{"report_id":"b7e38f5f-44c3-4b21-95f3-f529af20e950","version":0,"status":"done","tags":[],"date":"2026-09-19T07:16:36Z","url":{"schema":"http","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"104.21.94.87","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"title":"KMSpico Download for Windows \u0026 Office | KMS Tests [2026]","dom":{"size":157022,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14875)","md5":"cfae639be3d1caef5c79610e95e59add","sha1":"f83940d05eee1256ee1374604a1c1b296af8947a","sha256":"35b30a7122a40a2e660d06f4f0c3393ce0b0c8992e93db49a8f8eee47c76d79b","sha512":"dc8b7230943e5255b6805f8fbe5d871f5aa1df71b1e77e220da13cdf492386516b2d1245f6ea5b64304118afbefe810eb76e2b78034de31fcb41bcfa35e348b2","ssdeep":"3072:9/ozsA+th4OcY3lfwqeRULMLeJ9/oOwshGP:xIOcYKqWo9Q","tlshash":"5de34c23d2a8153b312703acd604e75973559126d72a13d4f4ffc198af92cb61ab3b8e","dom_hash":"domhash04eec2dc3392819440a1635f784a6f92","first_seen":"2026-09-19T07:16:54.880696Z","last_seen":"2026-09-19T07:24:22.587864Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"104.21.94.87","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T07:16:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"official-kmspico.blog","ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-23","domain_rank":0,"first_seen":"2026-09-19T07:16:50.229052Z","last_seen":"2026-09-19T07:16:50.229052Z","alert_count":31,"request_count":31,"received_data":877842,"sent_data":16900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:28.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"cdn.canvasjs.com","ip":{"addr":"172.67.75.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-28","domain_rank":601532,"first_seen":"2023-05-05T12:44:54Z","last_seen":"2026-09-15T21:40:45.257079Z","alert_count":0,"request_count":1,"received_data":532977,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01e82d129e69b0c8ff2fe0cbb36d2cd1","sha1":"34173ee95995032b8b595e9436657096bed52528","sha256":"464fea7ff07fcadae63641a6cb4fbfc067e6b5be00c99b00cb952fa48a96b6f5","sha512":"acc0e14dd8a22721134fdfad6240649ac41f95673ee8abb76850061d8f84b0e04c26e67db8715a97187f572aab9552aa7c53a65eeffd3349106d2b29e8041db3","ssdeep":"","tlshash":"fac08c8a7f3807b512e39e1ac932173eb482e401c12b5caec4d11088b7abd12fd878c0","size":175,"data":"","first_seen":"2026-09-19T07:16:54.913724Z","last_seen":"2026-09-19T07:24:22.618787Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2bce0d7b1e57ce13d5425d54cf46bb6","sha1":"340753bb4452c1f4c4edff3f3dd06f762762dbd5","sha256":"04309a9bc6dc90b4a70ecedcd9c0ea492c2c05054c94b18f08eaac66686ccfca","sha512":"76b43420a7317bdfec8c34a482d54625856157b2ce80806833242cedb72d3cff10d112ee78a7de2c3db30e96232b6e1d5b4847a4acce1a23008d598b2461706f","ssdeep":"","tlshash":"a2119e1624f9093242bbb1744ddf5909b124010f29096d397e9e9904df6ca3e58bbf98","size":1032,"data":"","first_seen":"2026-09-19T07:16:54.91513Z","last_seen":"2026-09-19T07:24:22.619687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfae1e8e774dfef11731812874e3cfc8","sha1":"1cdbd9c79f76a5aece257d2807c0f4cb9e4d52b8","sha256":"67b82abae5252e7f4fe9d20924652482ece99df3ca91ed6aa1c98a53c1f98f1d","sha512":"601334ac697853d4abf3e1e5c5706fa01c9da513b0fd045e2eee0e8b50a75f5e5ab67fd170fb54703f5a79417d8703f8b0d186801e69249a6784d923a1401e5d","ssdeep":"","tlshash":"a8c08c3f1500677824e31ee8a8f7ab903f232fa3d29e0080d8bc86569390d8b9c21dd1","size":172,"data":"","first_seen":"2026-06-03T00:16:41.164862Z","last_seen":"2026-10-11T15:42:37.458859Z","times_seen":4137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1642e979cf900545390fe4961c27ff6","sha1":"0eff6cc8090599217079522929977657d0048c1f","sha256":"1fa9c2dd1b18169730b58abe3702837d30cbe2ed4e216bfb6b003d6dc8453e8c","sha512":"dc5cd8e470881600e7fb1a5be4a9007c75bd43ec3c52728f13e74381bea5dc48752ea0f53fda3f7b305fc983c35f3372104626a0e74f9b1eeb4770c566fef714","ssdeep":"","tlshash":"8ff0c079f88335b6287721f96beb57a5354100a35042c0116869d0c82fe19b12e7c5f0","size":558,"data":"","first_seen":"2026-09-19T07:16:54.916637Z","last_seen":"2026-10-04T08:59:42.665006Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06f019a6ff09db6b297570940eec1d5d","sha1":"872efe186950ce534aad341e7030fe24f7c672dc","sha256":"53f829ae556bf7011727483015d83a98bcdb4b5796eecb728827c1282c971536","sha512":"0cc41e9797501e654a2b51a1adba4d3593347ada90e0dbdeea3ee89345415ab192007ae9886855447d472d814b8945fcb680ae7fb8942d17af1682a33236d633","ssdeep":"","tlshash":"5be07dfafd5b457101e7a1237bce739e293275a3e92a4c402889ce806c38dd31126dd1","size":325,"data":"","first_seen":"2023-03-07T01:19:13Z","last_seen":"2026-10-11T15:42:37.475008Z","times_seen":27447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9023083ca52ec6635fd649116365450b","sha1":"e167ad7ef3e3046a8bb3e0ff3647e6684d61724f","sha256":"5b81630cc5b50c71ca328db0f8a8506a04b81cf0e6dc396467490dedb148a7d2","sha512":"3182dfc4bae1844fd045d3350d56ed91fe0db06ea458a26347dd390dd5b315e064ad692926e83301e7bf155efc9eb95a4647bf83f7b8a9c0931869739d7ffa8a","ssdeep":"","tlshash":"a0b0124d5c982f4e69b04df404511bb32b706260d0294804568468434360c499f48512","size":96,"data":"","first_seen":"2026-05-23T09:53:34.68527Z","last_seen":"2026-10-11T14:08:30.906235Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a965b212f5243fb36885caafab468f04","sha1":"d1e18851c3b2545c88190f0d022cdca22f0f3dc7","sha256":"0b431ef13786b1eeee4b37bef451298e3b9d1aa6af4a90f078b67e2220737418","sha512":"955d19eab29eb75961889ca83c9972aec122e345559f34f3992b8a620c1ff70dd26910d0fc8037ae9f62e79097f2b115cdc7f60adfb63f5c5edf054e02995361","ssdeep":"","tlshash":"c2e02b2782fe9f4063e70e994848127d405e7193f0815c45d2ba900449f0dd26686393","size":370,"data":"","first_seen":"2026-09-19T07:16:54.918701Z","last_seen":"2026-09-19T07:24:22.623811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-11T15:46:30.771845Z","times_seen":26997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/plugins/visitors-traffic-real-time-statistics/js/front.js?ver=8.14","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b49ad6c0280e9befd696aa82f01d668","sha1":"f94cd70eb5055476ab295391c422820fc1759a21","sha256":"22b9c0cad437ecd7645106a087ac59a2dca3f1c269931f264f7648f7ac070138","sha512":"8bd5da21a0ef6aae73236df439aebfc7444e776b1a8f47f243a4103c1125451cc6c97d4dbc84243af4c74b53d113569e5046973c37073512243214577b05aae6","ssdeep":"","tlshash":"194125590db34835da675418a66f118d6ee8b233741c9d50384d1b908fe07af8311bf6","size":2176,"data":"","first_seen":"2026-07-09T19:12:03.415123Z","last_seen":"2026-10-11T13:50:27.713646Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.canvasjs.com/canvasjs.min.js","fqdn":"cdn.canvasjs.com","domain":"canvasjs.com","tld":"com"},"ip":{"addr":"172.67.75.