":"2025-05-10T22:11:18.221545Z","last_seen":"2026-05-31T10:57:29.751502Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs10noodles.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs10noodles.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 132007\r\nx-amz-id-2: oxpVnPVXqhqf5MGfJDBovPQEv1AMrfDJZRop5QDJvj/58N3Q4pzbmPawSSOtWllj5dvofdaANCA=\r\nx-amz-request-id: 3NR8HRB182PETEK0\r\nlast-modified: Mon, 04 Nov 2024 14:09:43 GMT\r\netag: \"10a4aa261ab7212425da5a2662b984b7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nx-upper-cache-status: hit\r\nvia: 1.1 PSygldLON2sq21:2 (W), 1.1 PShlamstdAMS1lb17:6 (W), 1.1 kf148:6 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8bad_PSrdsdgemSTO1sw92_14936-21901\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":132007,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"10a4aa261ab7212425da5a2662b984b7","sha1":"62d16d54b0734de46d738f8b27105fbfda63fb82","sha256":"2259c0d558958f89ac6e237f50f40d27bdeca195dcdb8adfdda9eb4438deb830","sha512":"dff038bd26d5ddc40f5b85c6e2f1242997cbb79f7e4b6cc9822dd4f65d0ee710c140b14fba997f299976c47f63b6383f7d83196ba48c36ec7e66b7c4d45df334","ssdeep":"3072:A/mZyoH1RjdYGW/yI0/FiW9w+KfiWDlJR9oJc7:S0yoHfdoqPFiIwXHd","tlshash":"4bd31291c64c1fda82fdebe125876494ccb22e81d26577e02f35ea33c76eb2019e2645","first_seen":"2026-01-04T15:48:34.384916Z","last_seen":"2026-01-04T15:48:34.384916Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/css/b957ea75a84b6ea7-s.p.woff2","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/css/b957ea75a84b6ea7-s.p.woff2 HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/_next/static/css/0a4ae62ed810513b.css\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:57 GMT\r\netag: \"1ea8-670d923e-96a533;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7848\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0EM4FJ8E0a93qvyCkZKhC0DfpVtKSKK2RAtGpq7Z7v8iEyNiUKtjlmPwKmTay3WHZ3rMPo%2BKdrUy0XAdasaWIO2xMTyvTBSf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09bae6156bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7848,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7848, version 1.0","md5":"0bd523f6049956faaf43c254a719d06a","sha1":"6af69d307c33af0f3c4c3eb96ef01ea4390f474e","sha256":"197a3cbd7290c242c5c765268cdd69a9a39867fdc80cd13071f243a81c56fb76","sha512":"a0729696c915b1f08b1cef404ebe621c6031812b733107c423b39eeb6b4d852552ffaf2fccffbfe08259f43d532f53d649665be186c26add8bfcee483a9af7e4","ssdeep":"192:K2JJwUQALPlHurxh27HviZ+x5BTbwNA/aGyGhXFUcbtXCR+1pH:nJKUQABHuNgDig13cSHUcbtI+1pH","tlshash":"60f1af5411a00b08e206937903d638e15d977b1c99fff8684d0b5092fdd75f2b8359e0","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-06-13T16:25:04.923329Z","times_seen":15977,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":719,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs20bblitz.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs20bblitz.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 134572\r\nx-amz-id-2: S5QbXImjMsqolqqfs1tVmCe17ht/kRywuKrdy2x+BK+z7p5E0WIUUGBPX2R1ZhLWUMbk+4Ui8jQ=\r\nx-amz-request-id: HKDPAMAGNTR6JSYP\r\nlast-modified: Mon, 04 Nov 2024 14:09:45 GMT\r\netag: \"67ca58d2799ba0d9e22be7bfc2c16191\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSygldLON2sq21:5 (W), 1.1 PShlamstdAMS1lb17:14 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-upper-cache-status: hit\r\nx-ws-request-id: 695a8bad_PSrdsdgemSTO1sw92_14936-21902\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":134572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"67ca58d2799ba0d9e22be7bfc2c16191","sha1":"abe3ac962ad7f57b9a05c5adb6dc17f18d777c13","sha256":"e6702c5b412c5ba69bc582ece0fe0090479a92bc81bd6d4db17643a29c780d11","sha512":"c85f26ae8c4c83c445aeb7db9efb8c06396a0416ae353d722885e52aad518ef9a5981b7bb0ec6e4fe2193e9120d10c6b6fbc5781f05c129a6c45705b4f6b0a8c","ssdeep":"3072:y64cHS4Zv+6qOCPi1GPaNjkEhe8sYpHIKh0iosrSVocua8f2zyajOAaZjMs2:Mo+6PCK1GP+IEWmHbGiooSmc4KiAahV2","tlshash":"5ad312e2e431ecb24d54a3397aa67923eaefb221d1737260f555600db747d8601b4387","first_seen":"2026-01-04T15:48:34.391651Z","last_seen":"2026-04-29T21:57:18.406424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/slot.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/slot.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"e5d-6710b73c-96ac0c;;;\"\r\nlast-modified: Thu, 17 Oct 2024 07:05:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3677\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVG4rdp8H%2F9kprFamjrPkVy0sdXaCwmPJh37Kd5rzPncnY0ZdZul0ixiZM%2FK7%2B6lOHUn8aFJRAaSyLqo4KAVyDTdCHrsPi7t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a1d3e56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ee40967a45974c9a7ff2b296f4801a87","sha1":"d4e871a6282654592ba2e0890dd0991abfb05492","sha256":"2b0ff6882dbca4d384d00866c99d4b2964e9901a26367a92c821acfef69aaa43","sha512":"07d4d5be80475bcc5e8ffdc581e61d2f85b1a94aae4c961301a1cd9ff7e2d51ae64ab306b89ae66c1f9283ad1a554c5a6483213d2b9d265a799eea401bf29907","ssdeep":"","tlshash":"bd71f901ea12a690e669ff887a9ee1431f7306c1ddc26150ece9ce36a47017acc8d8c3","first_seen":"2026-01-04T15:48:34.395488Z","last_seen":"2026-02-04T22:22:09.466813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/6404286354_animasisosmed_mdvgza-_2_.gif","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/6404286354_animasisosmed_mdvgza-_2_.gif HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:48:00 GMT\r\netag: \"15279e-6719abc4-96ab47;;;\"\r\nlast-modified: Thu, 24 Oct 2024 02:07:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1386398\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJK%2FFxqYUIIZadSZWeYjbBaFWl4DGIV3%2FN9ciZ4lB9Gfq5GCDaOOmltxix%2B5Z0FOR6NyvfMYNpP0xawNUxTD4WctS87wdc%2Bu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a2d4656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1386398,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 180 x 180","md5":"49f244dd3f166be098a256c741946abb","sha1":"fe805be61039868313b4ec98d77970d82c7e1ec4","sha256":"b72c0fc539dd8b3437a040e1398fff603f84d90d5fa373ba1d8fb6bf2d700222","sha512":"a53de6f8aef69743b3c7e2c799e481eba1eceb1e985d1337a12311b215dbd6f3a80f59ed4002a2061c0cebf9ec766955e2431398eb670a83c066064739c2cc83","ssdeep":"24576:1UOIdhpuuPX1EicbHRsH2xNRmom7S/Pi3gUy1amd+:kppPF21JMS/ugd1amA","tlshash":"402523f3051c8992d4ae2f7d2d635b4b0d24bc8572783eeab96c389abb913d540f15c2","first_seen":"2026-01-04T15:48:34.397222Z","last_seen":"2026-02-04T22:22:09.460004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6274,"receive":3898,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/css/eafabf029ad39a43-s.p.woff2","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/css/eafabf029ad39a43-s.p.woff2 HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/_next/static/css/0a4ae62ed810513b.css\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:48:01 GMT\r\netag: \"1edc-670d923e-96a53d;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7900\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4cC7d0lTLH1SCt6U6z%2FhePEiA6X0JKS07JOE0TDJYeHadWUNJJCljKwAqh6U1Cj371NKFBKq%2BP7ZyDhSYZ%2F%2Bg0vhevH3xHz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09b9e6056bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7900,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7900, version 1.0","md5":"43751174b6b810eb169101a20d8c26f8","sha1":"7e48d54b1df1d3f657fc90227590308183ff9ddc","sha256":"3dc5d0c52428fe1696264907a1054ebbaac07f8cbe45832c105f819c2ae397c0","sha512":"a56307976583f9f0dd41ea34a3878c1fd69d5f89577664c350be014f6485da077cecf03f315104dc00e3cb0b6036d9b58e602ca19e963bf500016f090ca80ff2","ssdeep":"192:J2+QXwv9y8UEem7iQD+hqsNl3ahSFsd8Rq0s+Hxf49:J2+9vI8XX+DxrFe0/f0","tlshash":"dcf1bffef23115d580b66bb6c307bf24d9298147fc772608a61c6978a4e9f0c194cf0a","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-06-13T16:25:04.923845Z","times_seen":21045,"resource_available":false,"data":null}},"time_used":4577,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":4576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/3397083227_qris.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/3397083227_qris.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:59 GMT\r\netag: \"17822f-691c069d-96ab50;;;\"\r\nlast-modified: Tue, 18 Nov 2025 05:39:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 1540655\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BTA3Eu1RzkLYxDIl0NvVF49LziRv37DyB591V1J3Ju49UJkzmnpMAJmZvQgD%2Fdl3XrAnOu48XGgNDxouxlefuF6fYfQWbE7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09c4e6956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1540655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 613, 8-bit/color RGB, non-interlaced","md5":"bba2b4a3c1c22d1741aba2e479dd9dff","sha1":"c6b72fb9037e803861240bb39edd581d1a2d1394","sha256":"47a8ec94ffc876ef32cb71bef575484a51d5adc0b73007ba361612d012c760f9","sha512":"b3e97543358b24e3ff4adf07af88f18785a5617ab759613dae7548b0d0da5ef25f34a232c2269aad45450b2898f466cba54e8fe73f1030b4c753b71e8ea99377","ssdeep":"24576:etCDGEkF4e/D1LYYGFlcmRPLNCwqSbnD1XKTEz9Ue:2CD924e/B92cyBCvYnDgTEqe","tlshash":"d02533ac3a592cf3c7a8d6b2fbb5c39137720aa501011e9c66da3460a1f7d49d7f24e4","first_seen":"2026-01-04T15:48:34.401569Z","last_seen":"2026-01-04T15:48:34.401569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1695,"receive":2117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/ig.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/ig.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"659-670d923c-96ac04;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1625\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zl8Aak92SPAoeiCk1AsGaPmmaU1YsuSHWwI4ktfijAyHgq%2BAbHEmgKP%2BcOW6LyRqtyLsKd9NpfYDIFBd%2Fi9Nl9PBj60RYYrl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09d0e7356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1625,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ec5e59c20f97a79eb6ad66b1979c66f2","sha1":"d8def5e2957459cb1f88992e4430d3631b1b0110","sha256":"09972e9f6c5193c7e1f2028a5b8c51ed430d5bde510b374aaf7a1c086ab8762a","sha512":"46ac5964247fcd0d5c7124eebcad5bfcd3cc76a6d1bc7db1f20cdc7aa7507988563ab51859d61164a9ae7764c3bbeec7c39ef4d0c16441784d7295c53578612a","ssdeep":"","tlshash":"49310afeaf2c41ee951e0a8cab476d888307c0f4870693a10c2c4375f3aab4291a490c","first_seen":"2026-01-04T15:48:34.403884Z","last_seen":"2026-02-04T22:22:09.519692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":652,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":652,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-04T15:47:53.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvuJTMOILiYz9%2F97TgcIAJIajbJFh97EVhQXH0UZQAFTr94xolaVqPJnTLqXhDyk6be8aazWUP%2FPBysbitSx2MkojNM7nlKa\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b8be08299e70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":177203,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5188), with CRLF, LF line terminators","md5":"dbfefd5fba44b4a8d68b3d63384c1ff6","sha1":"6cf5a61af1bf1e073ac51da045e98d760ef7491e","sha256":"5c342ef0e29ef2d395ab25dbc4abdeaae5ea378db434679d248f1853468ab454","sha512":"e7500bc0a5930b4fc5c424f276113c9bada040f93b965d4245181b7ca59f175d79d77bf043bd77d0116a6832762fc0e439d80887b9dd8625bd1f7e73664373aa","ssdeep":"3072:nyOpmVWJxJnwbHBAHcgtty9qGvsOgr8zI55:nyucgttyJmR5","tlshash":"b704daa472c80a6f127783d6a670fb84f65fd673d723499df2ae21631f92c908c13168","first_seen":"2026-01-04T15:48:34.40596Z","last_seen":"2026-01-04T15:48:34.40596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":41,"dns":12,"connect":1,"send":0,"wait":859,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/poker.