{"report_id":"b4ce6524-b9d8-4868-83d1-971cb6522d75","version":6,"status":"done","tags":[],"date":"2026-03-06T13:36:05Z","url":{"schema":"https","addr":"evacuationprivate-uae.com/","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"172.67.160.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"evacuationprivate-uae.com/","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"title":"Private Evacuation from Dubai TODAY","dom":{"size":38186,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1053)","md5":"b2b9a87daa9bfaa2d52b57595b916a90","sha1":"4477283a2b0ec36923b1dfc4c35b192eeb116e11","sha256":"cd94d13d5a5986aa59947f4421d26efa0bec947e36eca023f8c64ab5334dccda","sha512":"8270077ce2fcceadba2fd7dbb9fb25e09c2733174b0280cbc6e61951f070c1041f46be60bbe5d63a5c26da624fdf334fc915945b87121770d38d8aa67d0cfcef","ssdeep":"384:AYgRin1OlSbeYkQ+iSbevixNViiybuV1q4e/HCWwr2eBTAa7Tmnje2bt7w:AYgRSL1NKmixz2mq1fCVYkmnJi","tlshash":"8c033a5a03f810993103a1a4abe4bb4a3ee1d417eb05d410b7ec9e5c5fc6fb9a83675c","dom_hash":"domhash51fceee8ce562baff1e9c3b8b7efe86d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"evacuationprivate-uae.com/","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"172.67.160.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T13:36:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"evacuationprivate-uae.com","ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":11,"request_count":11,"received_data":1291281,"sent_data":5104,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":92492,"sent_data":2232,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":7126,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"evacuationprivate-uae.com/","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ae386223c6c71534b30ab9e80cefe9b","sha1":"069f29dd36d14c1d2d21603283adcd1a8a5a50e7","sha256":"e69f0d307d4c680e492058a92f776f2fb51e4e93b7d06bb47d077a19ef2a0836","sha512":"81c7fe4e6c8615194985b6550f02530aaf8480aee0680559779586992b20755557282c569e97732fc8f550a34422b3bc5a82ba07f093545835cc2c599a17a930","ssdeep":"","tlshash":"4cf0dc9e2c43a46633fa253dc32baaaa2766170374c2d415fa01c4242fd89961c429de","size":488,"data":"","first_seen":"2026-03-06T13:36:12.345606Z","last_seen":"2026-03-06T13:39:52.93935Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a68056734b0ed5094d08f4424428727","sha1":"e910c5d1b75f437cf90a76e9a662ac689727b31e","sha256":"71294fb10bfa8f69001dbf1532c8baa28d2b117b065e9f1c29685df84070e8ec","sha512":"a0a2e21465d723b4e7d9edf177ba3c94eda69ac25a3a1b69a13cbf40e0e9a21dfd3830443df1653cb245ffad7f1186cdd6960b957433dbe51553c35441618889","ssdeep":"192:sF1q4e/g76MnWDcUux2eBTAa7+kmnVF5o2btBBi0b+e23ho:61q4e/HCWwr2eBTAa7Tmnje2bt7x","tlshash":"0f0243ad0a9814d92212d007dac5b90d3dea91bf7f56762733ac993e3fd202cc1b961d","size":8300,"data":"","first_seen":"2026-03-06T13:36:12.347027Z","last_seen":"2026-03-06T13:39:52.941237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18f0e3fb710f85465f5a7eb423aaf161","sha1":"4a0b8be530565d4dcffaa9bc03ecd7b29b1c8143","sha256":"b0e1c737942890921fee2e53d0eac3483ffd966e4aa3504081f012394a597c54","sha512":"460cec842e54a595e73731cbeb0efae99c6a3939d51c5afd0cda34155217aec3cbd7c3f6ac7ad253b89667f90e3c7897cae24e1ff12a62a1ccbbbda2c154886c","ssdeep":"","tlshash":"c7e0862aa6f518710237b235d7dfbb48226700570085cd097f7c46800fc461956e0d9c","size":426,"data":"","first_seen":"2026-03-06T13:36:12.348327Z","last_seen":"2026-03-06T13:39:52.943057Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"evacuationprivate-uae.com/","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T13:35:43.