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae2d4be4f26a227418ea47f65680d7a7","sha1":"c6f4b649ddeade2439805a5c0a92cd82837867f4","sha256":"d5ef7991411bcde9916792f2099911b924bc3ae5a632cad926ff2acaca3b3101","sha512":"8632ab9627706c92e15b241d794ac3d779270cd08fafeebb2ad3774718de30e8f85675465a8a840604f32e0ae4d8b076a598e2220da08ac0be8ea85a5d5eb9d7","ssdeep":"6144:cOLTfJ1zQI9jLtOolwz5Z0MZwkIdcPgI4fA/bS7rsLZ:cuTfJ1M0MZjPg9fA27rsLZ","tlshash":"d2b41a57b3291082c85653ae246d168bcf3331d6694794bcb6688bfd996cc0e31fdbb0","size":532007,"data":"","first_seen":"2026-09-18T07:40:11.071753Z","last_seen":"2026-09-20T15:26:30.016584Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js?ver=1.2.4","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"612f7ba565ea23b12a17dc5f43087fdd","sha1":"366efea2336b140fb74571fbcf539c2df22e1ea7","sha256":"56a58b2a7d081644adf703dce04831d310de1c8971be34eb26c257866ab806a5","sha512":"5d9f333c0054a2ad53473347b0d8bb1332cf2b0f6dd3d4e4ef208d30885fa28b34c3988b9abe9f52cd0700f3674c551e007bb94cc35d282894d5872a908f77a8","ssdeep":"","tlshash":"5e71dccbf1b165b8a0e265bd08a375c47a36305d30de509a6a1032d52bab046b337f7f","size":3654,"data":"","first_seen":"2023-09-20T23:16:13Z","last_seen":"2026-10-10T22:15:33.586621Z","times_seen":1517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/ahc_front_js-js-extra","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a00a86e4916fd35cf17bed48c0d0ce4b","sha1":"bb86c1f42669278fa4195128fd2571cb0d9d921a","sha256":"2360326627de9628bed9841eb7f785ce2119ad854ca6c5ebc2ce60967ddcc9d4","sha512":"9849522fa47b892c58683f6a070410f71124060bb3448dc21e5d2c6b980efeed8c982109efbfac13de77eedfd2e81e743f2977c1e8bf5639b1507467cae20980","ssdeep":"","tlshash":"15412b27c2fe9f4063e70eb94c4c127e405e7193f0c19c45d2bad00449f0dd26686393","size":2300,"data":"","first_seen":"2026-09-19T07:16:54.919644Z","last_seen":"2026-09-19T07:24:22.625687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T15:43:45.369822Z","times_seen":1100796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T15:43:45.434557Z","times_seen":1004901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-yandex-metrika_YmEc-js-after","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eff4841cea4584f56acb7fe1eff3066","sha1":"6ebcbb5577023eec961ffacadcd296afdf3ca3aa","sha256":"28cf346598e9728f1f6b0526762783bbb5adf4dc8b96057db33813373a918f8a","sha512":"4f36904eddfb1a0cfb1a4511e8216cac09ef7cd6c0c9a2cdb9c13cedc19c13cf2737e44fd1c2181b3887a7516b1b020bc0e9dcdec607ddc5fbaecbbe1c70e60b","ssdeep":"","tlshash":"d4e0125afe3406b512a75a39892116396481a401c11b5c59c49110846697d11fd86880","size":418,"data":"","first_seen":"2026-09-19T07:16:54.920608Z","last_seen":"2026-09-19T07:24:22.626678Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/heartbeat-js-extra","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0597d7b7372bb2fd4587b608c5eeb756","sha1":"67264cc4db72126340d0a8692702d11b551f971f","sha256":"712a3a95317a0cd0ac0c29fed8902782f9710dbd9c5aba679cdfb1b6e4dd3ecd","sha512":"9c52b8fa424ffc66c4836d439fc985ecc037d41c6070b54428d20dd4aa39a9b75afb745354fa50f24f327cf8f8080794077ba601cf1b0e525357d2a9da5c8300","ssdeep":"","tlshash":"d441124ddc982f4ea9b08df408551bb32bb06260d02988045688a84343a0c499f48512","size":2021,"data":"","first_seen":"2026-09-19T07:16:54.921727Z","last_seen":"2026-09-19T07:24:22.624786Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/heartbeat.min.js?ver=7.1.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3049b8f9eb73d57085d4f22966e5d5b6","sha1":"8d0abbd3c0dac67b415fed4c31659814f54a625f","sha256":"a5f83cd1d67cfb064597a5420fe2964401bcf3f7eaef0d6aa57fb4f3e1eea910","sha512":"d95631e26944349fbebcf0565361e535569bd8d666385bb6f24e18e72328243143329543f35ac18bf61a1931dee9a19a29c0c67f82eceb9006e9ba8b47fc5723","ssdeep":"96:Hwbj+Zti5lyAWox0keydfNX186g5XvIIOTZS2NYmWKx0Pa80kAHpu+hQ/p:H0+ZtclyAFneyd1Xu6uv8HWKx0S80kAk","tlshash":"13c1724d2b0f300e4eb741a3199f92863e712977291f545013295ddaaaefe2d8312fad","size":5947,"data":"","first_seen":"2024-11-28T14:29:08.593168Z","last_seen":"2026-10-11T14:34:54.571163Z","times_seen":2022,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/js/theme.js?ver=1787456433","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3adc958a5ed03c86e968b6fc947cc7cd","sha1":"54f43a9ec50c01d7864afc2f226858de37266ab5","sha256":"3f59dd15e533fb034d095d908a4e229a801be8406ba22907f5f7229e181fa3a0","sha512":"d9a4aeda73ead65113974feeebf6c64b4f502e4838ad7de29dfde9f92977f860f153d8e29f4e3b95de54ec246d9651361cef4818f77372799d3a09c8d8c90b41","ssdeep":"","tlshash":"a871ee2fe9e71076943731a987df93a5763900876407c8067e5ccb842f509b229babe8","size":3754,"data":"","first_seen":"2026-09-19T07:16:54.88308Z","last_seen":"2026-10-04T08:59:42.650222Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/plugins/wp-yandex-metrika/assets/frontend.min.js?ver=1.2.4","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f881df1ceee11fa83e6804188db1f99a","sha1":"b9bbb31a4a97715a3bd0e4eb932b29426fd1f59a","sha256":"0d96d5c7dd4e5d51d3ba167d24d4260d10a62ef1546b213883ecb4066fbd46c6","sha512":"f3542d951459a906a5809d43288001faf719bf55569cf916304c0245dfc35aca1ef8583f801c46d31cad5eb5d642d4080bfc2138c9f6dd57b6b5448c7e9e9849","ssdeep":"","tlshash":"02e02204a21601f88831db25ab2a27b9e001e7c3320b102ace840ce036a212b9983e95","size":388,"data":"","first_seen":"2023-09-20T23:16:13Z","last_seen":"2026-10-10T22:15:33.58951Z","times_seen":1486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://official-kmspico.blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/A-King-Kong-macaque-named-KMSPICO-storms-Microsoft.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.458Z","timestamp":1789802165458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/A-King-Kong-macaque-named-KMSPICO-storms-Microsoft.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"59fa-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlPotSqcIe2cKOVn1CgDQIzC0%2BUnWwUKPDNw8g1PlEwctS6%2BTR%2FeJUdczsv6UJn9xMaFhfTmSe%2FrrtFPILHnPrcX5fsQNkY0Ld0lVnViUbral1OlzfZ110MRneVZnVFJ5yKnhivKU%2BQ%3D\"}]}\r\ncf-ray: a3d6cd8e1f6356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23034,"size_decoded":23754,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8dcc9f716f3be645f608692cd19815dd","sha1":"8aeb466f31cd85c7bda5eecc96ce0451a467f6a9","sha256":"68a0d4d9c9a25d012bf2771a7490b245672d52695ed766030733f9a0e97686e9","sha512":"6abbceca49b785b1ee8f2ce87e055a68b5e8a3e17408f675a39e5a93b8c6c714de92e56a96bd64cdaf364670246c6f2d15b7053c928d492c319b23e93542fe54","ssdeep":"384:4k3rm8sW/XM70FBCSrTkm+nGMZp/r0/HJ1g0aT7ug/2wQGBWWbBED:4ErmT7qCIIm+GMZp/w/p15suKDWWbuD","tlshash":"aea2e1d0b9ecab30ee3527387fd4682e9425799f43f0034a5cf649066f1e955e2828ce","first_seen":"2026-09-19T07:16:54.881943Z","last_seen":"2026-09-19T07:24:22.589517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/js/theme.js?ver=1787456433","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.710Z","timestamp":1789802165710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/assets/js/theme.js?ver=1787456433 