{"report_id":"b9f0c90f-f1e3-41fd-a6dd-ef23a02db645","version":6,"status":"done","tags":[],"date":"2026-01-08T23:15:40Z","url":{"schema":"http","addr":"samngaimarble.com/","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"samngaimarble.com/","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"title":"澳門深藝雲石工程，澳門雲石公司，人造石，人造石安裝，人造石護理，人造石工藝，泥水工程，雲石護理，雲石設計，深藝雲石工程，深藝雲石","dom":{"size":14746,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1148)","md5":"53429a47b178a01b922bdb57ca77d1d1","sha1":"5fbbf18e7880c95054213f77d8e2118783d35f1a","sha256":"e06d649f52dacf9e8e6220090d6c177bfabfe8b55d192fb762849dfabe541ec6","sha512":"03c70b3f5ec78157aa3d42a9f7c4fc25f43924b93aea208e778727a7a54079c24141de4c103224bca673c05ff8a366fa76623f1a65746b317cb1d5de30e6dfbc","ssdeep":"96:HZz+U4TX3MFIkXtvDJrYb9Je/3+VPdtM7w8p/TBp75jtRw8pokpRVkpKspKbCzwM:HIUFvVeefcEwzw/yz5TxpV5CWcOC82KD","tlshash":"e562f050b7e6232fb94041d9f1003fda5ad78859d3a22904fd4e31ae57d4daa88333be","dom_hash":"domhashc01c1f518a56cddb729faa53ee82ca1c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"samngaimarble.com/","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-12T23:15:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"samngaimarble.com","ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-10-17","domain_rank":0,"first_seen":"2019-05-31T06:35:19Z","last_seen":"2025-11-24T05:17:43.28733Z","alert_count":29,"request_count":29,"received_data":1560880,"sent_data":14652,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP:5.3.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"samngaimarble.com/_jscripts/main.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"645ddd246af12a138cc97939cbe84b2a","sha1":"8da246f62a00e6238da0a01fbb9f63fe816d4ca2","sha256":"3c9e7faef40f47b625eebbd546538fdde270f5868365d4b5c76f6971c1e51023","sha512":"1d2794d2e773e42970e0e7615ffd9228fd07e5d5c21baa205b2c330019b7dd7c7cb62270e5f6222dd057b7a223ed854f265725b8a0d58f40ae2b619f3344f6d3","ssdeep":"","tlshash":"801102e926022436c0fb4f26b20b4a8d68224867772a6532facd11e2bb2065d1331f56","size":969,"data":"","first_seen":"2025-11-24T05:17:44.875881Z","last_seen":"2026-04-06T00:30:28.745338Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/AJS_fx.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d867777d90af5222f45e3774a99a033f","sha1":"8212fc0ebcfa86d8402b9277338c9b725aa7f7ce","sha256":"5a35fda778b098e7af86704236fc481fc8a4eda6de4620552d821c0aa245a37f","sha512":"eb8985ea6d84917e57dfd3e4a48743e2e6008c3792f54e395a49b7a26ec30f8adf8a14ecaf0f78a30d01f1c755ccaf43de2c4bc684d245b9ba4c54bacd103f27","ssdeep":"","tlshash":"1a611f8c7af7696510b32098006f314db87ed9b42604829cf97ed5c4eef422da137eb9","size":3192,"data":"","first_seen":"2023-03-07T14:35:31Z","last_seen":"2026-04-28T09:59:47.797087Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95189a606a28199b71f0a516627f125b","sha1":"f8825a6d9347d1e5fc80ee4d0f69eb68ade120e3","sha256":"111275a0d85475d5744be3132d2a65876f5a69217418d66f83d8c808788164a6","sha512":"f0a4684645c330e38f849603962f6a9d2613c1ed80de9018b8a9996caa148a9087251506357fb64dbcc6aef4e97ee1d4f62d7a280a55f34d8c77d7d3858ad54e","ssdeep":"96:6ePDjCVeqLtHD5rpO9yzfsVAEWWMJXa9TdxJl6GWvXazap4Fvjfog5eUIXJRY5r4:iHlzTuSv0RuJRU9FTx7e5CWbM/ySU","tlshash":"d6423260a7f5335f740641ede0103fd99ae3816983a25404fe5e316fabc89aa8c3775e","size":12615,"data":"","first_seen":"2025-11-24T05:17:44.897443Z","last_seen":"2026-01-08T23:15:45.857812Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/AJS.