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/poker.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"12a9-6710b73e-96ac09;;;\"\r\nlast-modified: Thu, 17 Oct 2024 07:05:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4777\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8Pe1%2Bl1klTaKcPWuWbZaRuQHJJLz6ZXWQcQyggD%2BJgb%2FKVoeSxqWJOnoL35N6FEGu4CKgAmOzytzkD6ChOfTqbXyAO5%2FwyJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a2d4356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4777,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"fa19dff01b7a4168d148c0f4ec785d32","sha1":"9add6559bac1d5f5fa53beb555f9486c91483dce","sha256":"f6dd6b20f5dbf15853462afc9d09f34b7b0342026211dc22ea6173568308d737","sha512":"4aee41fa560ed2d3a241f4f26ecc4796220fb800bd6a84b63a5cd49772b1504545a9e5d8f5d6d41d3a79e330b4de186c011a6c9f7c666e2a490aae168cc9d3ff","ssdeep":"96:EknmWp8uAzy/UsHbHH/HoVGB6vXFR2kchWjghjZNJD:EknKzHs7HfMXFQ3caZvD","tlshash":"34a13a19fd015d80da48eb1925eeb19b1f7347c20b86f85478eada27a1212fac89d1c7","first_seen":"2026-01-04T15:48:34.408017Z","last_seen":"2026-02-04T22:22:09.526791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/css/8888a3826f4a3af4-s.p.woff2","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/css/8888a3826f4a3af4-s.p.woff2 HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/_next/static/css/0a4ae62ed810513b.css\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:59 GMT\r\netag: \"1e3c-670d923e-96a53c;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7740\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFtS6t%2BZhyTrcn%2BRSZfcrFpnBHA6rh00mN8M4fNjvUvzK7sto4eBvMjjWCNdUmZrIMj%2FAG1eTRl0F9jmDusll%2BRhRahjO0I4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09bae6256bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7740,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7740, version 1.0","md5":"792477d09826b11d1e5a611162c9797a","sha1":"bba020c0fd0426079872fdd7929a260b414845cd","sha256":"289e0afc8be731a86822349e54557296f145926496bd2138db1bac0db77f77a2","sha512":"20256b7428ae94d47202827e0d655e298034108cc927fca3a43eda383b02fd42f0c9e7551eaffa0ab4fc2e80528d17166aae09226bbf3ad21f666f08aeacc4ef","ssdeep":"192:dxQxGIAcBZH2KRme6/xXOTTsncYsl62qMXApY:LQcovWK6YlYsfL","tlshash":"88f1bf724a9790cac6e1592b83507e1ea877abdc3a4bcc1fd5d270ccd4a299123cc85c","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-06-13T16:49:32.58472Z","times_seen":10571,"resource_available":false,"data":null}},"time_used":1864,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1862,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js? HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Pz%2Bug9ez%2BPVdT4ReQonR5%2FxWuGj%2B46uUMz%2BfuJKvyg9ixCYeq5xwF3iS0tlhclDfQS59vBIdLlx3ohfMNLr7Om2lTrXgge%2B%2BFYxABX5RFJvxmWylpUdix0%2F31P%2Bk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9b8be09d2e7856bb-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1077\u0026min_rtt=328\u0026rtt_var=491\u0026sent=2933\u0026recv=306\u0026lost=0\u0026retrans=0\u0026sent_bytes=3420502\u0026recv_bytes=24745\u0026delivery_rate=76923570\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=25360\u0026ss_exit_bw=2562739\u0026ss_exit_reason=2\u0026cwnd=107569\u0026unsent_bytes=0\u0026cid=d3fb538b218ef2fd\u0026ts=3388\u0026inflight_dur=414\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10318,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10318), with no line terminators","md5":"7424d5762db064c211f93eae7c826717","sha1":"713d2fe07c2014f523d601986316e0f4a28d7cc0","sha256":"f18288b3cadac9d20fbccf0f7d3acf3671635ee6495660787caf0e3c4db2d557","sha512":"07bd9fab645b368d267f75e0e3bbc25a241511f78d736085be43d64137b4990ece3b3961b81f67c9bfcf8a4e6faa9462995e2e5bb36f62f5b43f55b04b409af4","ssdeep":"192:6/W8pEJcXtHXCiOL7zSPTngIS74D1VooUJ/vPXppx87U5:Jtge7zSLngIn1VoBFvvDki","tlshash":"d922d6ce7205b018026555b2b62b78df916acc7fb8444a0fa2947cbcfb343c67299f91","first_seen":"2026-01-04T15:35:47.985693Z","last_seen":"2026-01-04T15:48:34.410895Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/3381436904_ksi_rev.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:48:00.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/3381436904_ksi_rev.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:48:00 GMT\r\netag: \"e18b6-691b191e-96ab5e;;;\"\r\nlast-modified: Mon, 17 Nov 2025 12:46:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 923830\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQlb%2F4Rv5LOxWes2Uj%2F4hIVqMGkx56M%2BQC9KEb1QuzoBHsLhc2kvXR3YUEtnkAjM2GngjbI5weCkndUjD0axlMgU1YoIR9mR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be0afaf3e56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":923830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"9e795e3ee3756890e8f3e04b4689fb57","sha1":"e32e1f02625ca758c7c3d8c17bdd8e8a0c49e2ee","sha256":"4fc076a0ce92c2622e77b0f0c5b08974bf8c3558c69c73bec970358f07fab57f","sha512":"a9b88e7c8070d6c0b65b5719d5501949be2edfb9d7b12ef5f0dd32e435f1650708c23955de07b29a8fcdf5704e064b2b548ef4aeedabfe80cbd88beccdcf758e","ssdeep":"24576:Hg46alIxzPAHPApEsDk8kaY1EBX8i5yxY:A46alcAHPN8vIEl5y+","tlshash":"2615232c224d809ae738ca7368b82f9fde43865dca44ad127427e71dadc7ec5c3116d6","first_seen":"2026-01-04T15:48:34.412752Z","last_seen":"2026-02-04T22:22:09.490989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/uploads/hot.gif","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /uploads/hot.gif HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:57 GMT\r\netag: \"37ac-670d923e-96c79f;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 14252\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2aic3vN4IQ%2B4d92hO4u%2BxUY98N%2B2YMIHv2BwpvWxVTH0m2hD6tZjST22pEJ%2FzqRkK0AtiBAfrnyidppnEi9N90YEVZeLmAjZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a2d4856bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14252,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 50 x 45","md5":"c35f1e638a4a1676ed49e3a63de16699","sha1":"6eec0391eef44ac25bf0340681c2c58a14bdfd77","sha256":"01108120d56375914f5397bd2286407ff5161d6572611057e9574e01e189223d","sha512":"cadd98e3f949476589e1e73abfcf4a496bf7d05e92e741ada2b6d09380a54202773c3e08217e21594ec97efb56b244136958c301d0801c94ad3dd8d893f842d4","ssdeep":"384:KjCfiLcXI5MEaSofisfXrBbXard3b+IeQkSF8:KefFXI5mSofrPNuJ3b+IeT","tlshash":"5e529f0d7598c500826541ebf81c192e6a367fdcc930dd61b49c8539ec4fa6aa26dec5","first_seen":"2023-11-13T18:06:19Z","last_seen":"2026-05-28T10:35:07.938525Z","times_seen":80,"resource_available":false,"data":null}},"time_used":3408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3407,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs4096robber.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs4096robber.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 164640\r\nx-amz-id-2: BFBvsMebANSjzxAtlClGmK7teT/3C1Hlmu7JNhzG2XK91O0Yt0HmGVmOxjwp7iWlEeuMjBJOGLg=\r\nx-amz-request-id: 06SH76YZ1YQDT4CS\r\nlast-modified: Mon, 04 Nov 2024 14:10:00 GMT\r\netag: \"ccb7a0363e54f048ceec76ad19240abe\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nx-upper-cache-status: hit\r\nvia: 1.1 PSygldLON2sq21:2 (W), 1.1 PShlamstdAMS1qj18:7 (W), 1.1 PS-FRA-01E6z147:9 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8bad_PSrdsdgemSTO1sw92_14936-21903\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":164640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"ccb7a0363e54f048ceec76ad19240abe","sha1":"eb802ac66dcf5c8b565791c5c0f5022ba621d125","sha256":"3523af955409acf85a6ec4276f53be66fbd1a92ea9e69e0993ca087489668426","sha512":"cb903f3f2df61d2d702be4bf620039daefbc8d6b61dc173298890ce2297f3476ad85dca1b2d49f095bd02df966b32fa38d3c5c872fe1a39be57f44ddbe4e6a06","ssdeep":"3072:2eeFzdGSwqMetsh2niYNFtnAtjKXk1sAlHRuUvm+24F5g5Iu:FeVdGTqBscnPGjKXki0oUHBF5CL","tlshash":"54f31223d1455ff8bcb68d3fa7d5f9a60422ea47925a1b6f0c2011a66739c50ac3edf0","first_seen":"2026-01-04T15:48:34.41708Z","last_seen":"2026-01-04T15:48:34.41708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/9967265313_pulsa.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:48:08.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/9967265313_pulsa.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:48:08 GMT\r\netag: \"1793fb-691c0987-96ab26;;;\"\r\nlast-modified: Tue, 18 Nov 2025 05:52:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 1545211\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:08 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LXs7pUeR9c9B47vLH%2B5Y0weKZF3kK4zMkEm7uLSi0w9hK8lgbhxlCZFgwDl1C5eP%2FW9Qwo1ah2KnMK%2BjSaPXeF%2Fhcukeq2Vy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be0de091c56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1545211,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 613, 8-bit/color RGB, non-interlaced","md5":"46e2b34d0c2611d12bde0ec84f6f420c","sha1":"ad07b0e35260e0d23bb219aea69009413b71a50e","sha256":"0e0f5c6cdec0bc4e2e22c3eb82a922287732122e4b3c4bc6a69103ccb4f88c8f","sha512":"d758c041d703ea20a85873d0984ac593430823b2c7fb15baaf5f4f465216967a6f895c7b1a874d653842376325770b6bb08dda806938553b6eed59d9304be5a1","ssdeep":"24576:cBU/dOY+IiQsGzG5oE4YjOUeWctPMcQ1HyB+Uyi1UmjE6sHp5IzG:cBU/3sGhVYyT7tUb1S2zB6ip5cG","tlshash":"c82533e770e7c7b1451d41522f3bfd1efc3ae90e676f148c26618e720a980a685c8e5b","first_seen":"2026-01-04T15:48:34.41902Z","last_seen":"2026-01-04T15:48:34.41902Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4376,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":4083,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs20sbxmas.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs20sbxmas.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 149806\r\nx-amz-id-2: Zf+fFRxhIBdNdxabImKZWz+PE/Jlz1bIjxM8fBdC65nDlyhdjvsHbEo8eqMtcwgiUgST3lFYMoo=\r\nx-amz-request-id: KGKDVAB1E1A0MNZC\r\nlast-modified: Wed, 26 Nov 2025 07:31:13 GMT\r\netag: \"23b7d556a9982d09f01d9fb20fdeef3f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1763989374\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSfgblPAR1am204:4 (W), 1.1 PS-FRA-01BQV163:3 (W), 1.1 kf160:10 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21756\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":149806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"23b7d556a9982d09f01d9fb20fdeef3f","sha1":"6abd1c3ba4bc14542784823d0c99adec16d0a087","sha256":"238cd55a3b064d7f96ced7456f7b1ef7fcffb5508a2e70e94117d39ad4f6aad0","sha512":"251f5eafa7158e640b733ef9f1a5101d539be8c295892d8b394336d3da89bb36d458c8a51c60f7c7f5ec3e4cbd32143beb72dc7406a7078eb33589fe87d79741","ssdeep":"3072:KCRG07aNOplypX0LuNCLKeN1zn9ZAFlXbNsjd5i6Lc8v4nc3s4S5Ht8RFdjhJ5:E/wnU4vxwTy5ZL74nc3s4S5HwFH","tlshash":"dae31248409aaf934331422a3d6ddf7be2f410f76dd1dade026a69396a3b4d2e03d1d4","first_seen":"2025-12-22T05:06:36.549922Z","last_seen":"2026-01-04T15:48:34.42095Z","times_seen":2,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":276,"dns":262,"connect":18,"send":0,"wait":144,"receive":89,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/uploads/top.gif","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /uploads/top.gif HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:56 GMT\r\netag: \"36f0-670d923e-96c7a1;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 14064\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:56 