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"eaa-659aea1bd8e40-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRnOdQQzJXBJXjSFB5iCiIZleNe%2FRKEiKrcxbtc9pJo84SXg%2FnK8SGpUHOw9%2BfnQfBkj%2BsRi6BX34N8HDUIA72z7Xg08jIQAqO%2F%2FNt7m3IXjhrSmMs8mfd7IRdT4K1lo1NbPKIw1kKo%3D\"}]}\r\ncf-ray: a3d6cd8fbf8f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1147\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3754,"size_decoded":1976,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3adc958a5ed03c86e968b6fc947cc7cd","sha1":"54f43a9ec50c01d7864afc2f226858de37266ab5","sha256":"3f59dd15e533fb034d095d908a4e229a801be8406ba22907f5f7229e181fa3a0","sha512":"d9a4aeda73ead65113974feeebf6c64b4f502e4838ad7de29dfde9f92977f860f153d8e29f4e3b95de54ec246d9651361cef4818f77372799d3a09c8d8c90b41","ssdeep":"","tlshash":"a871ee2fe9e71076943731a987df93a5763900876407c8067e5ccb842f509b229babe8","first_seen":"2026-09-19T07:16:54.88308Z","last_seen":"2026-10-04T08:59:42.650222Z","times_seen":3,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-admin/admin-ajax.php","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.973Z","timestamp":1789802165973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 104\r\nOrigin: https://official-kmspico.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"data%5Bahcfree_heartbeat_ip%5D=195.64.118.152\u0026interval=5\u0026action=heartbeat\u0026screen_id=front\u0026has_focus=true"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.14\r\naccess-control-allow-origin: https://official-kmspico.blog\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, max-age=3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqgc2zFIqeKoyS8oYvEw%2F3f6TiwNQ05oK3calwl5fTHYqhA5ofU5gRD9M5No92bmTc1RyrouUbQuYm6iQODcuqFPMQbnAdPEkGgNgZgpVfEXyh0c9z24kz0Vmd06p2aXp3n6L%2Bsu8%2Fo%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d6cd915fbc56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":113,"size_decoded":1184,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ef38fe8e7006dc394308404151ab3562","sha1":"dc93f740ac73b970c3817813d70e002a81aed551","sha256":"38c155b60f6857be702bcf3f853c98d8b357fe0c229c589cc67046306554e688","sha512":"fba2d281b24ccd4a3e0b1c795a6ab89a6a616e1a01b80e40dd1b6b403c65d1e74d9f1cc3b560ca12892d878ef95b65a426ec5a95ed96f071ff21255f5b27789d","ssdeep":"","tlshash":"1cb0124904e9c99e49da2b81484c6ea1878131cd68551e08838981292cf57e9e54a83d","first_seen":"2026-09-19T07:16:54.884378Z","last_seen":"2026-09-19T07:16:54.884378Z","times_seen":1,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js?ver=1.2.4","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.454Z","timestamp":1789802165454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/plugins/wp-yandex-metrika/assets/YmEc.min.js?ver=1.2.4 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:32 GMT\r\netag: \"e46-659aea1ae4c00-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEF5kqmhKRF%2BVE1jhEOZQ9n0F3%2Bg1XGfI0NIquDcE8upOsXDkuLsamQkyq48e4eX%2FtkEkJfa5JgSz2VJzpYZCsPPdAMUYz%2BA9bqVV4Di%2FkkyTT7DoH2nI8v7ScNEdcTPMQqiDlTkSLI%3D\"}]}\r\ncf-ray: a3d6cd8e1f6156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1185\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3654,"size_decoded":2012,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3547), with no line terminators","md5":"612f7ba565ea23b12a17dc5f43087fdd","sha1":"366efea2336b140fb74571fbcf539c2df22e1ea7","sha256":"56a58b2a7d081644adf703dce04831d310de1c8971be34eb26c257866ab806a5","sha512":"5d9f333c0054a2ad53473347b0d8bb1332cf2b0f6dd3d4e4ef208d30885fa28b34c3988b9abe9f52cd0700f3674c551e007bb94cc35d282894d5872a908f77a8","ssdeep":"","tlshash":"5e71dccbf1b165b8a0e265bd08a375c47a36305d30de509a6a1032d52bab046b337f7f","first_seen":"2023-09-20T23:16:13Z","last_seen":"2026-10-10T22:15:33.586621Z","times_seen":1517,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/step-4.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.721Z","timestamp":1789802165721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/step-4.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"2d6fe-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hnPAWnNmgnd4%2Bgm1JDEx2HGznW%2Bhxphy3wtP1iiFgwaXTrpeGPxHhJkh9eRhJJjtTE7GoslGz%2B1UrAXVHFIqVLeQIbmujumeDce7YwGbeszuR5%2BE4CwoxBvFNaBtZ7G0GTabEuFs6QU%3D\"}]}\r\ncf-ray: a3d6cd8fcf9656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 186110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186110,"size_decoded":186830,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1092x976, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70f1cca63b211a2b27e95179b1deb6ea","sha1":"d7a5c4afd803c2e5e07e780ff84c3af3ea442806","sha256":"b66821e3a3a283cbf72a3a15d3c207f487d356bb6f796d6eb2d6883ddbfa0335","sha512":"c9d481a0417f2178cdbc51f4e4a541d0ad4a413afcedfc9e7cbf8f9e6c2585b0c062097f9b59875b6cffc71e9f729faca91075ced9a7faee4784ac3fc7f1af93","ssdeep":"3072:2q2/iOKDaxqPQvXIO4oLtbQwEaiFUoOnGwYVB39UT9+TVeWzK:Q/iOKyXI96lQTtxVhCT9+TY","tlshash":"d7042264df8fe2adee4d71e6f228390ad64384cd03f35a58c910a05998fd3558edb0a3","first_seen":"2026-09-19T07:16:54.886829Z","last_seen":"2026-10-04T08:59:42.637751Z","times_seen":3,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/logo.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:06.285Z","timestamp":1789802166285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/logo.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"1820-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nage: 0\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXO1t5h8eLuHB%2F8ttDz%2Ba1EAQCV5DS386cwrdogIKsUc32yAizQpkRJSS%2BObe%2FtIYw4UdEzkmgPE%2BaYhEbFg4zmNZGf8ELH5YvtiehVRaJE4HfYFkJpQDCf1x18lnzPrFhuTXHWqAds%3D\"}]}\r\ncf-ray: a3d6cd934fd356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6176,"size_decoded":6905,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b37a79d34478d8061539c9bc2fec0943","sha1":"5c98e558bc92b64a420ecfc9cfff4cb46197de39","sha256":"71647a8198369774bd941a632bcfdca41720b691bef698e6c3168e5d8753fe26","sha512":"36fdfcef719f307c84e277290ea1100a826f762c9a9fe7a425386aa8f905c39d7e0cc88caaadef8c4a96d75cf1a77c6bcafb99356a04e8b4db058fba3cd8b705","ssdeep":"96:mNL/wSUy0fZ9ERq9v8JAlNIq00bp8lyXRc+HasD2XR6F+wQibku3qbTxvXDq3nS4:sLohyvR48JHq0Ip8lyXRcyfoR1whZMmF","tlshash":"a2d19e0a5d62af35e02815fa78cd0700f9acdeadbf35dd74f032d2942675d5418642f1","first_seen":"2026-09-19T07:16:54.88807Z","last_seen":"2026-10-04T08:59:42.632322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-admin/admin-ajax.php","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:11.005Z","timestamp":1789802171005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 104\r\nOrigin: https://official-kmspico.