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"886ccc135b9c203048ce6b134732d95b","sha1":"82be47c287818d415ef128844b004b11b3bc9524","sha256":"f63c95c2f5c6880410b5bc6422f8ee60a9b2247b8d94a9006b63fc5172cb14f2","sha512":"3dd7bcf95354de15a2d4e8aa028014d553ea3ad205adeb35691a38508376e7bbd3ded9e2805f654e3540361c47d46ccd454e12062d8bad42b5b3a970e098aaa8","ssdeep":"192:KcUxvraTsfJ5/eNlvgFVFsBIw8aRylh1aCBziJiOratqZ/QeG7UyvRgM6juiXbYp:Cvr6sfJcNlvgFVFIIpaRyb1aCZOigat3","tlshash":"2e2264ec3ad29caa05b624bd087f625c7dbdc8a176084240d9beccd4ed7194b4527eec","size":10396,"data":"","first_seen":"2023-03-07T14:35:31Z","last_seen":"2026-04-28T09:59:47.811462Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/gb_scripts.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a64602467339e78cef4299e2d5741","sha1":"da993d1c9547b97aaa92334d052b22866da8db1c","sha256":"b7e8aec98d17761257a44f9a690ce6a866eb8fb02105c0afaec30d9aa256e1c1","sha512":"24352c8155ac40c7cd4691a2c1179a87beb55bc31224aeb95b040173dbeebf80a60e2fad929a18a4cbb4aefd5f16ef13dd006b82c526d64a5cd98e4011b61dcb","ssdeep":"384:GiaehjnIs+u73iLXRde1sPWdVrAT/3XkHd:GBWjnzTSLcfQI","tlshash":"2e42970cb01128acc1eb3238063b2b09aef65603e916d11e78fdc6c775a165b527b6fc","size":12380,"data":"","first_seen":"2025-11-24T05:17:44.896154Z","last_seen":"2026-04-06T00:30:28.728362Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/main_r3_c6.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/main_r3_c6.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:48 GMT\r\netag: \"95b8e2-170-4c3ddeb32b400\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 368\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nW5qmbXI8e7JeWJQ0nA7dU2i7ZLyGbwO5Zta1E9uJU1KMYoX5FTTIMGD8MDbfe6niJBD%2FyLzdjOGwTE7MSyYakWgnkX3vzR4L%2Fvx4EvQovv\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567ada3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":368,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 55x123, components 3","md5":"a84c502b0eab9233c9f164c0859e513a","sha1":"a1c542156c76ae5a314d5a52273b4485d9dc8a84","sha256":"bcf32a69ab5f0672a3dce0be7f3a9d577a686a3ab75415d8f1a41a1ae52e8f5d","sha512":"49e1f42a92412ffd8e6e150d64ac71d2012d4416386d15343d60161050e3867104168dc41223e8cbe6fdc67e15cc55de31a34f11a07d865aea687428bee36682","ssdeep":"","tlshash":"23e092d73c0162e0dc3b1f340b60971863076f1da6204f0e41ab2550ece81c72540612","first_seen":"2025-11-24T05:17:44.882952Z","last_seen":"2026-01-08T23:15:45.814824Z","times_seen":2,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/product_41photo_WeChat%20%E5%9C%96%E7%89%87_20180630201149_s.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/product_41photo_WeChat%20%E5%9C%96%E7%89%87_20180630201149_s.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 30 Jun 2018 12:09:12 GMT\r\netag: \"95a916-b2f-56fdad5182cb8\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2863\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OowK7j1AI5lH09%2BWtK4SoJUAGmQL6nfo9UhhMNGwaYXcwXh0NUCk6KCBSQ%2BV5BRy83bd%2FiRNBoe7QLvbJkV7G6o6UlksykvLpmSYWofiw3Fq\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bda5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2863,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 75x100, components 3","md5":"1cfc4047ba80f3659367d9f4595ed609","sha1":"8d68ed2ce8f7048f9c4f25b5c6838f5591e3129e","sha256":"fa5e9e83943e37971cb2611986db7ea4c015242cfd0f9ce800ec12c8c4814299","sha512":"88be71dc4d3e821925d3af518a7b82445cbd50fd805172b6d21441624e19a18793705d0a08131556ba89d55212395c0112e4c063592961ded3140804166e2e39","ssdeep":"","tlshash":"35514c1d5f5a3d6a6f0245fa8011ae31a1c8ac417ab0f73cbe800938ca50f7d5e4ce5c","first_seen":"2025-11-24T05:17:44.888903Z","last_seen":"2026-01-08T23:15:45.815956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":738,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/product_17photo_1_s.