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FudzOgt6jzX69xSV4q1tePnbLFKz91Ky6wksZS67Oj%2B0afbMpTbHfJIYjDmFqrKsW65ZE1z3Dz8YqRMLl1djx%2B8MXNYkNlED\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a3d4956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14064,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 50 x 45","md5":"9cd21c81d580c1ddeafa73db36322ec8","sha1":"96bb620bef847b7692ec1c6741bcce9820abbf26","sha256":"205ba172092731c4254a2c7d2dcc8b8c3afe6c6dc1f0c6dfc9977c4cf18e50da","sha512":"ce9f7276df303e76894dbdb20daa6f6dfa65dc995d21f5f0a481083370dc3a7d1cb78aa8f85556be4a2c8b3570e7499004d8b2516e51f98f76c293d90cde090e","ssdeep":"192:usRwTE5TBWSriCQ43jwZg8awdEMt7dcVvpFSgnPeQHNftKQP9yxq5ut:rR3vWSr5QGMS8awdEMthct3HNftLCj","tlshash":"a352bf0c8d9c6c82f19420b335ee575d19065087a974ecbeadd9b61bc4a883e706fec3","first_seen":"2023-11-13T18:06:19Z","last_seen":"2026-05-28T10:35:07.924675Z","times_seen":68,"resource_available":false,"data":null}},"time_used":2097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2096,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PSVVBSWK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtm.js?id=GTM-PSVVBSWK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\nexpires: Sun, 04 Jan 2026 15:47:57 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 04 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 98175\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":280387,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3299)","md5":"d43097eab161e2c7a0b5d2bc9defa975","sha1":"a5c532f8793098dbeac945a00adcf1dfd2768801","sha256":"17f36fbee59c1a97bceb50ff2d252a69d477db3ab5fbe5701f4704f548d0ef9a","sha512":"44f0c2b5ca927aad27b03e1762d5ae86155feedfa0b4b2220b426782a604afc85026d26b5178f7c607bf8fc8117f959005d36de3d8ab03aae2107586e59ce858","ssdeep":"6144:+IeJk2bulKYv9VHDmHYmyBFzfnsqNW8a0nd:n4bu7llDns8W8aK","tlshash":"d15429cdb3da746683a36474503f114bb23b7992f84cc894e186d8d42e74aaa4237f7d","first_seen":"2026-01-04T15:48:34.427343Z","last_seen":"2026-01-04T15:48:34.427343Z","times_seen":1,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":135,"dns":2,"connect":27,"send":0,"wait":61,"receive":63,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs40cosmiccash.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs40cosmiccash.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 163245\r\nx-amz-id-2: m/OZ49fG0aNYvsroNDRTKt0lR2aEvylUDpcMFWonZ+uvWxLFgsWfFGArIGqXaBheOY0E8EESCBaMD3kE/VISC9s54aYzU6mT\r\nx-amz-request-id: X9D78S8JB3HJ269J\r\nlast-modified: Thu, 12 Dec 2024 12:55:15 GMT\r\netag: \"00f8aa05ae62f1d722e1cb153d553f1e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1732559340\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSdgflkfFRA1dh205:8 (W), 1.1 kf161:19 (W), 1.1 PS-FRA-01nxn162:6 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-upper-cache-status: hit\r\nx-ws-request-id: 695a8bad_PSrdsdgemSTO1sw92_14936-21900\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":163245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"00f8aa05ae62f1d722e1cb153d553f1e","sha1":"16c39f9ac9ee30ad108422b53a6f6f2d2000eb9a","sha256":"729a8e9366b3374d35a9b0e50b8fd1b3e031e3b5cf44659a93d7d877db8fe0eb","sha512":"5399fe25f87b456d22999441af9718a11ef0acf6742df4d738d9a0d5c3fcf194240bcaf2801079c847b8a02be1f28a4549c23f782d0b51911719e9a5e80623d0","ssdeep":"3072:u1CWaVQRlphk9MqxC9l2YyXh+Uyq8Upq9yBSPpUEIWITbOw:u1CWaVUhiC9oZyq8UyyBSPpBIVv","tlshash":"e7f323c702c99931227481915d328011587ddfa7b7dbed693de23f8a508acefc5329a7","first_seen":"2026-01-04T15:48:34.429455Z","last_seen":"2026-01-04T15:48:34.429455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs20amuleteg.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs20amuleteg.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 167527\r\nx-amz-id-2: 3sjYCaL44/Wz5v0+3kwwqt3N/FlcVsqJFtcUlkmgWPO4LDNaYt99PtpkeYPqrnP60cuFR5IM9qjBuUtvSo7dkg==\r\nx-amz-request-id: R2D46CE8B96200TP\r\nlast-modified: Mon, 04 Nov 2024 14:09:45 GMT\r\netag: \"8a74c3d4d31a15904629987df8c8aa4d\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nx-upper-cache-status: hit\r\nvia: 1.1 PSygldLON2sq21:8 (W), 1.1 PShlamstdAMS1pu19:2 (W), 1.1 kf160:1 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21757\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":167527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"8a74c3d4d31a15904629987df8c8aa4d","sha1":"87f1519c645527c877d32e2ea57e39e8e0d6893c","sha256":"31fb30bf0fdf0afda5e24c3ae91605e91858c75e4bbd821e04c48784f3eba86f","sha512":"d4dafd53a4fdc813735589865f124149638e008d2ebd195ab3fe0a42b34bf4a2264f7306c8dbb7032e5746c6115be3a83d777f8603b91b53a440a3fdfe4e0ff1","ssdeep":"3072:jaMFFQG9PGFjXj/C6EP5wHntzFOvpMfQUX2Nh/FiKn/7Qtg8j:jhFiGktm6O5stzFO/UX2NbiKn/8j","tlshash":"11f313a1ddb59ccea78c2bf2f45a78afd614040252fc150967bd3eceee048dd2d51a10","first_seen":"2026-01-04T15:48:34.431583Z","last_seen":"2026-01-04T15:48:34.431583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":271,"dns":0,"connect":0,"send":0,"wait":99,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/4946789076_ksi303_baru.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/4946789076_ksi303_baru.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"45eccf-691b1d73-96aaea;;;\"\r\nlast-modified: Mon, 17 Nov 2025 13:04:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 4582607\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BDZC5lOR%2BaTAmsclhX8tqlzLPS3iV5t7QU4VZaqFXMvhUYul%2Bu2pyLi1c4s6NO6%2B5L8XrGedPm3QMelLyMxp%2B%2FkxqiZb%2FUR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a1d3b56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4582607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"81cc6f9d1db345607db1cdb1ab3d2960","sha1":"a795db40521124a6480fb2578c16a34765ea05ca","sha256":"2569fb6935dc16a55d65a932c1607a4e5d91c6b2c957bc74de341271ab835328","sha512":"e01c0a25de5969a28c1ea490f8c03e6eba44cb2000247e6f6aefdf6e8f66a793029de47bb9892201963fd70d17d9d91017b30ca3c88794dae31a94226597ce20","ssdeep":"24576:hAaGtrIPJnTFNcl4qnWf/Tf3MNsPO97zIsvaNSoSIzGNm:hAcPJTAsz493IDKE","tlshash":"3725238df56cf351396aca9f74b50451a49a308d129ac9c3d36a3549c93c632b630fbf","first_seen":"2026-01-04T15:48:34.433494Z","last_seen":"2026-02-04T22:22:09.493378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":791,"receive":3387,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/poker2.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/poker2.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"1abf-6711e79e-96ac0d;;;\"\r\nlast-modified: Fri, 18 Oct 2024 04:44:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 6847\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8la61SqHNqR%2BXKXb9wIIsbB6fQM5nZzyYKpURxl1e5lpzyTyJmsoW4xRZVzT%2FAegIkmmoYOSxqSvx5lmPOM%2F%2FS%2BPXq8TRtie\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a1d4156bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6847,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"7293365dae8afa0eae7f4843a32e3644","sha1":"52854b653e7b57948c6f93e760944abd919a9cfa","sha256":"7185901dc469558e88241b074c6da5530ec3853603c6600a67c2524badf7d6a8","sha512":"e69d060961e881c05fc75ede237ee9199733d874cd644b97104f1960c332e8b4a8e091560afba151a0cd853e3f1ad9b58f27c5785145b5fdbd37f3b4ba613670","ssdeep":"96:EknmWp80J/oHbMvHZHozxN6xxGacbSAu16UI4N4wWb0C7arSrI3uXhl9ibIAUWci:EknC7Y5roogmbeQihlXA5A6","tlshash":"c2e17d05c6011ca3ea58afb87addb3c2bd770b9155e2a5416cdc442b2c347bbd81c5d3","first_seen":"2026-01-04T15:48:34.435091Z","last_seen":"2026-02-04T22:22:09.468645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs20doghouse.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs20doghouse.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 165973\r\nx-amz-id-2: iGPhiitX7yHIF8FQ+yhckoo5TgqbcdwY0ultVA2stu+liBUn1bzSwyFw1tK2XOZnHckTlUTgNo7EYIHC4kCpimotwkRYP16j\r\nx-amz-request-id: J23X2BNWE801SF0D\r\nlast-modified: Wed, 19 Nov 2025 07:41:32 GMT\r\netag: \"5b9c143044fbac0eb8b25803d0a4acde\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1763371019\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSygldLON2wr19:0 (W), 1.1 kf161:16 (W), 1.1 PSfgblPAR2gc184:8 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21759\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":165973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"5b9c143044fbac0eb8b25803d0a4acde","sha1":"3ef9ce754c434ee45e40d3726c0fcf0c8ab25f93","sha256":"e2a0d4bcb0b56ed60957d37562da26085981a09bbf06e58521c2e4e7d5f62cd0","sha512":"46ce6ca37d61332ff1c9704228cd4725f071dd9c6165a57255fa32e28b23f3ea40cc030c33ac1d366c409b006fbe05effb98966c6a499fc190ca97bba50cdd63","ssdeep":"3072:yka8ru714pjwg4+r0OhPM0OiYavteNsW3FufmWaQlvO2QS8GVS+9:yka8+14pkg4Ydq0d9Q1ufmWllv2GL9","tlshash":"f8f3129a88f40f980c57b806442750c0e978a12b4ea152d5bdf3d7f7f56e683d7ea3a0","first_seen":"2026-01-04T15:48:34.436532Z","last_seen":"2026-06-11T05:15:44.207188Z","times_seen":4,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":277,"dns":257,"connect":17,"send":0,"wait":98,"receive":115,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs20olympxmas.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs20olympxmas.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 168577\r\nx-amz-id-2: EbM5GFoJNqP0yD4OBH+yXxg62hB+ykcsMMDm1h31hUX8XOQ6uMWWq5S0AVD0fPDHMGtOYS1Xrgs=\r\nx-amz-request-id: 25EZ4Z1PWJXVX2DK\r\nlast-modified: Wed, 17 Dec 2025 07:42:26 GMT\r\netag: \"48158b608ba3424434bf725829d0a8a7\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1765806672\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSygldLON2it16:2 (W), 1.1 PS-FRA-01BQV163:10 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21763\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":168577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"48158b608ba3424434bf725829d0a8a7","sha1":"7e20fa861a2b34f59e0923bbb3260c6616853622","sha256":"5cdf3809ebd4b709ddcc6f28f5379d4ce4d01950f80ef80a206e9f513d0292be","sha512":"8b80371091942f1c9585fdea79f7bbbe623db710d12636f186b6a604f9f26b0c3c298a231b875f054acf9098663eacc9c9ae72b32bb3456ebdb01c4d51bd2c91","ssdeep":"3072:nteXOLwkzJpXK0Hibr5TQAfSmikA0hdapVvCSBC4Esl1W+27:U8zXKE25TQAKkAlpVvN9l1V27","tlshash":"fbf322deba99f54d0007e2e2c42d0c73883ec0f714441dd1d856a1e99a96aedbee7b30","first_seen":"2026-01-04T15:48:34.438316Z","last_seen":"2026-03-26T08:13:11.039264Z","times_seen":3,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":292,"dns":256,"connect":32,"send":0,"wait":93,"receive":115,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/css/0a4ae62ed810513b.css","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/css/0a4ae62ed810513b.css HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:56 GMT\r\netag: \"1bdff-67107882-96a539;br\"\r\nlast-modified: Thu, 17 Oct 2024 02:37:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 16115\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tNAT%2FRg5YHfQyvqDWcmUfMuy8N0htvWQEUJuY%2FxdjTJi6SyDhGnvJz2AQyexpAU3rkVzdlTpBWda1PdsrGFBQHUwQ4oVLp%2B%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b8be08a0d3656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":114175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (310)","md5":"5e18cb520bf84a696397c9b98327a92b","sha1":"4b8b50c1c6d043041a28c7f81639805e5e88312c","sha256":"c0506c5056a73c9f67da69d2618b9f52f2ee61820ca57d220f41e24f538a2661","sha512":"f9b8da03e6a50392b441d17c5f1bcb5ad81872a6d13fb299f3a8ccdfb75168da292486b04ac35c5d2f1d5b6b609bbc3d6934d8110559a8f179d926b4e22c2e1e","ssdeep":"768:hqcrJ/ZAf4hURHw2c1FQLIlZ57QY4qO5VRarF0FRF6F0FRFI:tJ/ZvhURHw2c1iL61u1arCr0Cr2","tlshash":"96b3861a19f718245c6b60f99aee2555b62ad0c7de1fcc58feee30408fd02a0dc56f98","first_seen":"2026-01-04T15:48:34.439845Z","last_seen":"2026-02-04T22:22:09.514622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2704,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2703,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/chunks/webpack-e30d72a36c0ae6d3.