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":104,"data":"data%5Bahcfree_heartbeat_ip%5D=195.64.118.152\u0026interval=5\u0026action=heartbeat\u0026screen_id=front\u0026has_focus=true"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:11 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.14\r\naccess-control-allow-origin: https://official-kmspico.blog\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, max-age=3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqCudK1xVtdXPkrlU6myt%2BBgx0eTWeU67R9DrVEJk1Y5SJ7yvn2M8NFtwWBH7a0EpvyxiRnOZPkgcorKHlZm9isYkB9BkFkVG3%2Boyo%2BCI4FcXTV18yaUAayaHNOStMWk4Ffft4scnMg%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d6cdb0c9aa56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":1183,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e72253a8dd4d9b070396a742ed9b46af","sha1":"0ec9ee6b8f2457cc6135033f4144fb089ef9a709","sha256":"84720d67645c714ef7c9843065604c7000de6f08cf94966ef8df2282b0c22975","sha512":"2dbf230ad475c846b572685b9c06bf9472b72f32213e5a46459ae75e21140ce09b4e2c2b1d81023d636c43422c8ea4b98bdd2dcd60c761ff67e0e47a7287056e","ssdeep":"","tlshash":"7cb0125900e9c99e48d92b814c4c6e62834136c964511f084389d5292cf57d9e44b83d","first_seen":"2026-09-19T07:16:54.889171Z","last_seen":"2026-09-19T07:16:54.889171Z","times_seen":1,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-admin/admin-ajax.php","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:16.077Z","timestamp":1789802176077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 105\r\nOrigin: https://official-kmspico.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":105,"data":"data%5Bahcfree_heartbeat_ip%5D=195.64.118.152\u0026interval=5\u0026action=heartbeat\u0026screen_id=front\u0026has_focus=false"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:16 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.14\r\naccess-control-allow-origin: https://official-kmspico.blog\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, max-age=3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0qFtRHtWcZM2wd%2FGcxleI9ZEztMicJ27X8Yjn5GDa4VlcopSqQOBUgmxYPE7rj1%2Bjzn6U3VVBBaWIsO1qr09Tksa5%2Bmt8jGLtMnHikJpOyGySNRnqxyWKrhGuc9MN9CmCmHUXSoH7sQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d6cdd07be856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":113,"size_decoded":1183,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e6d3f3cb1e368108f3f55099c990e1ee","sha1":"611808b0804029eab57ef1dece124fde4fed5986","sha256":"1698ab74776b44c3bad85a4e12c124672aba9a77d4a5acde1907b9443631eb3f","sha512":"093751aeda0ecba1e0ff47cf82be3f30e5dd4e0f1ed18960bc9fb14ed09f475e9f42ab7e946381cb272ed9c2fdece812a2a6201b5ab932e73a2fca8f717be4b6","ssdeep":"","tlshash":"eeb0124904edc98e48d92b815c4c6e62838136c964511f084389c5292cf57d9e44b83d","first_seen":"2026-09-19T07:16:54.89034Z","last_seen":"2026-09-19T07:16:54.89034Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/css/admin-bar.min.css?ver=7.1.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.443Z","timestamp":1789802165443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-includes/css/admin-bar.min.css?ver=7.1.1 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 17 Sep 2026 20:03:33 GMT\r\netag: \"53b9-65bb3474a50d1-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFPLcWvZsI%2FNAHfdAlCjmXLQ%2FzGoPsnSCzdQKqjFit5%2ByGoRxb3FK9%2B%2FokdmBu3N1hsJ3l%2FtcNQ8i%2B4vKhDljeYxg3r7jGQ0nU0NIDcRWq46swVAG%2FGkewikmawSg5jt0oqHKKAKx6U%3D\"}]}\r\ncf-ray: a3d6cd8e0f5d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21433,"size_decoded":4817,"mime_type":"text/css","magic":"ASCII text, with very long lines (21398)","md5":"892011915dd9fc2c13a1d530883a6403","sha1":"46cad237c822348e29d9e8960b37f7e9c3d39089","sha256":"854fde1e1c44dc2fec871f9332ecacfd033f99f83ee90b978426e86f7b079198","sha512":"3541b106231106cd135d8aeba1ff6f8e7a510406682ba3ef30c6264c3064f5a6326e6749592540400165c71dd768f0ff23ac29f6774d36e945be95dc384b8258","ssdeep":"192:1d38F4xB2/IPgQp7A7OgJ9Uafuxe4wyE3Jq1/NMUMXvZ3EddDgQX+QrmK0yNGaDX:1mGgJ9UYGuUMx0RrhDX4SpRoo","tlshash":"30a2fe51deb83f8869f6d5e19dcbf2b71ab94921b483cd68f036595400873270dbbb06","first_seen":"2026-09-17T23:17:50.592543Z","last_seen":"2026-10-11T13:41:05.429446Z","times_seen":283,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.452Z","timestamp":1789802165452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:34 GMT\r\netag: \"3509-659aea1ccd080-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyojobWOoTr%2BpgYJ%2B8mDLYDz%2FrBfh%2FVSF1CC%2Bmqgraw%2B0cL00j8dktpBNbGrCkJzprMO38X3HgSB%2BldPaLaQw1cHdwJCQbTScC0zDPHNVR3JdO6grXuVgEkd1lSXSzMETNXVPk6evYc%3D\"}]}\r\ncf-ray: a3d6cd8e1f6056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4872\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5704,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T15:43:45.434557Z","times_seen":1004901,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/logo.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.717Z","timestamp":1789802165717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/logo.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"1820-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qv2%2BQU8k%2B88nNVn1VuVbZJhY5bHBjJRD7z15Xe9bWsGPZhQCazz6CaaDit4cP89tENht7Wu4f6Jnc%2BbPwVuF1J6a40p%2BvtlXeK3ELBYthBwJpF7WCC4oXnui63tY1VJ3yI5cEAIdkYc%3D\"}]}\r\ncf-ray: a3d6cd8fbf9256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6176,"size_decoded":6893,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b37a79d34478d8061539c9bc2fec0943","sha1":"5c98e558bc92b64a420ecfc9cfff4cb46197de39","sha256":"71647a8198369774bd941a632bcfdca41720b691bef698e6c3168e5d8753fe26","sha512":"36fdfcef719f307c84e277290ea1100a826f762c9a9fe7a425386aa8f905c39d7e0cc88caaadef8c4a96d75cf1a77c6bcafb99356a04e8b4db058fba3cd8b705","ssdeep":"96:mNL/wSUy0fZ9ERq9v8JAlNIq00bp8lyXRc+HasD2XR6F+wQibku3qbTxvXDq3nS4:sLohyvR48JHq0Ip8lyXRcyfoR1whZMmF","tlshash":"a2d19e0a5d62af35e02815fa78cd0700f9acdeadbf35dd74f032d2942675d5418642f1","first_seen":"2026-09-19T07:16:54.88807Z","last_seen":"2026-10-04T08:59:42.632322Z","times_seen":3,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-admin/admin-ajax.php","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.877Z","timestamp":1789802165877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 358\r\nOrigin: https://official-kmspico.blog\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":358,"data":"action=ahcfree_track_visitor\u0026page_id=306\u0026page_title=KMSpico%20Download%20%26%20KMS%20Testing%20for%20Windows%20and%20Office%20%5B2026%5D\u0026post_type=page\u0026referer=\u0026useragent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026servername=official-kmspico.blog\u0026hostname=official-kmspico.blog\u0026request_uri="}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.14\r\naccess-control-allow-origin: https://official-kmspico.blog\r\naccess-control-allow-credentials: true\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private, max-age=3600\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cx0HIOo76C3%2B8d3W0jzMjLkkfVpwys46k7Q5yYMSvOYhAoCTcZwTQI%2FI40m%2FRgAyBaWAIWSe4daAAA%2FeTVtIpy2IlSyeZv9liyKHjY2Xj1fM9%2BaX5kXRDUB%2FmT%2FpPuSOJ8lNk37CXhU%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3d6cd90bfaf56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1933,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T15:43:35.306156Z","times_seen":19031085,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.461Z","timestamp":1789802165461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:35 GMT\r\netag: \"13f3-659aea1dc12c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rCfLeuzaeFOctN5MVkUqMpnC54jIT%2BC1pWkpYBp%2B4RGxJCfWtsxiWn0oZknPr%2FAlvZ7AB%2FrHeHY6UJmMimWMi4mu3DXEgWpytDlUGf1IgE7FZVlQ%2FXTsiWLTulH0TKO2x4QovCTg6lY%3D\"}]}\r\ncf-ray: a3d6cd8e2f6456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5107,"size_decoded":2688,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-11T15:46:30.771845Z","times_seen":26997,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/step-1.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.718Z","timestamp":1789802165718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/step-1.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"e878-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EmuTlTb6tBMqvQNsAgYaPI0BLHXyTMv2WMx0qXnY4DqmcevQrwAh4fQjfi2Pc30BBj8bOfeero8jDvpQJcs%2FBz3fxZ1xgBTry%2BBID5k5ikRXaGYo%2BNd5BrjW%2FSLQBMjBIEA1Nvk%2BTJU%3D\"}]}\r\ncf-ray: a3d6cd8fbf9356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59512,"size_decoded":60232,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1408x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aeaeda62760514e257044670f8c7d03b","sha1":"e8bb5722c5fb7426913964ecaadda1875f381ba0","sha256":"f03c34e550adcd7bb2e9a8cbba149586f7a9602cac4218242f45f080b067f6b1","sha512":"89e1098ae7279b63b50aa8a0f314d1747c4278404aa41faec038d8979fc47b1e7f99869fcd83ab54499db74e7fd91589f6a0e7ac9ca0b5276e28456d5a25c795","ssdeep":"1536:lL1im9FxtVcnsFMxUXmLDnNy18gP9J42ex:h1BFfVcnvUkDM+09J4rx","tlshash":"e9430161d71ccade14336067b71f902f8a105eb4d3ab66336c249e8252f8dcb6d25867","first_seen":"2026-09-19T07:16:54.893464Z","last_seen":"2026-10-04T08:59:42.639619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/icons/linkedin.svg","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.912Z","timestamp":1789802165912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/assets/icons/linkedin.svg HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\npriority: u=5,i\r\netag: W/\"1cb-659aea1bd8e40\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:06 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9XQ4yPjPq69qUsM8PvfKu55S57i22S1bvOfU86Q2SFsQJ1JwaJ%2FVhKqu0%2BfUX7BCOKtJsG2qYhM8t5g%2BezpprDJu3%2BzUu%2B4TSyABmSLj4xnYaViCI1UuQwUBSdVkl5Wi9UgeOilqy4%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d6cd90ffb456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":1037,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7897efd24893bb76215b3054c943713","sha1":"01d4468f3f811c346bca48979041700ab40baaeb","sha256":"6718cad4ccdf799b2ef7d3fa6e946210e7838f5df65d2036c87b7d2546fc11de","sha512":"7a68f242092786b7847791c0707802a5404d73ed0113a37fb88dec53dd5cd19a16daba69507a6699bc12dcfb35a3ba23b15476dbafaea375a8b16cab3f62e78f","ssdeep":"","tlshash":"8ff05c6ec44c1d0c77134ec8de655641bb0df4de710993bda14aa3707265bccd055d34","first_seen":"2026-09-19T07:16:54.894688Z","last_seen":"2026-10-04T08:59:42.641044Z","times_seen":3,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/icons/whatsapp.svg","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.919Z","timestamp":1789802165919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/assets/icons/whatsapp.svg HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: W/\"35b-659aea1bd8e40\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:06 GMT\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jq14uIJa9fhlgVdQmRmpt1F8ULous5PLvMx%2FtJuTxFFCbjWlMoRJuj6HMdT2h4ASDLOBR34NWIOGyw6mIOa7CdHHNwlioy8uf3yl3NFPrvOem%2FycFQodfK9cv7mBtrxG18ylSsgzSo%3D\"}]}\r\npriority: u=5,i\r\ncf-ray: a3d6cd910fb656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1238,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6570ab5d009dfe584a675383a2affac6","sha1":"648e2c92a38d43fa72115f4739db6305959fb7a7","sha256":"7c14eed773161a8a04935864b1f95d3009f8a1724dfa9484ffcf739ef6323662","sha512":"bba2df95d373d0d3f48e7ece2b88cd9f58c3d425b2ac20d7f39b3ab5cb907add8e0cf5485822970e2ba22d55599d4ff40f5821ad25c69594fb5abed9945546fd","ssdeep":"","tlshash":"3711cc3b5008de2d1883c52ccda115a2671f60f6f1a662ed51d6c731244b6c5f615938","first_seen":"2026-09-19T07:16:54.89565Z","last_seen":"2026-10-04T08:59:42.6513Z","times_seen":3,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/logo-150x150.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:06.287Z","timestamp":1789802166287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/logo-150x150.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"16de-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:06 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLDkAkaF2Xd%2Bdc1gwuinoNqEdpaQPmoFk%2BanbgM%2BzRiC2cOHhJkeMZpGzfKmnQBBAbcXQA1wzwbnpKHxTuKI1DZGQ3zKWYBfSfV2bxwtLb%2BjJvKSpHOxOjs8FXLgDNq10cAGp8TTHQ4%3D\"}]}\r\ncf-ray: a3d6cd934fd456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5854\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5854,"size_decoded":6574,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1845748ec26dcc3de76a7cd79251e3e","sha1":"cfe840700e0e6a347c691a1fdbcae08420ce9c75","sha256":"01dcbddd1884a927cda0651aa010b3bd1aa73d2ea7fb8a1f114fda52e937c52a","sha512":"6340c6bf4552ac854cd6df746bf49417a66052bffe2b20c01f61902c8c903219271af032761d6e6c2bfe4407ae4924964fe81df211d8003c3bfb2eea53a2bb9a","ssdeep":"96:ALcLRro6ILMTNQ39rAdVNnRy/Ttv4w050+pEjG9K+3jPgn7dU/kG1W1BeBts:ecdc6IwZOVyrY/yN506e9Ge4ts","tlshash":"fdc17d64508f3118c8c3ade60933b25bebc6182dc292558e995f3d463861c343bdd276","first_seen":"2026-09-19T07:16:54.896593Z","last_seen":"2026-10-04T08:59:42.638891Z","times_seen":3,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/plugins/visitors-traffic-real-time-statistics/js/front.js?ver=8.14","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.465Z","timestamp":1789802165465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/plugins/visitors-traffic-real-time-statistics/js/front.js?ver=8.14 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Aug 2026 20:04:02 GMT\r\netag: \"880-659f8b87ea064-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jT2wtyMstXXKBlYQkL66yV7Ms8TK1NqLGTBTr0miW2kydS6ktHQGBA3mwpZnt%2BH7uHDiL790cJfyjEISlWwpPOATkZ2n6YTaWSXqlEtG39yg3OkknBIlFLuI03NZtLJ7VkWj1xiBSJU%3D\"}]}\r\ncf-ray: a3d6cd8e2f6656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 861\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":1679,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"5b49ad6c0280e9befd696aa82f01d668","sha1":"f94cd70eb5055476ab295391c422820fc1759a21","sha256":"22b9c0cad437ecd7645106a087ac59a2dca3f1c269931f264f7648f7ac070138","sha512":"8bd5da21a0ef6aae73236df439aebfc7444e776b1a8f47f243a4103c1125451cc6c97d4dbc84243af4c74b53d113569e5046973c37073512243214577b05aae6","ssdeep":"","tlshash":"194125590db34835da675418a66f118d6ee8b233741c9d50384d1b908fe07af8311bf6","first_seen":"2026-07-09T19:12:03.415123Z","last_seen":"2026-10-11T13:50:27.713646Z","times_seen":45,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/step-2.