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/product_17photo_1_s.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Oct 2013 12:31:40 GMT\r\netag: \"95a957-6af-4e84e1130de98\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1711\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyCbbd6%2BXLoBBauhrRqPukPYoz0xj%2F8xCGbW7917MVYaG7a9i8O%2FDRa91x8a6t2AqSG457qMi8eDojGpv4w3H39GGroOvPtkqjU9TPLFT5mE\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bda7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1711,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 100x75, components 3","md5":"5876bb3a50a0a828b80ed802c4279e32","sha1":"8502a5112b2421dcb2ec864a1d0fde2ae0b68a8a","sha256":"ee96b32700cd5272e312e3474834ec9d6fe3f6328975dab0951fc0f837f56aa4","sha512":"b936382daa816422741f0aad3959cd958ae7ab08a4d7bb039454d6cc0c4499f90f8ffdf873d6fd6fa5bfa92cfd155cbf39c879dc6d9cea3f30f57c27e2d0f82f","ssdeep":"","tlshash":"7531f80e934782a04b82897d168d0f27f26a82663cd07ff52aa0d2b5d260cf0650d55c","first_seen":"2025-11-24T05:17:44.875027Z","last_seen":"2026-01-08T23:15:45.816898Z","times_seen":2,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":731,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/main_r7_c2.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/main_r7_c2.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:48 GMT\r\netag: \"95b8e1-17a-4c3ddeb32b400\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 378\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dxYhVaSn7KLWhqBwhIb1v0tf0Us5OBAgZrfPSNSVXqXuhvV%2FHd%2BuZOTQJNmX%2FsEVWOVvjBOWX5RjFDzWqHWY6YL0yRAHsPSl7CXw1Xr5kBBK\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bdada0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1004x8, components 3","md5":"bfbb8eeb7db67a5cb4a7636e383738c0","sha1":"94717e20685b845e78b1ea188f909b06f52eb865","sha256":"850e5552ce57b6486e9da26fd7b9208c836b39f16acdb6d9d841f14b69473f32","sha512":"31e39b7d913317fdade8ea2ea49136236c6f4efb485fc6b48c1e034265f988690e9ea4ae0093b2d77bee9e1570608a720d56d639a01659baa7268c69a74a6584","ssdeep":"","tlshash":"27e092d33e4951d1dc3b5f340ba48618a3166f0da6108b0d00ab2140eca81d72980212","first_seen":"2025-11-24T05:17:44.880082Z","last_seen":"2026-01-08T23:15:45.817888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/spacer.gif","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/spacer.gif HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:48 GMT\r\netag: \"95b8e7-2b-4c3ddeb32b400\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 43\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vz1bT91olK5XK5oPIaNg%2BXGVCwYCIx%2Fsh1ZBLnqLNNbfPXvDfixeV6%2FPQiBsAf6ZPPk2nmOB02X4pTP7mCSzTQRJN3Zb8Pp2BKwtA%2FsbarTG\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567ad9fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"221d8352905f2c38b3cb2bd191d630b0","sha1":"d804b495cb9b84b9007a25b5d85f9ae674004cde","sha256":"89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7","sha512":"cb3397776f5ca1d15d24786896b2478c6548d0b14dec0832bfb16c4c419135300704f8a7a4dfbf56d625429c1598ee8110958648f25a3cca09e6956c1fd3335f","ssdeep":"","tlshash":"bc900443d540c001c151c0700d0dc740174470304514030f70fc175ddc373510c13000","first_seen":"2023-04-05T05:06:34Z","last_seen":"2026-05-06T15:48:41.77804Z","times_seen":10927,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/product_18photo_2_s.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/product_18photo_2_s.