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/chunks/webpack-e30d72a36c0ae6d3.js HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1b93-670d923e-96a55e;br\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2947\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EM65KnPbPVlBWdmD1LE4UjluyyW3Pg8%2F52CUEDLkUMqpftA6kuM79aCMRq5ckoeInfzt1XtKoA8yIt4bpq5k7DETcF6EKvLv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b8be08a0d3856bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7059,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7059), with no line terminators","md5":"2064323a43699a1778f13c596d83a56d","sha1":"cef7928f6aee580a353f8fa996b301d3f47db1f0","sha256":"6def17b0527b9d3c34f5ec15ca9b597f4c97c2e0ceabc22766d53db5da10b067","sha512":"a757bb48f2e4db5a5f92b566faca5dd7b46555c1c01ab8e900b1598568ceebc3e3dafea1f16360381d00ba409fb9454952765734b55937fdeaffed4e62106034","ssdeep":"192:nCtMQ9AaU9NRLZVdbq+bxo2JLRjKRK6yaDBCJMe5:CtMQ97U1VTbqCJ9jKzDYJMs","tlshash":"86e163c93be4fc5735e270d4c42b6335b11fd023781e5892ea65edec68e44a9833aa35","first_seen":"2025-05-10T22:11:18.190821Z","last_seen":"2026-05-31T10:57:29.727934Z","times_seen":8,"resource_available":true,"data":null}},"time_used":681,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/togel.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/togel.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"152d-6710b73c-96ac08;;;\"\r\nlast-modified: Thu, 17 Oct 2024 07:05:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 5421\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KjFhx%2BCMrt9u8b%2BHplzfnF5jdafvti0C1buqMdPMnxMhoObC23K3fJ171rZghNwmmBsNUtJNGx%2BbDO8%2F1ngaMuSblAEzQLD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a1d3f56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5421,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b25378e0f6bc5e4e31ae450fae1a4012","sha1":"fb6bb477288242d15e9d053b3cb6138b34705ba9","sha256":"f0591b61f1ae0d04e017c4e78faf38d5bf1365c2d3e42f9894986acb0852abfe","sha512":"37af21e3bcfa110ba4b6a686b347e3d653b86df8a5b751f0aa1b85a1a0c253e81e8fb98a5202806f803a3d088535d72a5a0d573bc70ac3336cd23184b735c163","ssdeep":"96:EknmWp8gbr/7aHb5HZHoGAbSMij8bHMDCCU4gaTtqFt6YD3tW7U47njQinBP:EknW755pd8buW4gaTW2njfp","tlshash":"62b14d196e41a8418889ff0875eca2a317779bc08781e0497cefde56e9b177b4c0c8da","first_seen":"2026-01-04T15:48:34.442929Z","last_seen":"2026-02-04T22:22:09.538628Z","times_seen":2,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs10fireice.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs10fireice.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 143414\r\nx-amz-id-2: zKk/+imZ+OLGoSVmmAwqz94XlOX3ybdErH7vdyQByTDYlVXo866j8fug7AYsIPUdmZ1In5iusra11n1U1hUgJG63yTHjrQNdx3xn16+BLCc=\r\nx-amz-request-id: Y11FSWJ1EB9WTEA0\r\nlast-modified: Mon, 13 Jan 2025 07:48:52 GMT\r\netag: \"52826ee2abe9f594eacf2f138cbc9f10\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1736410289\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSdgflkfFRA1fd207:11 (W), 1.1 PShlamstdAMS1pu19:6 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-upper-cache-status: hit\r\nx-ws-request-id: 695a8bad_PSrdsdgemSTO1sw92_14936-21905\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":143414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"52826ee2abe9f594eacf2f138cbc9f10","sha1":"901c51f5b1434bbec2c1f5daa2d4b5dc168e7c51","sha256":"6f835d6838dc1017ea04907b22c59f1986cd3a613e77c705fffc48e44792b998","sha512":"8377dedf2ca5bf0f1fe6ecb9f21656e2e364b963fd0d80f1fc9cdc6fcf2c5e9cf5eb180bd86e34a825127e4a9a5c93ce3838a7a4f13075cfa7a214a75f4827cb","ssdeep":"3072:nVsaZyoxa1XUPIx/VtdaH3Ro2A70l4JX2DxjDd:qjVkQx912b+JSf","tlshash":"f6e3129f0918a1c7e37333aae0f8b4d5edaf806a830d6d8c14e4d29d8c5e90d2695b57","first_seen":"2026-01-04T15:48:34.44424Z","last_seen":"2026-01-04T15:48:34.44424Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/edge-active.webp","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/edge-active.webp HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:48:01 GMT\r\netag: \"770-670d923c-96ac07;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1904\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:02 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnkaHPHAuAro6ljHl7kZci0EFCe%2BEsHgegJsZu99ge%2B%2BU0RWHy5z%2FW4SF3%2ByAcOrYdWWzrsxwIOfpfIjKqFxp0llhrovxzSY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09d0e7556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a770e35ab313d39cf9a3614d6442c27d","sha1":"3b72a5fb40a3bec17c1a658b2c0ad3b10c4614f9","sha256":"9b9199d23e9a262daf018835eb017d8e84401f2fd8b5ff8e96f7a841d59e1cf8","sha512":"bc36ec392590eb3850e7868188de28a144b06c45304e9178df792c0a62d26f17ef030d4bc0a6047662d804a2616a7c1d42aeef95cc41a6e2f544bb00e298a667","ssdeep":"","tlshash":"2641194bbbb63dcc335e0817674326205979c1b719b2db6272975e478068ccd0646886","first_seen":"2023-08-03T09:38:09Z","last_seen":"2026-05-13T14:47:36.044648Z","times_seen":52,"resource_available":false,"data":null}},"time_used":4467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/casino.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/casino.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"17dd-6710b73c-96abfb;;;\"\r\nlast-modified: Thu, 17 Oct 2024 07:05:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 6109\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FrAEhrTzM%2BEU%2BZY2EsazqFz%2BfLMKtmiyHctnMkYgrSnM2B3NolnpDVLaXlFTQfr3pkTWsNBCwHi1zGVE9lJfjy04NzSILw7l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a1d4056bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"2104301e1b4b0b15ac9068f908ddce95","sha1":"ceacb4532a73a04ea679e04ce9000dbcb526f984","sha256":"52ff89a8c9a3eaca04ab80095e10d0faa51750bc899e989ce2aac95836640387","sha512":"fa0d726842986d56af7b52d3f7752271e1d9f5505f4c8d1e66cf5218b348b8a186ba30c88609acc3c925b774ad340222db38cdd78302b68c0c9d23130fed7015","ssdeep":"96:EknmWp811c/oHbMvHeHoudLwcsFhsFPa3ojygRWROrSzv/CYkob55Wz53caVLRag:EknWN7Y+rCFUa3oj7BSLlkiC2aVL4jgp","tlshash":"b4c14d016d12bb41cb4cfb0b3aed5253177702c1cb85e28599aadeb7a4201addec8cc3","first_seen":"2026-01-04T15:48:34.445925Z","last_seen":"2026-02-04T22:22:09.532956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/promosi.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/promosi.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"d44-6710b73e-96ac01;;;\"\r\nlast-modified: Thu, 17 Oct 2024 07:05:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 3396\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NnHuwh96Eiv1ULRXGu6%2FTv0G5GVPjciNUGY%2BMHOz97vsCHSZQ9CzTaCy%2Bua6zXsCalKqYcMgGlCeyx9nywVY%2Fm9rIzJ5%2BQ07\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a2d4556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"08a8c81bc2a87fa3efb6dd4e163f36d4","sha1":"c9ff684368ff76ab0d446bbdf6e19481cb20c1a2","sha256":"355c87aa534e6b564a249f662bd5a9025ef2ce2e5291c64de75ad6c60daaea9f","sha512":"bf651c16da45334acbbad211cf04e50828bac057111dfe94f5b1bc24271b6ced5bb6587a5e34af31df9b4fa3efb2394d1fafba34c0f7b575b46ec434c95c281c","ssdeep":"","tlshash":"8a61f946d900a891d9daef4a6d99d2570b3383e5d5c0b820fcfac9271c30232c9dd2c2","first_seen":"2026-01-04T15:48:34.4468Z","last_seen":"2026-02-04T22:22:09.517563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.8390520251606317:1767540348:PF2UIqx6g_x97pfw9g8CbOP6bXyz3NatKqnpvpW9nDE/9b8be08299e70b61","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/d39f91d70ce1/0.8390520251606317:1767540348:PF2UIqx6g_x97pfw9g8CbOP6bXyz3NatKqnpvpW9nDE/9b8be08299e70b61 HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12158\r\nOrigin: https://ksi303.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12158,"data":"$Ms4RklLJGZElEEJEOVQkZGOQFOpOA4F6I4J5Om4jiJ1i261BOv4$i4N2OHOttO5QtLOedJDHXWIJf19WIODUUOOiKOpXdkDOLbZ6qsp20ixJOvV6bvud-LsOnFv03MsHsI5$JtgR4OQuk9Tmgdl6jx6mY7OjR7-OXIZ9sRkdknFKDnA$Ol2mj4bjRaiOAUBHPUb$PbvJbI9LOA8aOJ-O99GXO5YQBDWInwQHdDoJs+wKbqzLOAt9OO-uDaye1P5DOZK5uvRWv3dOlUBZGJFIOATLQZUIHmFO$q63Fg31HeALOJY9G56aPXtry81R46OlmgOklWQGOOimKXJkO$lqYlTrlOZtk4lzvFcOOkKjuNb7smcOAUTekEPEIBrVEYVkATYk-QrHxJDfxIXZkWJ-fLLOODQMO4JJ7VaSrQOJF0p0LPxJX4O9X0eXEX9NI0Dv9j80uQrTIl7OU4ZOkzQ-3bi3FFTTKJTd+SkTYibwLogGqraDoFT2UxFQqyT7yG4lksV0qmJB2$nK1sJIAEZzRkVRrivlf+mG$lJw8JP40L7WPbcsXEO8uduB$lyXB7W7cEN2wnj$Zev$OO6S9AB1wH-WCVwOzX46NEmbGQRDNQOndVBkUVoA99LFmFrUlWyfT3IA9IvIWCTZMB7Pe63LnNlgIuuwLZEGPUY54vg0oJ1-O3SALUvz-4H4AKjWHDKcxWUNCKQPni8aJInc4y6SEHq6ltWSQ8$GudK1WPMNBTAMdWTiQ8ZJzKzyf5bMaIcl0OOoxmscd2doxUsIKdEesf6asaZB3xIiODOMX41S14Bv4fN4J9i6kVSKJpK8Lo40asAm45Uuc-nIw5yZ4ZlEPKe9QjK44DAFokUFdPZLsIZIlAMZ9LAFyJFGLO9UFsiZXJsIcJF25MMHMgl457sk4yLTaN9OKdIWIKxceAucl5OyX+Jso4Cne9gBSJxDTJsLkv5OT4lPT37o$6LxLaIuc$lAB9reIFg9t7HJxFs3Z$JsZY8X6yUkJrA9XZMIq7R4jUX5$4TMGtfn6aIrJMRJtl6incgAmJKrXJrq95Z6VTuJrubuYASYvQUb5JIkuxUndLxPF7arpFdLcmveR3C$Ix2YH2S7zLTAJpprOJHrOuVOwm0lJGaJR46J2HMpJlLdX0MnZTHdCZkjNaGKj4NaXZLAEDYG55cJ2AJucl97odFTX30CaX6HUoryJUsIiJ417ojNHIN2rmdNy2ZziZAFXs4JYXEVF5RUa9qMNX8sncl3ssUEkZm9EDaw1ZNSxijXs-gc4SA9G4sUZq8AEIX98dilpHUpc4sI1dcQGL4dxs7kQf2fdDgsismIk1qfeKn4M6JXYcUSiOcrvMPa8dI495OfdnvvHZ9BI34QTducM4zuxKtz6On0OmV1vKucCYKKnbsoslLrM7OMAwclGssXL-b4KBQAKK7QOzgL8M3H+ZzgbllHjHlCgdnkQF-TCt6sJRbF+Wow2+en92+KwEYsTwUHFevarqfC2Nrsl2ELeCo6P9+KHPUxN$PJaj3PucaMcXugNCiZP7CSOiieZPOOmPPIdZel4S4J4SuR-pNfdB11HILZG6HJYxOrlslpeQZCB4dlqZTFe7OjERdL7RNDOrkdViZvUBmORkpOOQ8dFIvAzJvF2OTa41ELJU$sJdHcuc9Fw9XWYGGcclJvIeBe519vyiUaKpjQdIcT92FUx4nHMxJQJU9sIUI2Z+kN$FFwPIj24wwc1EiZdgl9W3OEwLpfwmXFEVgJsm7C7TW1GLpt$D7ckFR0-YaS7ttKXNZEGUQiqIoZqrdHJ9FK9LZcGkgkHHL9KXFGW8Ynf9XEkvO2Fd$nJ9IO6G0QIIB7ZHkGa$nTHkvETMIy9YFSn7ImlbZOS+ZV69KkBAdS8UUrOWWUl-mJFDNLKkuFkvFEOyOCBMT-DFknqI-Iqg91BI4241yN5aHXn4I48aqIwcwH0Hlz4DOQFyZWt2KBAmaBTPOVmi60sVL2o4v7$DnGVV5vDZm324lcjVHFrOFmvOqksZMkr9WtsO$skF2AASnTKMBcIQUU3d7rvlr7Lx696fLX2DSqLznMsm0JklYDgSnv4zIK1seI-4mBEkgYQeb5Hu4NpFTeDGCIGn3pIDWEs9NBOzKxTWvUzs+bVcMDtG94OYWEKWo$9KX$09ijtCUmoCjwaJ16ZbWMuY-QBZ62XxwGruv+eY$Fzx5KBtAF2VFQa2W6YL2qJnH4TFsF-vFwxqAYReIzvQtL8Zf1WLoIdV4MojaVg0048vWYmlAgzZa+bee4Ey+8S1ObPkf81F5MnPxmioRq9iGGIaGKL8xQ0EObEc5JKmRGE5-0Ll54BksJILcZNYW0x4fY6G4clEHGLL$cWtyBFALsg68RNVktRmAvKVtVUeEKaivDROmte8acWw6JnxKxGFKddIzpdYO7Ol-iKXKdZJ5qLdeHoGMrYjS9sHtqm5ADYQXC5YW04r54ttJfm+0XTdtH9iek7c9qv+R8IjDT$rtHXuJLEKmUcMEWoXNdD7GmZXFKaG-8HO$qVXO55ZVpEmlo8dOfkAucXJ2OkyLD7cOrrLEiDOIMSU9elKMYdod+b$3MimWYFYR9qyGp8KbU$+b92OFUdpwGS9OLmFsH5c7uIkveyo0eYVcR-oKz06OIBS+qMAclHgsQ$nDjnDSvwHF68cCKRmCqBY-KbHQGm1lHUetETqyIyOv7MfgaBDe+aFJJ51369W-XQ9u2UB8UnV3GvatuodqtBAGJFN7yOTRiUseJ2s5cmLW$H5u$3j6zexBlFjQYHdLxqQgqDlarKcdHimwnEq1csgTgMZu2smQLQfxERVP6sbslpVtliZ2n6QVJwYYvV7nMA5S3TEjEPiYYXkc6HinBzapFoQ9FHRTzd2cDSfJ9d$ynDDUjTbVtySHbl-6zxwfZs$EdcOEFT0pSMo4+xQSaMEcd-cmjVp0Y2jiSJFX3sN+J7eooF3Vitva5FpFcZE3GRKFxiGp+XOXVOjN-4IcGAdnPU682RDGT0zIQ6PDAYfLcreunA9W2iom6nuIy-KikZD+sgB38xHeDJ976A$HK42iEA8bRNoWsvAdS23BtQXZTedTzsBswGb94cJzLYrEujRQep-CB4b5Y8jbk+JDxdcOujQ4x1xgwTqZa8LL2cuR+2K7FatGtGEkQcWFI6UmPreV4iaUcMBk0VDHUisnUowMQsxLGze2BDcWZ3EPInKxucME0JJkXARSR1ixraYTyg+dB+1BFRR2ONgnOaLF4TavX7PnJ$srKIdVZ92n+ewLIbVfl8wB23nB3LaauDALkpl4sc1uSsB253rQrRqosnY3MFP5sjyHeUUbqRDWOTIUZ4VrAvIT0ind9737rxk03vb4mjtoFed6FZnD5XlYeJZukzAYq4zv4FAj0svsmg$gRcZMYepy$CcQ$sp7knbotNIkbQjW9iDJgb$aO74WUlTmc6kbyB-N$RNlTIjKElq7DBLwrcti0eXMEiLwuMtRRckiXQ2Odd9Z