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 03 Mar 2026 17:28:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FXxEHq%2Fedc8%2Fl6BkUf3dfwAYzn0oQ3hJdwrMyq2yuAo2Vve0ed5l6kO3ODRe6jK8eByvyyt2JsR1GI4dMiE%2Bj%2BDrFu38QjuMyVmuMZrUnL6tYerOpkpt3w4%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d81bec8ddbf1ecb-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40860,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1051), with CRLF line terminators","md5":"692a84835a43c3efeb51eb202c76caa2","sha1":"1ab898232b9486735e69eb5fb648feaec840d598","sha256":"f4d70cad52ea3bf5c160b33f6ad2fa89d8d80dbd1d12bc579c5c7d61f564024f","sha512":"03bc66143d0cfa3f1eda589ba52fc2968371571040234f317fa49a0ce76b7ac7bc555f8a942eed89c2e39a70f4936cdc8d819d2e34f6de7b9d4bbb22d450afcc","ssdeep":"384:KhSCe98q8kCz98Jevo4iDTb8K1UInQROVKDuieLTAcEfCoNejrh9i:KAn8J++o/FUuKOVUtTCo+S","tlshash":"e103f51a83c91095313392a49f206b8effd1c117e346411077ecaa5f2fb6f689827b9c","first_seen":"2026-03-06T13:36:12.319407Z","last_seen":"2026-03-06T13:39:52.931319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":43,"dns":18,"connect":8,"send":0,"wait":93,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/ru.jpg","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/ru.jpg HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7624\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:42 GMT\r\nlast-modified: Sun, 01 Mar 2026 14:55:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5S0JXa4N1xR6eg0uTkqi0Efv2iyH8ororxZK06bmFxWVUDloMFRAz%2BKLT1g5U8nTBOT5gt2MARvc5QSagQHv74rKLt6kToBZe4XdpLTfKEtBgOezKB8jg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf6a8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 960x640, components 3","md5":"4617eb8836e9fdda0a2a83809436a3e4","sha1":"9f5710eafe82301ae91beccd472c83b1950e7e0c","sha256":"64d2702e9cf50beaeeac1e24f6f80146bcbc50b97df239aa3475078f47573ebc","sha512":"9a3ff5442e87cc62c67c512fa90004ec030cd3cae3ef54e7db6238508a01c241e150af73e52a61145d0e32e56a2441e3ad3508863bd1b149cd817f419180de16","ssdeep":"48:+fGfwgplWbZZZZZZZZZZZZZZSqTssssssssssssssssssssssssssssssssssssl:9LWOY","tlshash":"abf19fee4d15b9e8dd3090730557d528ef5692208b6fbc9e02cb9d6fe9b90128b7e700","first_seen":"2026-03-06T13:36:12.322497Z","last_seen":"2026-03-06T13:39:52.934326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/jet.PNG","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/jet.PNG HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 648080\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:42 GMT\r\nlast-modified: Sun, 01 Mar 2026 16:12:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4rgrwSxEOvTS73o8uWclz%2BJoMeb%2Fp8UV%2FgvZz2%2BMjVxzTDNRixz%2BLKPkFU3bKU8Y1mknWCeq00G6wqh2q8DKRb3Esr0cbSZtk1byCopaeYmcFR3KYOcbb7g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf6b8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":648080,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=8, description=Screenshot, orientation=upper-left, xresolution=122, yresolution=130, resolutionunit=2, datetime=2026:03:01 17:56:25], baseline, precision 8, 1320x1625, components 