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Oct 2013 12:31:53 GMT\r\netag: \"95a959-927-4e84e11fdb418\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2343\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fsWW4mKVZU52a%2FG6NgkBCLW%2F0WBbvsyh2gkEkQUDOCtZGYRgWPsv5TlM%2B5kIncCIhh4ldD7Bpu0xFVYRDBGrMpE3fJS93%2F92WaE62zKiE9ER\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bda8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 75x100, components 3","md5":"46ca50fb9f1783c23b847437b4d55cac","sha1":"fad09cca0bdb703a6817cb1b143fa484a3a9b5a9","sha256":"000d20b3bb4d9c0415e102a257970bc3fd5435aa1fa464682bb487ab7e3f2e4d","sha512":"97f3aa11d0628a72a368f6bebe5b1441208676c2e488f3dd5c0df993c798c30cba992696d7ff1076b4ee2a200244848f3bdb4632ee9f198a137b8ad4057c53a1","ssdeep":"","tlshash":"63414b17bea747544b72c97f4026221ef1791e013fd57630a9562a3ac1b1cf48124fee","first_seen":"2025-11-24T05:17:44.892271Z","last_seen":"2026-01-08T23:15:45.819419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":719,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/b1.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:19.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/b1.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/web/tpl12/main.css\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 12 May 2018 08:23:13 GMT\r\netag: \"95b8de-148f86-56bfdf6ad3e40\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1347462\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDbEBniPdUsy%2Fnhw655l4cgnrBZRT7U9zNXRRKX6fkMHeL0aE50g%2F57u1pQN1xOmNRR5kcJAkYtdWRr4YgSlsVebSD8t6AxKT2M6v90DnlIH\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf656c9e28a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1347462,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2000x1100, components 3","md5":"562233b7ea9138b75a86290dae35f587","sha1":"32c5fcab66b7678dada5066c96a918d3f66e4ed9","sha256":"d1bc4c9ca5d57f33e8bbc5679ed0f7fa92e0b9703bb482692b8cd9914072d530","sha512":"99d546567ef857a4f7757fcf4b0b97d94ee55b3ba54e304ced524f8bae816fb48c0c33e7268fde0ff852ac2cca24d8d35c3336fca153ae014e38c1e276a9b071","ssdeep":"24576:deqCWklKbwVMNHu9tJ4cg/G/X8or5T/JpGX0mI:H0VMNHul4/u/d5B0fI","tlshash":"5d2533a6ab51d107ffa03dbd1bcc20e074bae703ca56179014bcdb96788268e76471f9","first_seen":"2025-11-24T05:17:44.888149Z","last_seen":"2026-01-08T23:15:45.820309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1994,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":1219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/product_20photo_4_s.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/product_20photo_4_s.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Oct 2013 12:32:13 GMT\r\netag: \"95a95d-926-4e84e1327dc38\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2342\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZ45EscfeG25VE2WZnuRWS0vlYN%2BW%2FmB1mGpEz9C06oRKH5zV68drJUCXE2pAbQgkhy77Je2B%2Br815L0e0SQP7rwNa5TWpkgATX82VWx5sTj\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bda9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2342,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 100x75, components 3","md5":"3826c1107361dd06c1a4ceb65c663296","sha1":"5b3593d0d0d67fa892aedb534171bf8d24d4f9ad","sha256":"db47ee8ee27ac76a046ac56d3dfbaa9a3a6bed7eba491faf77d169234333ef5f","sha512":"de439e651dcdd24d021ff01d7c8275b5fee6c40d513585aa28fab244a61cd6668f8f40cf5261c5e332068f6d02335c08b1b1c41965f45a673ecf0b5d211b7745","ssdeep":"","tlshash":"4c4129295f5a5971db13d9f42f06b673f1d88bba2e406a7007b2006cca24db7c004bcc","first_seen":"2025-11-24T05:17:44.881315Z","last_seen":"2026-01-08T23:15:45.821334Z","times_seen":2,"resource_available":false,"data":null}},"time_used":755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":754,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/g_close.gif","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:21.