2ZOxJiu9bWdeAQvltp6b3JjZKQipFAAsrQExOeCNVIZivpzXFW2KmXZZzmA01a8ZadAixbCW8ljO36YX3INnOa45zNIcqZGOE6lWnNGKsxkW9KGsUlsBJRqNq9HNbJFlDdcOfZO4coEbAMQKdW9l-ZGduIEAZW9QiQKSLSkbO5$MUAIS9e0sZixMQF$ZRaxOemYeQF+mSKBNni27d48M9aJX4NmRfID7cNexAKEm5cco4kzaLZ7XVeyo2dgNK6Zw8wWIARIN9wjBNaGddck6XbuNtaxNqM1SSQl6d5CR55FAb0FZ95I40i6amkcSmNlMYSjeXA5KTmnZ20LZMZzFws7FWiMpr41A1S$WfF4JGs9k0n4ikB2ktS-6D51XRkjJUimXEn1BjOReZ5PbWNqbq7LOjN8NcK+6pnGBbXqs4Wxlxo5iXMA94cGOmp20BilNmR9cUwyAZWvO0ZU6KABQTlnp$NTXbwVMRF$O6pODKeuwA7LsDZgMWXmda6uQ4cVbzpVQbJNJmaCadAZNB9uNGDPsEs448pViXweJJ4PAj6QZPSxeY92O1Sf9uXzpuMXNGboJGJ9libjpuMQwGmYI27oFQK3sIcoF6sANRbLtbQ6swb1Z60OSIxnKLNtI-y-DFZ2lS7jALN4c6S1JkkCRGavQJZGaEnEd$pJyYmeS0ZPOJ0uiDe-cn0LJGljJ$sTaCRLBwxW9MF84AwJe4iwNLlwNTIZikK4tEDmak4uOCMIkuoERwxBXMZONNlzmJJGnSObQuD2JvA6NUlHiCOvd2bAM6RGa3JUJQp3FZmq22txplDZSPsny9t4p8JLJTJetypEKJSLyRBtdFpPJcIoQjZoQCOcNG7CXft4le70Jg0$tRwVFxRxMFDJXZDqmco0WLZ7oTWvlssIcRicyRRcJ26gMkI827wdyIyeO+Oe9cmgD4BLpW5aem5wnYeiN8Mnt$o2Q-R3R+OZQsWkJ$tJ2CysFIxz5D2sc$eQOK22RPZMl+MmwAldAUAipPDnABoCMCt2kElRcTmrSP236362VcIvSH7SRADO6t2wdYt4oXt54F7QlSKkWoX5OTm5cWiEs5At5D0gmx9R24UY64gwFpRaQg0qwTNp5vJ9UTO-ZQZQDRRUtXbCpZ9MOvntRuNIYdF89J9vS0YXlt7JAvIkSQ7t7xDMK4JkcUOLdHVCoWwGl3N9VCeARx5TJXystAnoMHMT7xRS6YdbdQb3XG2LYOtG5WnIxn0-eoFtpvmnDxs25RRmyVpCKdcDXLZVmBNtIdo8J3lbZNJtoqiMWHW3oflkS82I6H9NV39Cnmi8BGMb0yB$VHeDa1mPNfgpneJUQMJmMInaVIxv64y0RNZpS154xSdeImw55BRVifgDtomlWecMcfJLOTe0OsAnwkdZezV8WkcblndiimIz5mReOUOsgCibtuBQ7lOx0qBVbcy-6niCSNMMOeUAmwBMtgdPZelcn7XMO85BKZQBJYlGZGY7I$giwuXremZEVO2$ZyNaDcVRnkVbSP26a$tCBnYd5vAdIcJdtnYtbz6qbUqBVmSbmveG3a7psAKFWvAbIJlveuVjDSgOxabzAzxpoQJITkKxO1QmUearpktum8AAR9c6OaWTU4al7AsFTJYTD1XrUMisb3RvwuXOrfXBJ1X1lmm3i$BqNFZoMT01U16RUcAqT1SByQ3FnPJZavNZ2-tyYtdkwKwa0GYMUkwlgRS56cMoQ9lQlbt2qzAZMC6kiTJkOxlXZjgeZFmwUPY5xNQ3B5cFDtdxdNtOgVpelnSUgtFsdElx5Rno2pRViZZCWOQFl-AADpNlDZFDOx5qNqBr7jZxgERUX17SDbg5eqKiWT2U5vFZevn8bfieSeZnBCWyw5Fs3kMiTk2itIYBQricZcVTOGeoOQMctkdigNDjwJRz7BgmUVFTb7VlW809WPNQJ9Wqr$nAUTmM0uSFnbm0yANt6Rd-ontu6mYtJ3XaoQIxefrmlH414EtIDOKscISUJcKYdjmQJgbc5apv67FNFH2CoEbNq+O65H2tBdtMU-t$eIkqDRimK3rD6kQreYoiBpVlDCaYqs0bOvdCVSUUGEX947TFYcM4t0J2sum1Vkxn0wnPJeXY0yKPZXaB9jMxdS5yBY5$b8o8AK22bHrkSNlKWkGNbUJ0F$VriXDTJI3LKA9-BWdstBmIoPDn64yCFx08J8OPl0pabAMr3i7Ka4b0OuG0NVMCD4xFt4xViQW+V9O4Kj9$noSCBM4mnckW$oT4Ol3U98N9j1ln0G7PsVAmZoOIQoi15qH3Osc-wDrC51sx0$DjAvJztOHiTW3Fs6ReqUTl2BYMqT3TrbaAq6ZQJNO0p5VENl2JHIn2FtYZV+p3M8K3wno$W8We2ttON-V46nbZdZid6d6NaAiQwCU3BoAety2AmZGNlNZQVQDEoB9GJIyUU6n24ogPtAXb0UZSmZlH5xTsbab5FIRPR5Aeq9G6yeZLpQMRw$tB5GbAM8qyKaAGXQFVJA7rtUFUJTFClBwis0ZJdzduUBmfiHjl21t6qDpwkEX3GVi1lCpP2-5GcSrfmLJNF-3PRrqmaPo2YMg3qFwKiQ0vQxJaG-4bFJgupEbRFnpi$k$y$0OgGxHZtKrJOcTDJfgVUz$SR-TRmR9IYHVyB8TvT2dsEZivSiwUUd6ckC$YpNZIj2ZbT70NDV25DTUYVE8Yr4iL+UVqW2H5rfURB77cbrGRwJRYMvXQOZQqKATUiZMErMTQ1JrMiaVt3PenVDW8OZeaBXsbskOZ$7UTXnXbKYtY$BoEdvpNK4AQ2G3eMUAbIjljOGFJjAlE9q2W6NDnqmaAG$luUDNHVv3l2AA63kjAqGT52g2$OFiAIatEe3wrSzjrB7BwG-U4NYt2x9MoaryltkYCTMrY8ESYMg5HTfB6QZd27jqNByIkO5GDJ1TdSFTkllJWoVQ0yUZrNfVaN4c$W2MvXGZa6EX2jGm3l8gKpPO5rwTdxaHe8jJ+nlqU2ArU+03AjGJqZ82Y+gszOcJ1XIcOrvWfl0rl+iWHAcHqYgNQJg$KGijH7iHgb-eGB8i7tko5ObODOCgA6GjiBeqTHp1Nwvj0QEq78RmJrIvATtdZtqTkw-rJO7D2oWICa7W0afIp5ZpvT-31VTZ3aA105kx9NfXKtNBgnyq08gGC2Ay-5fVSNrBe1bE0e$W5ZANsWFZJs$bXlN$LFTK5yVtPAMeGKJjRnQPldP27yr4ip$lcQE9nHdUtNV$GOmVEFr+y+KfwdAYAnxH+FHbDr1$rHvFn2JBJBn$ajXaFFIf5j5Q7TVyk3KNws0QL3m1LVyND02aCOZN9Jpr8$mJTW1WsbBJyyyiAmQV0QOEXHZYHkBHtZ5l$P2yFsQD3Ioy36cff8Of+JIUM6MNJEprTLsY9ty2LKpgxaXaYWeEZ$2xcD0OpN5flY7mc6xHCRL1H6gEmKF7oZE04E2gn3+J7n6Tur-wlgWi0gPyfY0fCGPQzBvweGsFPZe7mlPsNIJgk$JYSW$yNZL$D7dNfIwm5+uAwxYV9WF5CjUVDrlJ-juIfG5QkJuMg1n1eSBJg8grIBqdQBf1zQ3RdgAjDF-1WsjlSEMzYRu2WAtn6rHp1Z2jsrkW21KkGLLf87FC5f2-3vOnMpD8jlTaY30OJUd4qXamk-t6BrxvmO3g0lQ51pHyCyDHp6z4ATRfMMSyfedWcjeBWFI40i6MEXIewIk+L4w9unDtavm6GgrkJxqPtYi+SYnOZQv2900t9OaDG69Ngb9cfZ0ll9f9p3TP61Wv+pWfuXtU0sNfoRwBHuUO1Azw8X9H0GeX0HCloE7YjOvQz2y1-RRKytr2$2Rwq+AN$tQiAIIWAX$$c$wKcGl1Za$GxdznzsRWKUOutX2FkDvFFq8zv-q-4ZsTzOa81PjMfv8nFYZBV$dfP09K1AxzlWfDsAbSeOVUXuXQETFTnyLe0z4BcftaVPRj0OrFJ5AVma0rHX2F9tlJnC+O6wAFTPVegzfG4kp9wF7GZI$Fif7gdnTlgWMvPscVFM8KDOnmmilspRIHTZ2N1dLfXxaF2N9cnU6XFHEPIZDTJdvvfFc4LNDdtlBc$41FVvBKEcKAMU72aZFMOr9eeMKSQAPLP+o4qOjl0O2nUWlE5tmUi02SLsPGvdqZnIvfwTPIlEA7kbENVpZ5+Z4OqOZO+TiOUMkiAaI0Zr4K4AN5wImc4eel6yL5srIkaaJKKF4zsjTyUxc2BOW6jp$KsSc0sXOdkv9leAdOF$cQ04ziJp5Hl42MJ73OFGtJNmJOVKnARI5Z9nZlZiTKI0IHFRlwKcH4UIKg+btk5snPs2IKL$Fj6d8msimsJqaSDEdO4JcDomsP2GlaJI5lTsSJycVaFYZ1KXai+SUGs0jI548IdFjUnI5cBTlbEXOVl4llFdv0XIzijsZal4lccnI4pGTsfco-cdnI8vJGUcaAeBc66UiJs5DKXrPInIclwuJIpUUYcs4ZXk5t8aWF8czIKMQ6lHAAM2cVItsiTtk5eZPIm2X0EURnnF4NsOuV7HEOuAq734Rdzi$mJFOIz9LmsYBHtA0xjmOcNdj5HE4cSQACli4K2ZJGQ6jm8J8YJyweJmA9iUmpIoIkRk7SIFMmRTXKn$7+IAIJmEsrF9zlm7PJiKPRmA26AJcF4l4vJJo2UGlZ97-cdUOJxSJk4O4Nm9aGeS0jVJ8soi7QSdJxVeF8Op-WGLUmRcN7ZcmmX5sMOe4mN4xml3Sly4-klSE74lVd7xly2Ec2dYKFpsLGk$9kA2r2AsE+$4jec62PGIIzslQHG6FcOm1jIMfM5ZeF46lMGvTfi$l57BxmZIUTpNZ9x3J47si7TfT4q6gn2c1694SGFeb9J6ct2GIDOJXAlkncWiE0lx2bAc$kcqixDOgXbAb-OIVavLlzJSlLOa7UsTiRiGURMl4IL4ZkHUnQ5iKbLudxK9TG9AYzLOcgUGQi7mQuc2KKjXZGGGlF8FD7QNiUiiAn9otrQOwaEedlw5XkII3Kt8l59ik$kr7IMUiSYJ3A$kkI9MJdwTkNx6J+imfPGfEJXx32KIddwe2FrdlexSsxFaKY14-c4$-cf558Gan2JUOVO8T9m8e5ziO4C7OFb45Z90Bjl3FIMnHR735S$KKngduISObzQqlr7uMEe5cRR4O4WKVYYHJEmeIn4C4vMUIR4ZMZNl570jfXxBJ2McZzOWfnRjZlSxBssG$FOsJiOmbfeDnlTH5jQxUxR2cOjFyOHB5-ZJ9IOH7XawKka99XrfSL$y2p3$kznKIZlsB8m9eXaEkV2K-IGbTvbNOS4oBgOOP73nU7LuAIfv1VUqemm5nF1jwsZdGJjM34L49YAX5$BiEjOqDgXZzOL0Vm3mNlL4I4guliUK4xFWFxia94M8lO7IakPKOOl9yIn2adaEZkzbT1Wj4nQswIknwQFl5mWsJMmRv8aYGa6Zyl2SBlwFAkpdf1FnduXv2q4-6AJJISQZd0XoVLgYsKnKEQJU1AcliGqZpEi1jUdKnU7uJJOlB7mXqDrGyMD8ZlNdYjJdlNyU9bQIMUaeqG557BGH+KLNkAdTbEkWOu6YTUt9nZTd44dK0Fag5X5ucDBbog-iiZDtF4JUdK6bF65A53OlQ9TOC29lmxMlqidKNE9G4ftQB5fvJlNVemBp8JP4UsJTczHyXW-OIy2RUVYR1tMecmIsFFJqaSZVIzFLSYLYJGiJfI12qGCsv1R2ZXkoB$2lj2XanJMbiIAGcG55JUc2tx12dg05c0LJ5lV4JHFjH9H-FiA0Obi0ZkjOll-lAKd4lUpNO5l0km4mIYTmiFWQDcWOrdfMFUklI+9zKJ4lGjYgM4Yk0Mt2VMZA0QlI2veHoJVSArfbUYZeGgvD$nY$DVIaOSGCaseAF5RGLOt2P9JjFEcQIvsZEcQSG5UkjObiREcLiMFkoSryeRFe4RiG+kVmWiFL3IAMJPi5LK6wmUWAS$qbu0VspdTHme5lm8nVnZEk0ndFx2EIdifdY$SynZ24OveZOgqIFdw2+IfTZE6EP6Fw5rb56voRDWS$pD7mpkSLy8ASZvtr024VySTk3nHK$0qs9VF1ez4vDIcgGgGq1eKA1ZSv3e30py4oGGlmvI6c4SVliOv2xenOAOb0BeZ3tiKtl8L+fpvOvtQrR6m3OWa+$ZtQTJKjNOGkp5+y0Oc6UI90FTZPsS0Seg-TI$J5rtGOC6QUaxGyaOVQzz7+-bg+RAwyOau6UJ8-cP$ZtTmMajD90lsAZ4H0nOp6RlgaYdY9OX-8Lt0$5x$dHbul2-u0eeFRMP0DOoUJIWSaVOxI5AetlfIoHnNpekKpGgpnsOfJSiZeqPFIRObiYeOEJJYV1VmsCIGa29AJElYBrC7Rbv2JuHq5d8ndrkSeMG2IRvlUn4RCqB5aFZsKv2GmcGik3XBQjPyJRRmxGO7QSjUczdxTNJtULw5BkKdEAxk2dZC$ZtE7x4n4nlUIwLVqIKMwko7gSnKYfaZG-Jb7PMKOgz0dt0ER1VO+xwXnCA6knjjPs-cnR4ta9B2QSs5lJ0nmjIQ7pOBQl6ameQdqdG3Jz27kd6$G$lm3JWVERI6bOLoJnc2R-aDtE6geJp5Sy7EwTiZe7XC7Eg6Y5iZ9q1fmrqm4Ggic-6XRTBnxDR2ADleD+U1pDVIfeVlerGTEEkCJSDi5AeIE+VUva6t8LregpZ5YFFI200-BiYc8y6OXOR2$0aS$RxosVTtL5ci-KYmOKw6KLdFP4FaVVm5Oq4G72FAuYORVDiJbaEw90leMSetOLsnZ$ZtCaZWykC0sqRyoKaXKgT04gMBaa+idAKdS3JXZAdEMAAJT0cfJ9iJFWsIbi2Ijkw$t2wjt8Ldf$AxxNVIIGQTlqi0+NKld2MVLrtgj$dyQmHAgdWcUtYodjmJtOsOHU-EfDJI34wFUMmaKo43azFqSn05JRtYPZVsoFQF5CTmOxJDAXdW0GRnmwkwr4oEKrXTlGOYacdZkMnp$n$UqWZGET0rLE$$V36-DyUwpJQWB23$8UXKT4pNJ-JieP2eiC7IxqZgwO9ta$L$fRHAD9b$OMQDqPk0nO1b9GOErrmonlSVWHMrOSqQyHXYGO3tKdvffgsYgm0-AVQE8YsAx2TlyOuQurfyRztrWG6lWwHXa+8k7MNreI9uaV1Rtn0NrnQrrgsJwt6WErwLC$Q3n5UaWnrlDLvXqykVbW24F94rQ3GHYXwm6KN-f9XSwUbbGVUs-6i+jbUFKo6lWM8pWEqV36nFfNr4RJ4-U5wx6BJw$fPsp4awNYRNDuISSNM5WS6L4nuLfwPY+01teN-lvCsIRCZj6D+QnPD1OgbWErdJ0lpl14UZwd$p6nvIW1OVuaAYaJwsON$vUiR6Y15cQOQ4$Umb-rFLdcIW1sgz7q5VQ-cgqBKr9G4$vJE-YDEiUMQw2RJ61IW+iU$L1AQ6gce1gN51wC6Iktx9s+srJpEluQKI$swKT5W6AtaWXUKWOqvee5y5rrmKWTYZkAY1kkRjVWGVP2B$qOrvmnEEVnb96VQq7Ln9AVmv2tx1$xXe1JV3Wa$CkxZpc+-gdpk$CkDlL61JVKQ3$d90ZYD8kUDOi$lW7nLA+vXLxA7gNznmAW0gmQT$79-rVU+wV6R28mIerVDB8tYRutzDzBUt2yV1w-8nGRef8sYgAp5i7DyBfGW3Yqp-rB0ElKY1WryRQAIafwUGWvITI4$70CeIYwUqoR0OQ0kweE8QVvkl8IqWBYYWiOzQ58nGnweLW0TGUXOpM3YmsOMxxJw7QqoQvuXR5xlfABHXbOdSF35Oq2cqxyGCYzlRcp4$sK25q+TsIOFd7IQMJUwxVfUp75qUiacIql3IuOlC9zcWRy2pORsCMtcOksU3fZRs5oHNft+xUONKmGQydazwlr-ww7gpZKltSnFn4gOT0sInOOOZTfH1QvdOdlaOGOBWdR$LF8yj8XIeFH-SO4UcWnw4Wkm9ODAy95O8Erd$yvKkM4n47aHQ4OOmbO1d-ORFZOD1OpOjso49LWQFJoqFQKtFFiL1RcJ3lscJ2GWfi43OaoW7W1yOF4SVlaluvOOJt-O34OOtHREYqLl5kbYlGHiJiJsIRv84EOO9ctT8O6vfH+gIpE$rqNalI4PyekS63oczvOOpy6rqNiFKf1ilS+6TWdiO5OAOjw8$3-N+TkG94SxEAlalzdDfbjPb+F9xO8sLdjSvOSx3NNRvp6I4R3AJIn4UzROFkfK5urfOvGDrlGnKOOJTesnsIw+uYQlOY5MA+UdSpqvOEO72R+ejAoqyOFdAOO9jISuYEO+dNdSO2HFqDTZrlUKUTsk4+71zZF-uk0Jua-cfKFdLKGGa3KKxsI96AmeVSWHa5xrs4cTMHeblLmYIWMJi$8gxBLO$lviHuxb4k5OaD4kvnHEyfbFZXbobWVdIdaQAHlPNIvPfyOnyw7raOUONfykjOFZrslsOaOVOnOJIJYc6zYGxZAY5EkiNLOIavyL$$jS2x6z4nPL+kHsycORI8dZWAKJiZM5iZsOO0vdJSdVcqZSWMWZIedOVcmcWWzQjZniFn4OO7G+wIRbNw8mfe8aQ57TtA-vcHxWOOPnrQO-vAKf5asSLmyOOO+wKQOO"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9b8be09e7e8456bb-OSL\r\ncf-chl-out-s: 7d5BF1cfRMls+QVQFV9i3Q==$0QF4zvyuc9lPL58SBhqOHQ==\r\nset-cookie: cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ksi303.org; Expires=Mon, 04 Jan 2027 15:47:57 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c17W5pEhi1cgDt09T9P5UugsGIsQ6KTsLeCUH1qQhV3VzHxCb6YFTuQMLTO3JcDA7RuCcdHG8ZT6fib5aMPQFOFIWbBkUAYhZDNpwE%2F1nUNm1TMAnnSjTNOTqV%2Fx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1364\u0026min_rtt=328\u0026rtt_var=848\u0026sent=3172\u0026recv=327\u0026lost=0\u0026retrans=0\u0026sent_bytes=3697987\u0026recv_bytes=38228\u0026delivery_rate=76923570\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=25360\u0026ss_exit_bw=2562739\u0026ss_exit_reason=2\u0026cwnd=143058\u0026unsent_bytes=0\u0026cid=d3fb538b218ef2fd\u0026ts=3596\u0026inflight_dur=434\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs1fufufu.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs1fufufu.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 131711\r\nx-amz-id-2: /GSFfBSaR1VSmdfZVOcuKZSAyeSB+enX3HjRfr6mcSjjOSOK1XysVbJajj3P7YQTGjGF0WwMYN8=\r\nx-amz-request-id: 9RGEEN6X376MJAJX\r\nlast-modified: Thu, 12 Dec 2024 12:55:02 GMT\r\netag: \"8d2fa29cc09d2399aedec3929e9c68a5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1732555153\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSygldLON2wr19:5 (W), 1.1 PS-FRA-01BQV163:16 (W), 1.1 PS-FRA-01nxn162:9 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-upper-cache-status: hit\r\nx-ws-request-id: 695a8bad_PSrdsdgemSTO1sw92_14936-21904\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":131711,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGB, non-interlaced","md5":"8d2fa29cc09d2399aedec3929e9c68a5","sha1":"00e0ad67d5b01325da473bf5a4ba7c1c3d312b6f","sha256":"f7fad0a7ad203326b9ff8f2d843b0b2aa93f30ec97b2bf2f4e979ae73da56fe0","sha512":"0c1033bd82f4005ba9ef676c05e316347a578ad1afdcf946bfd2b4d6a2c4c0ed8d26c86e81f5f1d721b0a26e61e93702b1ff87dc7b5edb5a2c6ef21aaa0f3a70","ssdeep":"3072:z2uVAR71nBWO3990u+t9diZRv/uOKrbhBO2B1RO8HgBb7Nq:neZ1nBV+M/nuBbjB1THglZq","tlshash":"35d31296bbe04c6580f9c2dab4c119c8c746e2d619443d24f9fcfb6f6046e8b94e9ca1","first_seen":"2026-01-04T15:48:34.448211Z","last_seen":"2026-01-04T15:48:34.448211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/fb.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/fb.