3","md5":"fee3a520c8746557df218009f906af9e","sha1":"e5d64899265ad76358eba510018c7eea2693208d","sha256":"d5bed3ab7343c0d355b03b06d34e4f890010e5f491f8b9695771d9f9e0998313","sha512":"dcc9783865f6619928f9d8b8be260c1fbce93beabca6165242e3adbbabd844e47b4c87e2cd8fd27518249a70c3f5c3d3fdf15306e57478159f0dd19c374652da","ssdeep":"12288:Vq8C5HZTpP8A22B/fujhsEl+e4D8bZDSLKHAIjwII:ETF8Ye9aewgSGHlMv","tlshash":"80d42303cd15a992e058e2b4bc034e5d6b299f6cf5c2b7f670af1eab77242351c69434","first_seen":"2026-03-06T13:36:12.324771Z","last_seen":"2026-03-06T13:39:52.923341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/2.JPG","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/2.JPG HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 113999\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:43 GMT\r\nlast-modified: Sun, 01 Mar 2026 16:09:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMnfniBL0yNF5p2Rh2sxIRgQ7NLzPgQux6qB1eTmpxChvjJPHPs%2FBoCtPWqWDInh5O%2FrJKuunYYM0ZOoAko242s2VIZ19KIb1O7LNZbU48Ctey7th8jgVFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf6f8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":113999,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 960x1280, components 3","md5":"ca00d8984ec388b14cb80513756843bc","sha1":"db55e1674feeb3877025766a8e56ca38aef9903c","sha256":"1da077c660928ebc00d498cb4b408c3edeaafd0779cff3b7610064a14f9f98d1","sha512":"187a206a04bd3ec393563d8ccd8faea9cc5269510bd56d4dfa6799ab6a77a16e2fe60925a5152157a491f5aff538b555658ed10054038fb68215f4bd3db15c06","ssdeep":"3072:dAHR97Daprgq1jtg7b7csBXjzDEvAeMFcAKBPc:Exaprv1KzXjzDEvAdyAGc","tlshash":"10b31281ee89d65ddc3146b784cfba2fcd9abd3584e3d34bbc819844c84e4e26a481f4","first_seen":"2026-03-06T13:36:12.330279Z","last_seen":"2026-03-06T13:39:52.928129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:44.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://evacuationprivate-uae.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 05:18:41 GMT\r\nexpires: Fri, 05 Mar 2027 05:18:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 116223\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-26T02:22:40.812221Z","times_seen":24904,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":68,"dns":3,"connect":25,"send":0,"wait":10,"receive":2,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 13:35:43 GMT\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6440,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ce031a04376db7d13f496b3cd42e8687","sha1":"c29967f2dba3209eb1ddd705efc453202aea6313","sha256":"a398f675a83adcd0ae07d2d75620a4d45150483e6539adbffa1338c82386dcfa","sha512":"9f828cd6e800fa54605d039600666007cd2e2511e72b99f182cdb2788409a5a06dd5574deea4899a0d3d209e7290b71fbb219d16aeb24fcd7624323196b10817","ssdeep":"96:cNQO1aHQO1aGJc+uhQO1afNDNQOEaHQOEaGJc+uhQOEafNDNQOXaHQOXaGJc+uhI:ccGGDZx/GiZC4GRZfRG4ZYiG/W","tlshash":"4dd1ff9200679500eb635cc226cebe32be8fa1556050da396ffe2498ed9fc311311b2d","first_seen":"2025-09-05T05:32:32.043488Z","last_seen":"2026-07-25T16:51:37.196839Z","times_seen":3011,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":119,"dns":0,"connect":21,"send":0,"wait":31,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/flyseclogo.png","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/flyseclogo.png HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 168355\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:41 GMT\r\nlast-modified: Tue, 03 Mar 2026 11:35:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewaZnDxNLjZzYSJ%2FhALQNDQK6lTHx9NyoUHZjnzhVzMzWPgnS%2FofDfgOMV%2FPI0VC46FZzSx6ArGPxStGb6itzt6vpxuf7YRBWeN947BISfvA3ungWOspUHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf678b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 