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.719Z","timestamp":1789802165719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/step-2.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"17aaa-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wQQ9ABRwDNXxaIi8L1MDvy8YuPZRm6XRxHFTSohxioVZtkr2J5aGYKYpZ3KWtz9jSX2xwhwe16vkJthaWbBuU3EPKUPnlqWoEMvgXQAy25J06EhZ0ff85c1w9anbrzwml80m0u6Tbzc%3D\"}]}\r\ncf-ray: a3d6cd8fcf9556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 96938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96938,"size_decoded":97649,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1192x896, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b29e223d8a3eae0f3c5eae20cb7378b4","sha1":"db7c5d885ce62dd7ac649149612a79a0a86b33ca","sha256":"a42b56647bd6d95c8099087cf809788a8250f59927370ea10f4f5365280f4f57","sha512":"57ad1ea6225c31330913f6e2192ee5d7186d03648d1aaf0ed96dc4acaa7cfdc1a2c08a22907c1d638b2ffbf809cd85076c5d637e200e7cd2099f5ec7d27c6e17","ssdeep":"1536:U25Exqkm8Zv/T5NXPgovVOEHY79G0t6oaBhyKvrARJqVp4onWJkbIBXhaR1zHJ11:Tkm81bfXPgov/Y5G0AT7LjBWWbIthazp","tlshash":"e89302c314e38214b670d8cc46644964dcb9f3ea369e46ecf1dc2e55f6a0e604ebcad5","first_seen":"2026-09-19T07:16:54.899103Z","last_seen":"2026-10-04T08:59:42.635685Z","times_seen":3,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/step-3.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.720Z","timestamp":1789802165720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/step-3.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"e352-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zhvQzMr%2BNw4LY%2F0aCUptXimXGs0MlojSPjbZacqZUMxEckmGOrIAmrrCfEzfgLbykXALhgvG6NMC6LUdmGmjS3s6OarW4qejKQcQR8vWaETpQNaAUr8KOcHRqNzQMuHJyIkvMBM7ek%3D\"}]}\r\ncf-ray: a3d6cd8fcf9456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58194,"size_decoded":58908,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1192x896, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e4fad06fa84c1672136a7def382f4bd","sha1":"3b7fcf40982d65968385ada0ae308a384612a3d2","sha256":"ceef5735f1735c8bc13bc5f2021540c09a598851ca876f2078c152162d355cee","sha512":"5b1e1281697a0d92d9f2a7188d8b53252571a514556500e22f4f975e6fc65bd0320d0e21bbc5d86965e81073de000b24c9214f8f8a4d591c73c2d1205bc5cdc8","ssdeep":"1536:+wgEdIUU5Rsbmu3cB1YHC4ooJdsW0W61mCAb4iB9aKu5G:rnIr8msM1Yi4o6zemCJKu5G","tlshash":"b743f1f58f518ec8571f72a1a41e20ef701243d17b9eb4817e05b6b1a9b88c53ade4e3","first_seen":"2026-09-19T07:16:54.900168Z","last_seen":"2026-10-04T08:59:42.640298Z","times_seen":3,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/heartbeat.min.js?ver=7.1.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.463Z","timestamp":1789802165463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-includes/js/heartbeat.min.js?ver=7.1.1 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:35 GMT\r\netag: \"173b-659aea1dc12c0-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UtgqXxUifOaTRfisBa2qqbhIrDMMJDVLOfC%2BBpi8ULVxaeyy%2F65mCOSHguvb%2Bf6kNxzD%2BrgeQToOfLY0S8vOKY7MWEOEN9XHMGyvsKlYuH2jsOAk6fJKtcwz8K4MBrW9qMukj%2BqBpk%3D\"}]}\r\ncf-ray: a3d6cd8e2f6556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2041\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5947,"size_decoded":2869,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5912)","md5":"3049b8f9eb73d57085d4f22966e5d5b6","sha1":"8d0abbd3c0dac67b415fed4c31659814f54a625f","sha256":"a5f83cd1d67cfb064597a5420fe2964401bcf3f7eaef0d6aa57fb4f3e1eea910","sha512":"d95631e26944349fbebcf0565361e535569bd8d666385bb6f24e18e72328243143329543f35ac18bf61a1931dee9a19a29c0c67f82eceb9006e9ba8b47fc5723","ssdeep":"96:Hwbj+Zti5lyAWox0keydfNX186g5XvIIOTZS2NYmWKx0Pa80kAHpu+hQ/p:H0+ZtclyAFneyd1Xu6uv8HWKx0S80kAk","tlshash":"13c1724d2b0f300e4eb741a3199f92863e712977291f545013295ddaaaefe2d8312fad","first_seen":"2024-11-28T14:29:08.593168Z","last_seen":"2026-10-11T14:34:54.571163Z","times_seen":2022,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.canvasjs.com/canvasjs.min.js","fqdn":"cdn.canvasjs.com","domain":"canvasjs.com","tld":"com"},"ip":{"addr":"172.67.75.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.708Z","timestamp":1789802165708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"canvasjs.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 15:58:02 GMT","end":"Mon, 02 Nov 2026 15:58:01 GMT"},"fingerprint":{"sha1":"B4:D3:AA:CD:93:EB:7E:5D:05:65:29:32:CF:0C:00:3F:40:B1:4F:FA","sha256":"A9:C4:D5:A2:98:56:32:E5:E9:0F:36:B9:81:AD:ED:BD:18:A3:35:2F:7E:AD:A5:93:94:93:94:D5:2A:10:87:8E"}}},"request":{"raw":"GET /canvasjs.min.js HTTP/1.1\r\nHost: cdn.canvasjs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 15 Sep 2026 04:05:18 GMT\r\netag: \"81e27-65b7da89e78c8-gzip\"\r\naccept-ranges: bytes\r\ncache-control: public, max-age=7200, must-revalidate, proxy-revalidate\r\nexpires: Wed, 23 Sep 2026 04:05:47 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreferrer-policy: no-referrer-when-downgrade\r\nstrict-transport-security: max-age=15552000\r\npragma: public\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-apo-via: origin,host\r\nage: 357018\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hfItHa56qHw%2BNwePJFM5vlegjS29bos1QiZ50TLKyeOIAVXRlUGVfJm8PVUnFAOwrL%2B22hLNosnrCKMhzETx9GDbUiNMofyZD2i6A2QENLxhtl%2FTp4hz%2FGdWpIXG%2FO0Y8nQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d6cd8fdc4256b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532007,"size_decoded":107276,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1804), with CRLF, LF line