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"4b2-670d923c-96abfd;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1202\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rshNKlBVnk8KhWP%2Ffp0piNcL1542MxmjHLcRqYSFV0guaWQqT4%2F00zcWkTg2zjeITMoSAXv5Hfm6CuEF6PvJqq1dcLDj6Am2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09d0e7456bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6dd89147a91b5873c027816b00a74a0e","sha1":"e0e7fd4752066cb7b2dad859e25b5cbbc8c5b812","sha256":"7db8fdff0789a66cf1beee9ae081c01ae49c3beb4c63c6c98e737fc02d6c0f88","sha512":"d1922b8f1254d858f8c609b6995a4dd9ee0642c2f27ea40927660d7f6491217b20bf7528865e8fd7983e1a802cbbc47d4cec12ab6210225ceac05ee1ae85a173","ssdeep":"","tlshash":"0e21dac01b2d88a2821f3a11619797b19f6519ceb9e9550c9fad485cf678611c7b0d48","first_seen":"2026-01-04T15:48:34.449368Z","last_seen":"2026-02-04T22:22:09.497646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/chrome-active.webp","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/chrome-active.webp HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:59 GMT\r\netag: \"73c-670d923c-96ac0a;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1852\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQKPnjbrkbHqx08ajT0ZjsntHtlLiwXprS4FG3r87L0WASWJwQjYcmlBU6ua6TDaWUW6bc6sR0qsEVBhhjXDbx34CLuRyWvM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09d0e7656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac9da4c4600a98ddb6b397697a91cb73","sha1":"7dc112b90e4ec1b3839cd4ce1529ca724cc4b05c","sha256":"f08eb57c481ba99826aa459b9baaa9b8fecd831ffc6d8cf0cc537a51533123bc","sha512":"0a841413de90c4c16868afab0fe4bb81f8691cf823eb3b4d7fc3f2c6bf5520b4b5660f3b1128df96c3b3212858f342eb1850935dc7c7a7636ad45a5d512fb515","ssdeep":"","tlshash":"4b311bdd163affa45e40d6d7e088d5c5999284c647ae20806354f5da45bfb5c3d0307f","first_seen":"2023-08-03T09:38:09Z","last_seen":"2026-05-13T14:47:36.239603Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/firefox-active.webp","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/firefox-active.webp HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:57 GMT\r\netag: \"8fc-670d923c-96ac03;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2300\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVLEjF%2FurCYz62B7RzbGZH6Ya2gsmHTTMl8KMxWHIGUMg2AJoGUK0tv9%2BL868V2aC2zz2GaUvbHK34QnrK5l76MjYYn3Z00k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09d0e7756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f49f0074a431b98473da34586854813","sha1":"6daf5b92c638a8a7f844d08bb208a98d83b21156","sha256":"ac7c11e912f445d676561a688c566a26f5928ef954d677f860ac3435c052234e","sha512":"7123aa8688bc92cc79428daed06d59d8dba26339b3434424c87449a2645be53290b4e160ddb2ae0bb205a34a836f3c1fc4cef220b18d62aeaa31335b1cd83c14","ssdeep":"","tlshash":"55410a641349723b7e20513bef3fa216086204756becc3a8b4b1df5dd51f661a384d85","first_seen":"2023-08-03T09:38:09Z","last_seen":"2026-05-13T14:47:36.237437Z","times_seen":45,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/update_saldo","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ksi303.org/","date":"2026-01-04T15:48:05.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /update_saldo HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ndate: Sun, 04 Jan 2026 15:48:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qiMxRY6zf6Ef%2FYI2hSOj0NlaEUmwmCWUCO74ALkwSClP6wtcVu9q%2BK8XvO10gLDitgRgwM%2FMf4qk%2Bo0ax%2ByabxBcyEzrbCE1\"}]}\r\ncf-ray: 9b8be0cbc82656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"0d99321016021b28b71047c43e75cd18","sha1":"fe8b2bbf31855bac7be5e05b608728cc4dcc9fb3","sha256":"d4d3e76269868fce8f73062f15244daf20c11878495f6d6fe9cfb8a7a4389bbe","sha512":"75b3d1f67b202b5541bcefa36f3172a132406fafd62d910fc67676774d7df38e44faef3bae9bcfdd045f28b4d43be58811ebed3ff26fe704c595c747f4e870c2","ssdeep":"","tlshash":"b5700020a8ce280020a00800308a0000000c00002000ce38802328000b2a0c20802000","first_seen":"2025-05-10T22:11:18.196327Z","last_seen":"2026-05-31T10:57:29.723906Z","times_seen":7,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/sports.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/sports.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"103f-6710b73e-96ac00;;;\"\r\nlast-modified: Thu, 17 Oct 2024 07:05:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4159\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O2AV2mSPzKh8FMkQkGMd%2FoKoRqqveGzF5rXUsRHWJcnX0OKpJ4GVptQ%2BmYbARtv0iavX9%2BPVqJf0XyjdlZy0HytNQ9cG5rE2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a2d4456bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"6fd6688ba5322f0de0cc5b73c0cbe5ae","sha1":"e950079f64a0f50568281b5826de28a7aadf72af","sha256":"b5486060a538c6be6084f982fe01ff0e79a4edccff96814b614aa57441a9522f","sha512":"563271fc9718491e2ea70930f960246216cfa3ffbe38787bf63aef4c9b456ac14b64fac1e96b2a791cd6ce18b530a7c8302bb864980de457e211983d6f498b30","ssdeep":"96:5knmWp8JuXM/PHbcHYrHobmtMhLgNQT0M5WmZToteO1U0RPta:5kng7cmoe0gS55WE6f1DQ","tlshash":"ad810a0aea406d71d94cff4828fef29b0f3b87c1b6916491b8d98a9695741bbcc8d5c0","first_seen":"2026-01-04T15:48:34.453564Z","last_seen":"2026-02-04T22:22:09.528655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/3381436904_ksi_rev.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:48:00.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/3381436904_ksi_rev.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:48:00 GMT\r\netag: \"e18b6-691b191e-96ab5e;;;\"\r\nlast-modified: Mon, 17 Nov 2025 12:46:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 923830\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kC4Pq%2BNmjEPXnfXNk0KkOtAxtW0pniCFmf59Stewm6zEBZh7Sd3g1psIy1fCcnXW6XCONhptL%2F9THg%2F3JijXXv%2FzrY8Sd9NF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be0afaf3d56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":923830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"9e795e3ee3756890e8f3e04b4689fb57","sha1":"e32e1f02625ca758c7c3d8c17bdd8e8a0c49e2ee","sha256":"4fc076a0ce92c2622e77b0f0c5b08974bf8c3558c69c73bec970358f07fab57f","sha512":"a9b88e7c8070d6c0b65b5719d5501949be2edfb9d7b12ef5f0dd32e435f1650708c23955de07b29a8fcdf5704e064b2b548ef4aeedabfe80cbd88beccdcf758e","ssdeep":"24576:Hg46alIxzPAHPApEsDk8kaY1EBX8i5yxY:A46alcAHPN8vIEl5y+","tlshash":"2615232c224d809ae738ca7368b82f9fde43865dca44ad127427e71dadc7ec5c3116d6","first_seen":"2026-01-04T15:48:34.412752Z","last_seen":"2026-02-04T22:22:09.490989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":1206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/chunks/main-app-12309b691508e534.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/chunks/main-app-12309b691508e534.js HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"208-670d923e-96a567;br\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 209\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IULHH1yCq4JTHnQ7DSp9SJrHF2aWtw1My9aDtIXHQCbJVPkc57FCm%2FEfjWNYvs1zp5yyEZQw0w9Ric0hRiMzMboCH1eL45tw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b8be08a1d3a56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":520,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (520), with no line terminators","md5":"099bd202d3a289ba55d44ef441cefc35","sha1":"c692b4958b47d5205074a1de49f5150931816056","sha256":"035e00ade8582fa1724cc8d524df08314c19f7906ad94daa2ccfb6a2ddea0455","sha512":"3dd0921fa70124c64e3f8a1314088b976844e98b1bcca4ae17de77faee45cffd2c253a2dfbd73552e5da69f0a93ca4c3f3e0031864fce9e0eeec6566974391f9","ssdeep":"","tlshash":"a5f0e9ee269cf66f18276930fc575c22681f4035742b48942802edb12c73bacd7b180d","first_seen":"2023-11-26T13:34:52Z","last_seen":"2026-06-03T20:23:40.293284Z","times_seen":15,"resource_available":true,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 04 Jan 2026 15:47:57 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9b8be09c5e6c56bb-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/d39f91d70ce1/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JIed8RKI3qB7LigUGblcDsesJOpzo4fHRWXCAqp%2FkQ9o2jN6CtDH8B%2FBwqlD7bI%2BNnINNTNL4HtBPe9eWHfv0BZsicxIQpG1dxlhqPk8rpUFsHir4oLecbU0ANfb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=997\u0026min_rtt=328\u0026rtt_var=299\u0026sent=2459\u0026recv=275\u0026lost=0\u0026retrans=0\u0026sent_bytes=2865233\u0026recv_bytes=20852\u0026delivery_rate=73969056\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=25360\u0026ss_exit_bw=2562739\u0026ss_exit_reason=2\u0026cwnd=81631\u0026unsent_bytes=0\u0026cid=d3fb538b218ef2fd\u0026ts=3269\u0026inflight_dur=352\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10318,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/wa.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/wa.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:59 GMT\r\netag: \"4ee-670d923c-96abfc;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1262\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=89IgUCFX9SoYrtzMdcz%2BSrH7ZOBc4zUuQ5nKHy2E8JyK%2FlVUfqzxvjcHdK%2FGe8J4SrjtpZnsiRi0g%2BGTVIcLonvsmnZICFFC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09cfe7156bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"833fdff20996e410ffa4ee3b9508da41","sha1":"1cfe3edd17aaa3b6e7ec90ec5a4689f02d663ddc","sha256":"c4bd9b1393d7bb786fa5b0f99d2b1977c01354e74f7f40f8609b818bec73c75c","sha512":"13240e4419785935dc87f12b72dfb50f7080300b2cd6cb16c9c8adf2e351234c77018529ac910b6080fa5ef15918088fb7656c21f3c90748067b72b268eabce5","ssdeep":"","tlshash":"2421b7f55a04747d6b48113a2cd634c6ed98c74ed80a149fd03eccb6d57297ec692346","first_seen":"2026-01-04T15:48:34.456782Z","last_seen":"2026-02-04T22:22:09.454792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/tl.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/tl.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"53a-670d923c-96abfe;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1338\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o7XPhL0ftNhHOsYVpHHElZ1%2B2w8ashblc7eRW2qC9EdRL%2F1j6rVLm%2Fp03M9EQ%2FQ9iykCteadzvElOsI0IZ8GmlTA4JPCEMDW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09d0e7256bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"efdf57a530dc848ec99e1e85f99a1428","sha1":"bfe4e86cdba26f54c3136ac3c730534d9862722a","sha256":"443d6a5fc2384771ab00a17670a5f66802d7a57d4aaf29246fe3a27e354bb11b","sha512":"0c9d500805a7fe8a5403c91393e7a6f1719b45036e2cb24e3dc0aa003a5f0ed9beeff12b7f24c9a970b898fe7ff3383539cf7ab6951c4c65e4bc3f3c5c067ad3","ssdeep":"","tlshash":"da2108d5bb6790b93ec004597a161260196328ea853e638231aa0218b238db04c813a8","first_seen":"2026-01-04T15:48:34.457854Z","last_seen":"2026-02-04T22:22:09.54672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/9435750529_20persenrev.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:58.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/9435750529_20persenrev.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"144f68-691c05f8-96ab9d;;;\"\r\nlast-modified: Tue, 18 Nov 2025 05:36:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 1331048\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LuVqU7TAmhG8QzkzSf%2BEq9lYR2iJWRVQ3TNTPvWKnyTI9z11ePZJoZ%2BrLe9AYEUL2Zb%2Fq0lyMhKt6QzahZdp0BvpN1bFRfye\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09fce9156bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1331048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 613, 8-bit/color RGB, non-interlaced","md5":"a14e387cfeeaf63b86980705dbd31a8b","sha1":"7240190e8736487c5762a6f0d66bd999dba70083","sha256":"63f3044312e9b7f77f5dde2251d26bf03b6e91f93c99c9c5aeb1b4a5e3614ba5","sha512":"1cbb06a622f0b07165721cd51211f0582c3e97e4266ce53e999660038d4b9d3cecbe3c121700a77a23e4fe90ec30b28659ba2bc6cb59f699708da56528ce555e","ssdeep":"24576:nDzEbqhOiaYDeya/SxNfwb2bDxWOCM9/3A6MsOGkcLoccF:mqFaYDG4ScUM9fAhNcLoccF","tlshash":"e32533c0f43277a536cc1dd2ec5a8272a1db2bf1e6f2ea3dd6cdce1145a5872952b006","first_seen":"2026-01-04T15:48:34.459007Z","last_seen":"2026-01-04T15:48:34.459007Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5544,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":749,"receive":4795,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/8319746390_100per.