320, 8-bit/color RGBA, non-interlaced","md5":"184e41ca9d643272633dc8b0db40eabf","sha1":"6c21140e6051fb14221d7ff9f338a45bbf58abd1","sha256":"5fe335a531ba1a056da28c640ad4a8dce6e794782a3110a2a5542def400403ed","sha512":"0b129c054078594c3636a8755354817da3d203651494a86266fa0698e634b3b4de9346a0ebd1eee1a38079d850a83bc1f43ce72d80a93c8fda81e7de7ce6d18f","ssdeep":"3072:Lx7p1r/n2er1p6EIb7bSa4LxXtCWkUTd7qWJaPkr4d1ePfJ5esDERqYdkBq:Lj1r/9jLIXOTB7jykr4d055VD/YAq","tlshash":"78f31248de8a9d1cee76ea3ede7266347bc5ddc3ea272e0e03250f14e425b281d61315","first_seen":"2026-03-06T13:36:12.334583Z","last_seen":"2026-03-06T13:39:52.929727Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/3.JPG","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/3.JPG HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58641\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:43 GMT\r\nlast-modified: Sun, 01 Mar 2026 16:19:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FnRdNX321vcQPHr1JQvRwmNoQ%2BvMCmCUPFQzCNH41V6tG2654tsMcm%2BKXx4y7SCvld7Ejsa9X%2BilYYWz8Sipq201w9NjhOMvkE6oA7WbJ2JYR3dbLwlGaQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf708b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 860x453, components 3","md5":"e15d7a863490bb436a928d2e1ce48da5","sha1":"a5b2279726ea9801ce0ffc2d091898f01934c76d","sha256":"52f085f394c5d050d1f76895fe0514c98d3fae3246a7b81ae13869b3799d1679","sha512":"e1acfd8f47633aa22dd27ff74d49f0c6f403dfcb237c1385531d8405d957bdeaa9429244df553ee50bdfc7eb62bac3a37a14ee5af0fa6b64bcfa3c508b98fa1f","ssdeep":"1536:VcwSd3lEjC+c2BSd7p1AZo7ovIIV+EvjS:W5d3kCCBkNioATO","tlshash":"0d43023a180a9710f63aa2f86950d0abd50267f2b66f7929bf43b411fdc054aa00fb85","first_seen":"2026-03-06T13:36:12.336446Z","last_seen":"2026-03-06T13:39:52.924982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:44.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://evacuationprivate-uae.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 05:18:41 GMT\r\nexpires: Fri, 05 Mar 2027 05:18:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 116223\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-26T02:22:40.812221Z","times_seen":24904,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":65,"dns":1,"connect":8,"send":0,"wait":10,"receive":2,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:44.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://evacuationprivate-uae.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 05:18:41 GMT\r\nexpires: Fri, 05 Mar 2027 05:18:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 116223\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-26T02:22:40.812221Z","times_seen":24904,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/uae-gov-logo.png","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/uae-gov-logo.png HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 21276\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:42 GMT\r\nlast-modified: Sun, 01 Mar 2026 15:09:30 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rytKgwLkTQk0s3v1XjbvHy%2ByWg2HEd0PImcCiyABJzUweSe9%2B0YVUT3FT74vWR7r5F7JTQJZMTwZKUp5LdQ3xlxXon5UACvePnS%2BKeecWhd5OxGBOuJb1Yc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf6c8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit colormap, non-interlaced","md5":"a7e94cc573a1df106c85c75d2c59461f","sha1":"30d6b98cbdec3cae3f599075108b646240c47545","sha256":"b81ec46c259e58da82af63701c15bb8ef1301366e944aa2a01f3b396523eaafa","sha512":"8465d8698c77ce789309682a98105895c39b1facbaa9c7fd64023849ed549d5cf026967c3070616027dac738f52a7a5092a9cbcc8787cb8de4ed84576abda9e4","ssdeep":"384:PYkXhuqvaNjeGblvE8RpTzGVLCZheDoyAtcpwicnmNt+4X2/:PVd+ZlvE8RpTzTNyA0cmN0d","tlshash":"4ca2e1477efcb871dc78ab33fa3488939275ec00d063d7861c6178649ef8da86605586","first_seen":"2026-03-06T13:36:12.338079Z","last_seen":"2026-03-06T13:39:52.935748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/4.JPG","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/4.JPG HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50859\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:43 GMT\r\nlast-modified: Sun, 01 Mar 2026 16:19:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cH5Mv4jW6EOAYdoAbKindn9RXbuwS79CJvzsLXyeo3QR%2FOz6qOIZY1IWL3oLg6VfdOis%2B5qKNevBQJVpkZ0bzwAzI4uimY2hVAjz56CqyivgIQ123csLrcA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf728b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50859,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 860x453, components 3","md5":"7f535f44dff2d4462f67fe3d95170d79","sha1":"ee7506ee16b2489b9b0619357d19013d9a13ca35","sha256":"04a07a032959c518c0483f0c0c0a4c4438fbe12ffc6f32a952f5ef48344affb2","sha512":"acf2c39cc4c3aacd2369c6b29970ac7526fb126cc99a3394d616b98302c086bed1d2c33f707f9064ef9983a115b95aea19b601f7bc5268b3c4c89fe35862c000","ssdeep":"1536:1HTEQsFOgyR8bqQ5TxiBmEb0EUrbgmwxSrrFc:5T3gyRG77iBmEbVUQ5Sdc","tlshash":"6f33012dfa449f95fe0d98b1a68c5ab03862e64563c4784a318373d8dbcc1c6cb0d9a8","first_seen":"2026-03-06T13:36:12.339771Z","last_seen":"2026-03-06T13:39:52.937428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/favicon.png","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/favicon.png HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 29552\r\npriority: u=6,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 13 Mar 2026 13:35:44 GMT\r\nlast-modified: Sun, 01 Mar 2026 15:29:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ncHGaqhiz%2FObhocC81bOFCQrvfBK6QtF87%2BuUmmkmIbN9LvJdc9P%2B6mqUD3qsXi6pFGl%2FjRN12AMm7ZQgqSFsWKL%2BfqTfOkteBgY7kntZup4FvhcY4EomHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becbff9a8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c58021fa93881c221b3867c1385f76fd","sha1":"66c3d3ad305475c6e0eef6880575179d879d51a6","sha256":"2121d3f1aa8c30ba80c8b228b9d6097d60286cacaa3b6ac5f32e0582b0c8830d","sha512":"4d5ea36c5c41c1247aa72b98b529712ea4a6f8e61e32749a7a857b416ba57245a0f9403a2d93c3fa2e3b898474fe6408e85bed118adedf91715ad9f920a2c74d","ssdeep":"768:m357vqlEKBMFC3JVXFzv6FhkrbyQFlUyaHMn+NkV:NEuvVS+/dXUyaHMn/V","tlshash":"a4d2e195d7dee105f9896e947c7fcd8a1343e105d16e386462efcaa32098c071a668a3","first_seen":"2026-03-06T13:36:12.341455Z","last_seen":"2026-03-06T13:39:52.918764Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/en.jpg","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/en.jpg HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42086\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:41 GMT\r\nlast-modified: Sun, 01 Mar 2026 14:55:36 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87661\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXHkS%2BvMNamg9sed%2BAW5Yb1nPQjtqWHFua38kdnvaLo6DUU90BG6ZzGMu20iVNq9lVUcDfH5J9G0hyp5J1Isv3%2FjxAsePr5jbAwqWJXMpTXZNe1M7%2B4dOF8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf698b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":42086,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 