terminators","md5":"ae2d4be4f26a227418ea47f65680d7a7","sha1":"c6f4b649ddeade2439805a5c0a92cd82837867f4","sha256":"d5ef7991411bcde9916792f2099911b924bc3ae5a632cad926ff2acaca3b3101","sha512":"8632ab9627706c92e15b241d794ac3d779270cd08fafeebb2ad3774718de30e8f85675465a8a840604f32e0ae4d8b076a598e2220da08ac0be8ea85a5d5eb9d7","ssdeep":"6144:cOLTfJ1zQI9jLtOolwz5Z0MZwkIdcPgI4fA/bS7rsLZ:cuTfJ1M0MZjPg9fA27rsLZ","tlshash":"d2b41a57b3291082c85653ae246d168bcf3331d6694794bcb6688bfd996cc0e31fdbb0","first_seen":"2026-09-18T07:40:11.071753Z","last_seen":"2026-09-20T15:26:30.016584Z","times_seen":9,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":27,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/icons/x.svg","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.908Z","timestamp":1789802165908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/assets/icons/x.svg HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\npriority: u=5,i\r\netag: W/\"ef-659aea1bd8e40\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:06 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fMAyUPmXYYpUJD7it5Lv8aqwfoUFGC%2BmDy8aeQCKeBo%2FfxOjZcy1lU%2Fmheg2yjmNaNaGg5QjOZ6Xsws3uL%2Fsx7jQqb%2BmAzaWlibX8YPXAnANJ%2FOaGA9k7FcdMx9pxn3QzUeNO57yvOs%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d6cd90ffb256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":920,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b797adb990f0c68d3182c8fcbd438194","sha1":"6487ce0a21410ce0726fdf377fa4980067d3c93e","sha256":"c8a08f01a01e53647b01d379c2e54fd6925af9ae2bd41886ed8e6daa8b35b7a1","sha512":"415c6175382d42f713bb05c3f04b451cc2ba05e8104111a51de304047202f2c63aa03942859e4514a2914be27c7c9fa1aba33930f19febcd54e057eab2b4afc7","ssdeep":"","tlshash":"57d02e38940d1f908ecac9301e2063f111aca8ab80c242aa8200801422080d6d407478","first_seen":"2026-09-19T07:16:54.902341Z","last_seen":"2026-10-04T08:59:42.64612Z","times_seen":3,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/icons/telegram.svg","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.914Z","timestamp":1789802165914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/assets/icons/telegram.svg HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\npriority: u=5,i\r\netag: W/\"12a-659aea1bd8e40\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WH499I%2FeB4%2BS4OSUiCe%2F07jnqPKh8%2BzFY8gjfu%2FUbe3CpHHJTmfliFsW%2BGQJgqs0hAVZGGI4j%2BVOdl4BDREclSVDiY3wsU8DoS2hIOUpxIrPuXQ43ZMXWnbM73yjjvVbBMxP9ugz6XE%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d6cd90ffb556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":298,"size_decoded":963,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c60260d993c751af082494322b79f164","sha1":"399830ece0cabbead9e68ce8e4e8697c10faaa28","sha256":"f6dcddbb6cee4cbdbc8e314b7ede1d5575e2c236869e1fc136ada6a55466ceaf","sha512":"dbe7edf45b03edaf4a7e7f07d5f0a85f92f5e8fbfc59b680538819a7b50b4f70eff91cb7bd8a644dcd38f18b04efc45a343096af31ed4a362a7062bbefd469c6","ssdeep":"","tlshash":"6be0eb2ec108cf01a40bcab4fe7026a0a04f39d806eaf03edaf00329a04d5c22208cd8","first_seen":"2026-09-19T07:16:54.903448Z","last_seen":"2026-10-04T08:59:42.64167Z","times_seen":3,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/icons/reddit.svg","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.922Z","timestamp":1789802165922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/assets/icons/reddit.svg HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\npriority: u=5,i\r\netag: W/\"280-659aea1bd8e40\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:06 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2jeiRzqpIY1mffE5fpYs%2FYvIjUZK6cquWM%2BOJ%2BZf8Wkx7v4FZgZFbPmXdoQDA6%2FDoPHf64RIsQTkCTSenBNzk6CEJ%2BdslcqGKD2OXHQXoj9gCJLtTXn3NawUMlG1bVqUUC0FJz86lY%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d6cd910fb756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640,"size_decoded":1110,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca3f9d9bc2978aefbe3b77689e3d4fca","sha1":"06005227c60edf910a4f4b4c9d885ed9a465a6aa","sha256":"940eaaac66967b81ec0f1fb96d317eaf9c21255945da22dd7a4f497ce699154b","sha512":"4ab47e1d40c411ba09ef5e28022212ea59c3c74e3d30e6c7b3bd978f1d178eb8e92f0af651f08d611e55c7ee9a0539d7241b1265b71a877f6efd04b18085ef06","ssdeep":"","tlshash":"b6f049de4b9d8cdc1937cba8c5ba2461130ed994774983fcfc9ec674a4165d8e183151","first_seen":"2026-09-19T07:16:54.904573Z","last_seen":"2026-10-04T08:59:42.65362Z","times_seen":3,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/css/dashicons.min.css?ver=7.1.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.441Z","timestamp":1789802165441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.1.1 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:34 GMT\r\netag: \"e67c-659aea1ccd080-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QYgEQnMUgTN8rEkclEaa%2F8oljRR2NnnTwkuYG8dqOZdUs0feWVh90%2BBr%2F9hFPw32EOpETYbv%2BeTujS4Ou4cAQp0psZNa2KnVCTgRcYw6z3cRio8G0mLDQD%2FvMHSjsvNLJKzWJdwC0ys%3D\"}]}\r\ncf-ray: a3d6cd8e0f5c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35721\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59004,"size_decoded":36521,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-10-11T15:43:05.845501Z","times_seen":80869,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.451Z","timestamp":1789802165451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:34 GMT\r\netag: \"15601-659aea1ccd080-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edfyvVYieLdh0KMCa%2BgVdJXInSMFcEav8kTQpgAEUEnvkklQv89g7lySXuLq4ud7%2FzHfoA7hQBPXL8gTmN6YS3o1pKInf0N1dwqawvE5onaAmYZC0qmnixpTVBlIqu4Xde7SsRGyh6I%3D\"}]}\r\ncf-ray: a3d6cd8e1f5f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31192,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T15:43:45.369822Z","times_seen":1100796,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/plugins/wp-yandex-metrika/assets/frontend.min.js?ver=1.2.4","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.456Z","timestamp":1789802165456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/plugins/wp-yandex-metrika/assets/frontend.min.js?ver=1.2.4 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:32 GMT\r\netag: \"184-659aea1ae4c00-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3WbPzDlJsPBxF8XrLiT5f51ZNryZcwFeOhSW%2FgDuSqjHK7NuD8kC0BP2kZEqXPS21FI0QIRTeS8MT86xnrDAKo1V%2FyNcZBAaYB1p7pMvD2zBBmJl2fJG1xP543gcfZtEli2XE4IMW%2Bw%3D\"}]}\r\ncf-ray: a3d6cd8e1f6256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 227\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":1049,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (388), with no line terminators","md5":"f881df1ceee11fa83e6804188db1f99a","sha1":"b9bbb31a4a97715a3bd0e4eb932b29426fd1f59a","sha256":"0d96d5c7dd4e5d51d3ba167d24d4260d10a62ef1546b213883ecb4066fbd46c6","sha512":"f3542d951459a906a5809d43288001faf719bf55569cf916304c0245dfc35aca1ef8583f801c46d31cad5eb5d642d4080bfc2138c9f6dd57b6b5448c7e9e9849","ssdeep":"","tlshash":"02e02204a21601f88831db25ab2a27b9e001e7c3320b102ace840ce036a212b9983e95","first_seen":"2023-09-20T23:16:13Z","last_seen":"2026-10-10T22:15:33.58951Z","times_seen":1486,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/uploads/2026/06/windows-11-license.webp","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.722Z","timestamp":1789802165722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/windows-11-license.webp HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"5a24-659aea1bd8e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5OFwWbyxOAQt%2FNWV%2FBlf%2F%2FwY%2B47plivzTrAxlMppFmIb4UDu7l8i0kTAacaJDRKM95ZTJCdBWQ9vVSlb2jBzWeY7c02mQWsuYdZF0r%2Fpd6lrC6dnP6rNJzKItENojVppS53CjXJAjM%3D\"}]}\r\ncf-ray: a3d6cd8fcf9756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23076\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23076,"size_decoded":23798,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f5dea018ac3033bfa5c41ba5e50711a","sha1":"ae7f63c1b2ccda7d280987a353b1c89c00d37a98","sha256":"57fd3885c741816a48527a49cdbefe6945f5e9692139109d91e78bc775befba2","sha512":"41175e005ef929bb918f9ebca2f57816f6484681ee9d34a60874386e683a8477b42183a97f7af6ab1112320631205620fc7e7118410c61305770a6010718a019","ssdeep":"384:sVZaUzdq42s0WJGfNuutxjHvsvo/sEDRj1pj4ElSJ+l3CFBelh7CDKaEQL9:sH4jnzEv4nDRx94EY+l3CrelhSpEQJ","tlshash":"f1a2d07d0fa5464d8230087bf16f8fa66c206ad2add25c5c8d51ba49d0b12832cfe769","first_seen":"2026-09-19T07:16:54.908364Z","last_seen":"2026-10-04T08:59:42.642268Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/assets/icons/facebook.svg","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.910Z","timestamp":1789802165910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/assets/icons/facebook.svg HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:06 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\npriority: u=5,i\r\netag: W/\"14c-659aea1bd8e40\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:06 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VT7rf8gz48Mhm6O1k6CN5SlSR%2BQq8Pcsq8AclJiYS4XMwvZ9geXiiHHhQMJqPrBc5Q84Py9%2Fjou7onmeh6zhkqpymGkVTJW1JF5KDRbeUIy3KvpXjIE%2BV9pWRb4MfR3wx3HL1gi1lnc%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d6cd90ffb356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":332,"size_decoded":968,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3700156942c4e848f1822bd57b1dab47","sha1":"4d4286f6acfa9a71eab6851e6940076b59303c64","sha256":"f9e73f9b448b131cad64346c8d4c27c9731ed70a45f6232d710009939917e4c6","sha512":"25d77c0379e37780c168aff0fb54646768bac2a5a70cfc569d3fe93773d880a18e140cc89757e4b01d2c68bae61c65b0a4a9baea4697bd1627b35352a685bf7c","ssdeep":"","tlshash":"37e07d5bec997e0890e5c7605f7e7e74421f320130c947a843d6c631b74add8e80650c","first_seen":"2026-09-19T07:16:54.909679Z","last_seen":"2026-10-04T08:59:42.647036Z","times_seen":3,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T07:16:04.725Z","timestamp":1789802164725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMpUo%2BBtmlD2XphiQYVlLPw5TwEKXei3UZmogOtVOZR6v9SnpyUxbwGEVVJ9evpdHDHqHkD6jfAnt%2FJQQcf3ckm%2BePY7AsL%2BBmURb0IUwI44DgJn%2Bf3ug%2B2BW%2Bh8gsMzxL6umAKERCc%3D\"}]}\r\nx-powered-by: PHP/8.3.14\r\nlink: \u003chttps://official-kmspico.blog/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://official-kmspico.blog/wp-json/wp/v2/pages/306\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://official-kmspico.blog/\u003e; rel=shortlink\r\ncache-control: max-age=3600\r\nexpires: Sat, 19 Sep 2026 08:16:04 GMT\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 19 Sep 2026 07:16:05 GMT\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a3d6cd8a0efb56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:28.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"PHP:8.3.14","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":157792,"size_decoded":36372,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14875)","md5":"a1f0b47a61bb2dd3bba4b724e35adce2","sha1":"98462d64de61b4ccd0167747aa0b69d4ef821709","sha256":"2a6a59fa5ebfd4c355d2342ac6cadca73bdbce1d5d02a30147ea5ecfa31e81c4","sha512":"b33003b477910681c7a1d344164df80c1ee59747669fddbbce1ffb19719569f717b174e114cf451d6f322fede282930142e31f5e860dacce8aaa505371789c2d","ssdeep":"3072:QkX/ozsp+thcZcedlE39eRULMLe78/nYOwshGo:x9Zcee9Wm8fl","tlshash":"b9f34c23d2a4153f311742ac9604e7997395d126d72a13d0f4ffc198af92cb61ab3b8e","first_seen":"2026-09-19T07:16:54.910849Z","last_seen":"2026-09-19T07:24:22.60893Z","times_seen":2,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":52,"connect":18,"send":0,"wait":411,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"official-kmspico.blog/wp-content/themes/astra-readme-docs-child/style.css?ver=1787456433","fqdn":"official-kmspico.blog","domain":"official-kmspico.blog","tld":"blog"},"ip":{"addr":"172.67.221.147","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://official-kmspico.blog/","date":"2026-09-19T07:16:05.450Z","timestamp":1789802165450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"official-kmspico.blog","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Aug 2026 02:13:50 GMT","end":"Sat, 21 Nov 2026 03:12:33 GMT"},"fingerprint":{"sha1":"B9:69:72:9D:72:E0:62:F4:14:D4:94:CD:12:F1:99:4A:DA:5C:8F:8F","sha256":"4D:92:AC:87:02:5D:A6:12:0B:BC:6C:38:A7:C3:AA:AF:28:9A:DC:25:E3:51:63:68:45:AA:9D:94:05:94:7F:E4"}}},"request":{"raw":"GET /wp-content/themes/astra-readme-docs-child/style.css?ver=1787456433 HTTP/1.1\r\nHost: official-kmspico.blog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://official-kmspico.blog/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 07:16:05 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 23 Aug 2026 03:40:33 GMT\r\netag: \"5e46-659aea1bd8e40-gzip\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nexpires: Sat, 19 Sep 2026 08:16:05 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3jMHsNALwuJH6qwTi%2FKOH109jvSM5rrgfq9cFbzmuK4q8FTyBpj6OWtbIPep7q8hc%2Fu1O3KEFwcLN5WMO7B%2FAmtMGhZzgKJZDufuKPfkgq1CesZzB4vTO6VIl4p3TCBzobpjSPAFSk%3D\"}]}\r\ncf-ray: a3d6cd8e1f5e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5027\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24134,"size_decoded":5822,"mime_type":"text/css","magic":"ASCII text","md5":"61f2d45da0bef24b1fd06624ff6cd94f","sha1":"8f178f863c74f4a75addef35f0e42206594b6b19","sha256":"3696be64e6ddd1c5cf35e49a405405792087ae3e6980d18595aab693b7baa7c8","sha512":"b6d86447eec6ff312ecc13283b5f4c3a913ca991b44604044bb47f3d299df8dc05b6fb53d838597149412dea0879c91c5d247c1a8f5f0a9cc64a5a09f1085308","ssdeep":"192:uKGcJjXnwOcKzvqXkCUBM/ZHiZwH0/7V/95GrpqBqLZepP+zsbFz0kcQAaZiuOnA:uxcJbwOvvUes0ibQDT6a9","tlshash":"32b242916eac4164793b92946d979b4a73bd60024d0bcdbcfafc101e7f862e610a3f5c","first_seen":"2026-09-19T07:16:54.912141Z","last_seen":"2026-10-04T08:59:42.642896Z","times_seen":3,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"official-kmspico.blog","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}