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:48:03.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/8319746390_100per.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:48:03 GMT\r\netag: \"16ed07-691c0717-96aae9;;;\"\r\nlast-modified: Tue, 18 Nov 2025 05:41:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 1502471\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:48:03 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bvv3NW4j36Vlf2j2NaSjTuT49E9X9oiL%2FyWmyMLNSVR9V0FqATnQw3JoScgRwBKXRdkzmqIIQozuese9gPPEdXRHFbKv9eqc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be0bedfc456bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1502471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 613, 8-bit/color RGB, non-interlaced","md5":"710a4e3b3ce26e53f79664cd5af8a6c8","sha1":"2975495371791b15781c96a15e58f5416b3c1127","sha256":"1817cad54f80d76153cb33ca0a40f98fbab14bd252b67acd2ee2676406c5a141","sha512":"20e5e078fd2a2973d35a5b2b68438b30195f83f6608111da38974d7d85a75f4ec71ee759cd2ca05632f08ce2abf2b48be5c52515148ca8974eb9b0eb80b7cc99","ssdeep":"24576:KxA+9E4c9VBgIHWGphMSsOdz8ECWRBlWiAi3xC7La:LwE9TgI2KhbCWNWivC7La","tlshash":"2925339dd82209710c65a07b72738877ad5f3927e83c5bb8a35b83498ef5e341b095ce","first_seen":"2026-01-04T15:48:34.460154Z","last_seen":"2026-01-04T15:48:34.460154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6054,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":302,"receive":5751,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/update_saldo.php","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ksi303.org/","date":"2026-01-04T15:48:04.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /update_saldo.php HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami; cf_clearance=bAcuycEsI6mE.NQKZ1OBrx1YWa5uPfvS2gsnWBoRzHw-1767541677-1.2.1.1-9DAD7WQfSzoqnWWAWXLrPehzUd7RLpyJ4Yf_W1ewfiuvIkXqrt.0Mwt0EDIFBhnIUBpmjvx3AD1sJIsEdnOHpN947T9m6BDdIlagN6lTpXLP2WO8.od2x1UK769gjyklHLqodrIGwPPG.ex9pHlEZwYoGMkWMuQNGMuXQtbzC7nAeV0v9kkHyqNtuMEdmiLNDWSiPTc7U7yn0F1R0l9_NwJViMotU7qcOOkGnKWZFKs\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ncontent-type: text/html\r\ndate: Sun, 04 Jan 2026 15:48:05 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nlocation: https://ksi303.org/update_saldo\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IvUZ06mThh9KrQus4mThOXm6%2FPtyeaVszNnDf2obDW0ePAeC8TuQMQTveDV0Ms83ogY%2FzqzdkHRJaQXcH3JR1VYquLxvKX7j\"}]}\r\ncf-ray: 9b8be0ca081b56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T16:33:36.180633Z","times_seen":16390792,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/imgf/esport.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/imgf/esport.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"1608-6711e79e-96abff;;;\"\r\nlast-modified: Fri, 18 Oct 2024 04:44:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5640\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4d0Z1kk3ofR27DhyW456B4VTZ8uNPPqwarWc0aAbZL8AgesL3jE%2BxYjB8vxeTNvmzT1uIv6vz32bijqQmS0uaQBvuducQNsX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a2d4256bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0d672ebd8278fd7516acac1be72147e5","sha1":"b5e55881db7f8b47daa21dd8a8703a81c5b28d85","sha256":"e24237a8ca5c2cb946a25eb5e226f1a8d8a821ffd4d7be26db6c8903791d2918","sha512":"8999deafaea761a854daf55f179de7f3f9a9544f58488ff75ce21cf76782fd2950f990a7a3c6e00d89d6b495d38a093199a0268ed797ce8f07f93ea3d1823a74","ssdeep":"96:EknmWp8BC/oHbMvH8Ho3defkTLVfog2/ZFvY5l4aLOk0BLVLK4FtspiAamO2D6VY:Ekng7YcSk8PVfMMMaLO564/AlO6pz","tlshash":"44c13a00ee607940c75de7946dee904b4b3f35808391a4d4bcfac937a42067a8dcdac7","first_seen":"2026-01-04T15:48:34.461949Z","last_seen":"2026-02-04T22:22:09.539908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vs20saiman.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vs20saiman.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 163666\r\nx-amz-id-2: n0Iwt3WnYxJwB+zxi9lOk2LmcJifpQjF+bZgSrS6hpSKs/8riSe3daKud9j3e/dgmdv6hFdJBT/rRKEVQn196A==\r\nx-amz-request-id: R2D31XMJDFXG3ZVK\r\nlast-modified: Mon, 04 Nov 2024 14:09:54 GMT\r\netag: \"0a72d74f33aa3198ec2ebea2e5020963\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nx-upper-cache-status: hit\r\nvia: 1.1 PSygldLON2sq21:8 (W), 1.1 PS-FRA-01BQV163:0 (W), 1.1 PS-FRA-01E6z147:12 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21758\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":163666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"0a72d74f33aa3198ec2ebea2e5020963","sha1":"4a45736f20cf403635251576318737bf8ce14a9f","sha256":"5c1dc635ed358233efe102f7bb324d27e633110dec19415c450b3440373238df","sha512":"34517a7596b2e135acff666cb3ad462c8835e4bcd4a8ba9de7e345abce10af8b7a44ff302e9e1c6d94360a2ff8ea097df751e22d6f837395f71cd80516d4335b","ssdeep":"3072:k/4wb2W0SNCxvQEnSdqYKxREngTjTIwTfqkx1yzqn:k/RbRBN8NNRlbTikx0zU","tlshash":"d3f313bca9dd77efc75ed99711d0838e30c1a22a6acbd3e47121faf14f23184454621a","first_seen":"2023-10-19T04:52:29Z","last_seen":"2026-01-04T15:48:34.463237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":56,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/uploads/jackpot.gif","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /uploads/jackpot.gif HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"5b611-670d923e-96c7db;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 374289\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oK5MX9wLf1%2F%2ByzbQslKkK4sJ7%2B7kWz1SvWih%2BcekOen5xhomdQtfbINQLFrE%2FpBqwP9QJIpWY6xFYzZwQmp%2BASs%2FCOcHEi3M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09c4e6b56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":374289,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1920 x 250","md5":"5d91040e1bbffe9d91bd6e5904668e9a","sha1":"3bd4c8014ecd43a61feaa3ba17c5cf0cb4bc3c83","sha256":"ee7b04c92422393e8dc6e99244b6f3128e8fac39c0755101ac6b110888a04a3a","sha512":"6843e53944be91a070a20d6473db62c5ec73c24607c74112536f6845626c5005ea2a0b42ce03502dce2e0647ab811dbb0b0aedfd03439eee91a9add681ff05c8","ssdeep":"6144:gaOjUefBubABpDBiZIIMseJOOIaNbv9FyTqohZdaaRSwLdl8qKzDbl:gYefBub0pEZHMsekaNjGTnaAdl8qKfbl","tlshash":"0184237daac260329a37f4b56cbd204c6029885760d1ddcbdf97f94840bc879b5e34ba","first_seen":"2026-01-04T15:48:34.464507Z","last_seen":"2026-01-04T15:48:34.464507Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":896,"receive":1177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/css/54fc46000f7e20bc.css","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/css/54fc46000f7e20bc.css HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"e7e-670d923e-96a53b;br\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 891\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOY8KB0N0Alt7Q1QotlbkLIiv601tuwaD1L2dG5d7EPrcd5IWepYr5B0pVGtFH4tRRCBIPMU1rnVRn2F48S5M%2FwCmehWcQV3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b8be08a0d3756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3710,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3710), with no line terminators","md5":"01704a3fd45b92e051f8c389410e7e5f","sha1":"35e7d3497898f39bafe1ad840ab4a5ad634a4577","sha256":"6328963b2262f23c457055adeabaca27241479471e65c63851bfc85a3d13dd5e","sha512":"bfed4e690f7c953ad04c8d636889968b2b6978ac91d8242d87f38e8f85e82be6c6aa61a9962ba10e17fe5d1b4c06138541dc014eede1750518b1189e2106f55f","ssdeep":"","tlshash":"3571892176a91232de168358fad1d98ab16cba35e767487df1f76218c3c60e7021fd4c","first_seen":"2025-05-10T22:11:18.16539Z","last_seen":"2026-05-31T10:57:29.726505Z","times_seen":66,"resource_available":false,"data":null}},"time_used":877,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":877,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/chunks/1179-e1ca092b8d3f3375.js","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/chunks/1179-e1ca092b8d3f3375.js HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1b81d-670d923e-96a563;br\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 26711\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUrHHyZl5BfzzNuFEIOfwkyQWJw%2FXtfKeYQUPz4W8oMJcQUJMoFwvLd8k8Slo9%2FqE14H94n%2BbwpisTRjm0kKNEDg0wm3zKun\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b8be08a1d3956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112669,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"83162f5ab62925bf5b8aea2df5c938de","sha1":"c0840bbd8ce4e4b9b97697dac553ecb542e52245","sha256":"49e6f0d87e34f7c79be5328532e02ac02e7a6cd8f7289a2b382957627d965720","sha512":"21ed53389f9c0cabc937babc77a91c23d79c24c07c7552f5b7fdd857e4519869a199c688ac3dfd219fd0d983d8b534cc010d2216ace0ca55b26204100799fa1a","ssdeep":"1536:xDvWBLdr7nJHpIjbpZqjOsbri+yJA1qQO3rz0clb0cGs1KCkO:SNcVZWavz0ekO","tlshash":"c3b3d7b672d0f8e1079740e6843b400af3755c3a146f7490a3e6cddab9a14ded1a3f6a","first_seen":"2023-11-26T13:34:51Z","last_seen":"2026-05-31T10:57:29.698508Z","times_seen":10,"resource_available":true,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":676,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vswaysrockblst.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vswaysrockblst.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 162314\r\nx-amz-id-2: nh5SzOpQKz4ETZo8cqryhy4k8jAQ7iwI9OX4CmACqQF05n/sWv5w8LlahczSoCfOxvjshieeE1I=\r\nx-amz-request-id: 4RTSQWFB3F0QA1YH\r\nlast-modified: Thu, 12 Dec 2024 12:55:20 GMT\r\netag: \"9799d174769aff37cc47d03f98cffac9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1732560904\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nx-upper-cache-status: hit\r\nvia: 1.1 PSygldLON2wr19:1 (W), 1.1 PShlamstdAMS1qj18:8 (W), 1.1 kf160:0 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21761\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":162314,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"9799d174769aff37cc47d03f98cffac9","sha1":"af0b654b30e1c1a08caa12575e97e339bffdb970","sha256":"699dd0167f4a38a3c876beea584a093b0ec3377874ebe8705b2c6ac84fa5f4c2","sha512":"f92f0f7de437e792ceff60abb669239a834a3570998833b084673ff5b984c31e17cf29267eb45249b940e3b0cb94de21247548b0757d37f838275cf1483928c7","ssdeep":"3072:R40fFxCvbFDv4VqiAxjR0QcBHKBHgOPcO/Psm03eDd/Z0/CM2AGGQv:S0fFxebFjWKxjRAOPLsmki1S/CJA/8","tlshash":"f6f32311bd287ba370a8d9f03e0bfdeea7d5926f1c6810b8c4c5b4a045b55b61284f6e","first_seen":"2026-01-04T15:48:34.468313Z","last_seen":"2026-01-04T15:48:34.468313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":278,"dns":257,"connect":21,"send":0,"wait":81,"receive":72,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/back.jpg","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/back.jpg HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"29141-67103b54-96ab82;;;\"\r\nlast-modified: Wed, 16 Oct 2024 22:16:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 168257\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:59 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pIsZq5mbS8oxy33%2BXFFE7fztCR5ugM3Eh1IzrPVaVOmrWVTy8F4qLrrknUj38grhRli65yju3jcPTkSIGAX89HPNx%2BCDXAn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09b2e5f56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":168257,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2214x1204, components 