1000x600, components 3","md5":"12476766fb1eaf2a2aeec156c296f006","sha1":"0477326b172f82b95d8e65de60f40eb2b5e9bc67","sha256":"01eece8924931480bc8162ce7580f42097ce62d3a1b9b3dca4cdab0d53cfe641","sha512":"484e4ab28572e6719296da54965a62a5fca36bc7a371218d344fc0b38dc7fa83d65878a5a1942645538c6bc475038718768d2d04223ca70e2d0229b3c65a01bb","ssdeep":"768:eW5AQp0vrtcoo7sNiTrNQTvbYQSBPnUSTRBOCWwdQDmvrOuYUB5DrOM+moiiSXRt:eeAVvHnM3SzYLfUSTRBFd1quPkmGgIw","tlshash":"8813d08a9b96224efaacd172fe11152072db58217bc1c6a103c351768c293e1fcdae1f","first_seen":"2026-03-06T13:36:12.342878Z","last_seen":"2026-03-06T13:39:52.932425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"evacuationprivate-uae.com/assets/1.JPG","fqdn":"evacuationprivate-uae.com","domain":"evacuationprivate-uae.com","tld":"com"},"ip":{"addr":"104.21.14.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:43.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"evacuationprivate-uae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Mar 2026 13:46:19 GMT","end":"Sat, 30 May 2026 13:46:18 GMT"},"fingerprint":{"sha1":"D7:73:9E:3D:29:B7:4D:5E:FF:C0:E3:72:B7:A1:9E:B4:5F:3E:62:D1","sha256":"BC:D9:A8:DC:93:37:F7:92:7D:C5:C4:0E:3B:46:EF:C9:A2:4E:8D:CA:29:3E:91:58:BE:D7:89:5E:6C:B7:0E:43"}}},"request":{"raw":"GET /assets/1.JPG HTTP/1.1\r\nHost: evacuationprivate-uae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://evacuationprivate-uae.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Mar 2026 13:35:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 101803\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 12 Mar 2026 13:14:43 GMT\r\nlast-modified: Sun, 01 Mar 2026 16:09:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 87660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mWf%2BacVjmqQYPFkv%2FnVkaIe4VY618xZtltImqUY5W3%2FJgmvnZZeOIqX35bjKYUXJNy1fVCgqhkGYT6keUYVvjZ7HcYzjDTIPfG0FNUvfLhS66j6yd%2BwMIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d81becaaf6d8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":101803,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 720x1280, components 3","md5":"89aa400ad19b7a1b596846692ae2b514","sha1":"2f32d6c5c3e025cba5aa942c8871077dd6eef8d7","sha256":"a242c2885f7e521b6d31c8109ae2726e5adfa3e92b23b569b165f786381be072","sha512":"1dd3e17e2b4f662d82407a73065053a0357fe09c6c74fd7b29750480a4c840178a8bcc0ab3c161dcd9fef952e1bb50673f41bedce14022a763dd3df6f877f2a6","ssdeep":"1536:fDhJnFNcWUv6vcNiRJSjb00WPqDMAIiqg1aXcTyKdvv7Cs+0Kx2m/sq2X7DzBsQ:DnFCCcySjsPQpwaq0Kx5+7P","tlshash":"a7a31243aa598209f0e723714cb9922d6367d5bc7d124fc65f9e14f308c21a8adcef68","first_seen":"2026-03-06T13:36:12.344213Z","last_seen":"2026-03-06T13:39:52.926472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"evacuationprivate-uae.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://evacuationprivate-uae.com/","date":"2026-03-06T13:35:44.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://evacuationprivate-uae.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 05:18:41 GMT\r\nexpires: Fri, 05 Mar 2027 05:18:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nage: 116223\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-26T02:22:40.812221Z","times_seen":24904,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":117,"dns":3,"connect":8,"send":0,"wait":9,"receive":2,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}