3","md5":"aaad67b2fab2d26054f5a99c7a473d3a","sha1":"65fb9a6f7054461257ac86edc6e828499e1aa09e","sha256":"51680f139bdfa0662df8c5c9300f4ccbdbbdc50374f056788434c08e31597aa2","sha512":"de6109798b5a348cc7fecb46fcb209e49e7ddcb38d075b5f84181bdd677805890ae444274527755a00990d37f3c343f10007402fe097a97563e440769916bb7e","ssdeep":"3072:mEGoUViop1tcVw3YUPqmSaGGjBXoJ3x3YAC3+2WrxbR7w2CVq:bBRcLYUybaV4JiAmvWrxbR8bq","tlshash":"8ef313989215cc8ad3ffa3bc5327db5fa13abeb65a7d805830ca830a50de3c0759d558","first_seen":"2026-01-04T15:48:34.469765Z","last_seen":"2026-01-04T15:48:34.469765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2597,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1780,"receive":817,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/1898099251_rejeki808-rtp.gif","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/1898099251_rejeki808-rtp.gif HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"68124-67199dc0-96ab2c;;;\"\r\nlast-modified: Thu, 24 Oct 2024 01:07:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 426276\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYbW219IVHYa%2Fi1bvdQxPCvzQfimwnftP2P8JEFvLvW6ktjPRP5CoDU30U0deKgediIqF7bzn1Q2U8eA8vTMOJDMyylhH8mc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a2d4756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":426276,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 319 x 319","md5":"a63a5b94b374b5010eb270aa505033a6","sha1":"a02978f4364edfe0d585ee40133568a67a85c433","sha256":"951beec7f7206633b74b59b4e51a444aabb25016f29ad590ca945aa141cffbdd","sha512":"3bcb9961a963cdb3f8a9754a2e9b2e760de27440b8dfd2c63f75cf7f00256611744b8e2cbfd4f87f64040b10f98cf3159c85a1e794129a5f30f2be8601304e45","ssdeep":"12288:7ahwFjNUadmrTzTaFzCB0x7zTPZzJaSNHFFh+Szra3u:7aGFjNUadqaFzCBEDxJaSNHFFsUae","tlshash":"9294131c41868fd17dbfacea9d60304a2e7707384c69ad7468ba1cfd54218b45ea17ce","first_seen":"2026-01-04T15:48:34.471202Z","last_seen":"2026-02-04T22:22:09.54165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":659,"receive":842,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/img/7563184417_rolinganrev.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/img/7563184417_rolinganrev.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"17451d-691c04ab-96aaf4;;;\"\r\nlast-modified: Tue, 18 Nov 2025 05:31:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 1525021\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9A0IwDUj%2Bxb5KYWHxfox9TK1vGOH0TIAzl7Ynkj%2BLwELnM9gqTtVlBqVds8MkLPRg2sbwEaSDa5%2B9JVCF5l8ObFJO4dSV9M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09c4e6a56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1525021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 613, 8-bit/color RGB, non-interlaced","md5":"2b7710ab42a42b9264c4f3365998cc6b","sha1":"5efb8649e55ed3d2e8cbed8e1672a493ff2d5877","sha256":"535eb0db5495436ace70f5e946a0caa2daa7a26bb17c2e463fb4175bfc4ef43b","sha512":"8c517636aa4dd5eeee533dbe76945ceebabcc2e9ac1aff5a4a11f412466b9db77d53ab199e163af6188ffc556187227fbeac5c0ffd292d4ee215beeb1f453d3a","ssdeep":"24576:UmbCw17uzHmiGGbz07PZT/DFvAp77ZQUm81jDxrLmmey:7b7qzIGbz0zhRY77uwn4mB","tlshash":"a52533a87c58560b0da558b5d25e80896b7afee97414088f39c91e30e4f7732cfe8f64","first_seen":"2026-01-04T15:48:34.473177Z","last_seen":"2026-01-04T15:48:34.473177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":1382,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/_next/static/css/0484562807a97172-s.p.woff2","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:57.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /_next/static/css/0484562807a97172-s.p.woff2 HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/_next/static/css/0a4ae62ed810513b.css\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:58 GMT\r\netag: \"1f38-670d923e-96a548;;;\"\r\nlast-modified: Mon, 14 Oct 2024 21:50:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7992\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:58 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9wUtAeOq2kV20Xwaxoz5RnYfOCdadz1LlQGlw5bGeoFTWUvE3dLBqNSuPgb4NsbTkl59GESR4vqaVkaBbdzLU8aa12W7CxNL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be09cee7056bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7992, version 1.0","md5":"b550bca8934bd86812d1f5e28c9cc1de","sha1":"fffe793f52607740984a931ee7158aa82db94a72","sha256":"872e862918591a9e824dc03ed92f05729435ffbb8ebbb10eff7eda26592b1798","sha512":"a0b84873a17f6ded0d966c0f159718ccbb617ae19416815ea3f706c436becee0671d9cbc01c0fc4572712856bd0c1e5b32e2dda8fbf56d540dee5e36e833c05c","ssdeep":"96:2TVwxWNrKIvPdg1axqKXivj6iCvB0H0P76Oj6rDbeEmcDZsuVGD0RqaHbJiL1BgF:2TixEECQzfUv6BSMGDU5agjhWbq","tlshash":"77f1ad9ab6c85e02c724287b05c14727593c3313db2cbf56049ec2ad62c7eb14c9b06b","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-06-13T16:25:04.918495Z","times_seen":15035,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ksi303.org/assets/login.png","fqdn":"ksi303.org","domain":"ksi303.org","tld":"org"},"ip":{"addr":"104.21.56.142","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ksi303.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Nov 2025 10:40:33 GMT","end":"Mon, 09 Feb 2026 11:39:22 GMT"},"fingerprint":{"sha1":"76:73:12:8E:50:15:32:66:5C:7F:B9:1C:B2:8D:1E:B3:B7:46:AF:26","sha256":"F1:A4:43:D7:33:66:9E:B3:67:49:9B:D4:CB:40:B0:3C:73:AA:79:A2:B8:36:75:3E:74:A9:98:D7:5C:C6:AB:46"}}},"request":{"raw":"GET /assets/login.png HTTP/1.1\r\nHost: ksi303.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ksi303.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=ib667nciak7lcje5j57p8uiami\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:47:55 GMT\r\netag: \"e449-67104846-96aacd;;;\"\r\nlast-modified: Wed, 16 Oct 2024 23:12:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 58441\r\naccept-ranges: bytes\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvFNhsJ2ca5%2F9OgcT5iNaivXZ%2FYk1QjiA%2BAyuiCP04dL7MGVbWWBXYM%2F7o48DmK8wcR8WWzzz9fC%2FIFgameMXkNHxLuFZ1T2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b8be08a3d4a56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0b59bca2b1cb0652ae4791b6087db43b","sha1":"e9bee04f7941915c9058f39fa6dbe84cc8f094a9","sha256":"8cc91e76cf3eddc8d599c77db0d86239aaa872a7f15726609cc3816f463405fd","sha512":"8376b30a576a32279bcaf936456112cb62194f67c532c8ef390032f272a77c9de49d3c33b02e217a18f2cc51e963cc40cdd9615f0aabcb2dc27fe2b5165e66e5","ssdeep":"1536:dnRpjq9ilqkcvcZWiXLBQ2u5xiNKpYMsamKYGrNzkJ3RtGP:NWQqyWK1Q2uPk4dBYU5UOP","tlshash":"7e43f1effce59cf3b1576ca78aa94c5d56acf262f7c0280051b9061723247e759828b3","first_seen":"2026-01-04T15:48:34.475336Z","last_seen":"2026-02-04T22:22:09.521727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":909,"receive":591,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-04","alert":"Sinkholed","trigger":"ksi303.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-ray: 9b8be08a3c12712a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"619c057b-3a02\"\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1431616\r\nexpires: Fri, 25 Dec 2026 15:47:54 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=t4U19XtAzLytwexsckP1vs%2BllQcnoxgxoX1QhAYKJbmo1dw5riqUTqaHwYB9n%2FLeBqQL5fQVT%2Fj852kc5OCjONxqi0onZuNhI0ViNTxnhWe%2BkzD1feu9RkIkHiwbtWujGS%2FNsqgI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83981,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-06-13T16:33:34.260747Z","times_seen":20284,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":14,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vswaysrhino.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vswaysrhino.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 166414\r\nx-amz-id-2: eRX27cPxEs+nSvSpqh+dNPNFpuxO325OET7Nx2e9cWawI5wDyEIilofYM8fQxMfcPgm7Zi2Wbu7QZJd5FlIXOc25rw5Kr0AM\r\nx-amz-request-id: NVRHWBQ77F7BKHWN\r\nlast-modified: Wed, 26 Nov 2025 07:31:16 GMT\r\netag: \"c8ff4d59c1f566b2be7e56cf0551a3ff\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1763989494\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSygldLON2it16:2 (W), 1.1 PShlamstdAMS1pu19:3 (W), 1.1 PS-FRA-018SR149:9 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21760\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":166414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"c8ff4d59c1f566b2be7e56cf0551a3ff","sha1":"14c648eec833d86ff179fc1c715cb623321a279a","sha256":"a1c5c866c601a370f9b61072fa06759c9928153d18747bb79b37be2ba6cba415","sha512":"5cbe5561ecb43212dced9f1b6dcd32b00e9d379c0b61b188eea2d55127fb2a62d2adfd59e9f6a8ea273b4d601a565bbeede0098fd4a484d650256c2f6c0416a5","ssdeep":"3072:ogN/eHY6j5HaXgF3UcpWJ7DoUvS5u3w29OVqPgfZmk4m+okoumg4A8cbhPz9AMg5:R2HQIkcE7DokKo9m8oumg4A8cbhPqMk","tlshash":"11f312d93029bc6f0d268b305105385edd270e222b468b9b4d1fe961afe2d85dcfd587","first_seen":"2026-01-04T15:48:34.47766Z","last_seen":"2026-01-04T15:48:34.47766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":277,"dns":257,"connect":17,"send":0,"wait":96,"receive":113,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ugy8n1py.snaslelv.biz/gs2c/common/game_pic/rec/325/vswaysmegareel.png","fqdn":"ugy8n1py.snaslelv.biz","domain":"snaslelv.biz","tld":"biz"},"ip":{"addr":"163.171.134.109","port":443,"asn":54994,"as":"ML-1432-54994","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ksi303.org/","date":"2026-01-04T15:47:54.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ugy8n1py.snaslelv.biz","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 05:48:04 GMT","end":"Tue, 10 Mar 2026 05:48:03 GMT"},"fingerprint":{"sha1":"3F:B4:10:3F:3C:9B:F2:15:24:A5:A1:D9:2E:0B:31:54:48:A9:08:14","sha256":"A4:4B:03:57:0C:95:BC:3D:A9:7C:27:73:82:25:E7:03:DF:B1:1B:B3:BA:9F:80:7B:A3:BC:A7:1D:D8:43:BC:DE"}}},"request":{"raw":"GET /gs2c/common/game_pic/rec/325/vswaysmegareel.png HTTP/1.1\r\nHost: ugy8n1py.snaslelv.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ksi303.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 04 Jan 2026 15:47:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 158307\r\nx-amz-id-2: i67jHbIJrMr5NWPMPF/vtfUeqvjhFGG3yPDKt4WpA9Xr5EQcpfAIe7I5kKLcJst1CdbRCWn25T3NN0KDZnrr652Tu8+6Osre\r\nx-amz-request-id: 8DBQJNGAPGXWF6ZR\r\nlast-modified: Thu, 04 Dec 2025 15:33:50 GMT\r\netag: \"4b331835246fd83469a1064e9b742aba\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-mtime: 1764856911\r\naccept-ranges: bytes\r\nserver: PWS/8.3.1.0.8\r\nvia: 1.1 PSygldLON2it16:14 (W), 1.1 PSdgflkfFRA1ox201:14 (W), 1.1 PSdgflkfFRA1bc200:3 (W), 1.1 PSfgblPAR2gc184:4 (W), 1.1 PSrdsdgemSTO1sw92:12 (W)\r\nx-px: ht PSrdsdgemSTO1sw92ARN\r\nx-ws-request-id: 695a8baa_PSrdsdgemSTO1sw92_14936-21764\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 0\r\naccess-control-allow-methods: GET,HEAD,OPTIONS\r\ncache-control: max-age=600, public, must-revalidate, proxy-revalidate\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":158307,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 325 x 234, 8-bit/color RGBA, non-interlaced","md5":"4b331835246fd83469a1064e9b742aba","sha1":"8ebc694c6ee5faabda4b32d220b286c9a28599da","sha256":"c974a623bf47f91ee8b5cdd87c6ae2c5d3f45df8352afdb0ff1fed9615745576","sha512":"12548ef1aaac0b1d27e8a238d8a199f7d619bdeac68f21a40d7fe65745ded34e9ef04091a0744f90be5ee6c4d9a56bc6dd2fc32d26a773fa2adcff4d662ca6a9","ssdeep":"3072:I8cNDx9b7lm4w3emRNMhgrLXUkRaUt79rRGb:I8cZ7I430NwgrLEkR18","tlshash":"47f323a725c6142de79feeed20c995120bebdaef1050707a8a0bd24193caf71643e5c6","first_seen":"2026-01-04T15:48:34.479068Z","last_seen":"2026-01-04T15:48:34.479068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":295,"dns":257,"connect":33,"send":0,"wait":116,"receive":90,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}