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/g_close.gif HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:21 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b269e-20b-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 523\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t0u%2FfXRKDaRBXRKR8mBN23b8BJQ4%2B6zYcrcxW4qqu8A98auxVwUZ3J0ubh9fIEgmEIPLq3q%2Fz9Ln2UkpvdkGiXlOm0kkGvjFK%2B6sv1rE2dyh\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf65791ffaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 25 x 30","md5":"23e8a2f11a28b5236ff96b013b5e8a5d","sha1":"69268dc540dcaa04cfc1ec072a09fe3ea6b845a3","sha256":"156b55313848f629f57c7cbba13870e2cb284103787d707c548874f411999989","sha512":"adbc53323c797a4afc7ab23f18aa1db8c9f5949a68f6efdea6b0bccefd5db3accc611a79678b1e34052b52393a5c6f4e17f4e237d6648ae752bad2677d4d9541","ssdeep":"","tlshash":"dbf0dc5ff065c09cd20081f3ed805106262b4665ae4ea075273d90aa019aa836dbd602","first_seen":"2025-11-24T05:17:44.893649Z","last_seen":"2026-04-06T00:30:28.735538Z","times_seen":3,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/AJS_fx.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/AJS_fx.js HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b269a-c78-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 1171\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VNX%2FxoI4coZb2e2zitHefaDmdflujm4ApxieDIwUqNPb1clIa6k8dOoIqISkV05fq8FZysMOT9vmWtdM6w7hkYMa0W3LNJZDcUuyhwNUnNT4\"}]}\r\ncf-ray: 9baf6567ad9ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3192,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d867777d90af5222f45e3774a99a033f","sha1":"8212fc0ebcfa86d8402b9277338c9b725aa7f7ce","sha256":"5a35fda778b098e7af86704236fc481fc8a4eda6de4620552d821c0aa245a37f","sha512":"eb8985ea6d84917e57dfd3e4a48743e2e6008c3792f54e395a49b7a26ec30f8adf8a14ecaf0f78a30d01f1c755ccaf43de2c4bc684d245b9ba4c54bacd103f27","ssdeep":"","tlshash":"1a611f8c7af7696510b32098006f314db87ed9b42604829cf97ed5c4eef422da137eb9","first_seen":"2023-03-07T14:35:31Z","last_seen":"2026-04-28T09:59:47.797087Z","times_seen":44,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/product_45photo_WeChat%20%E5%9C%96%E7%89%87_20180630202351_s.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/product_45photo_WeChat%20%E5%9C%96%E7%89%87_20180630202351_s.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 30 Jun 2018 12:21:33 GMT\r\netag: \"95a935-bbc-56fdb01464b58\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 3004\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BD06%2FG0gtXqdKysqEAMj0J5Ec8YBV358MVM%2B0vXjURzrcIxCiufOgB%2FlJdmAEv0xdg02yQiqFOLQHBOIp%2FtXYxOHCPO5dw36595C%2BkrvWYW\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bda6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3004,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 75x100, components 3","md5":"df689c8939b58ebdc81c0a1e86be0623","sha1":"c3f26d5769b9d608dc9b7470b9d3a3fd5ff78915","sha256":"25c61543c8a020454ec8e5b4d895892db5807866ddf2c9dd3e7822b2cd6b2d34","sha512":"a0e35a69d5ab9fba8a4ee1013d08450e95351fb48d273b0d52168b479ce63d2ea60937fd003d2dbaf7312df5de1342ed2e51c18659cd96f336fd17b3b3e61dc9","ssdeep":"","tlshash":"98514c2b17e3b4e0d707c88ba5d611fdf0ae1a533da4f9786ba085208734e7830959d9","first_seen":"2025-11-24T05:17:44.878145Z","last_seen":"2026-01-08T23:15:45.824843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/product_19photo_3_s.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/product_19photo_3_s.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 09 Oct 2013 12:32:05 GMT\r\netag: \"95a95b-9c8-4e84e12abd638\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2504\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMxu8RQE4pW5%2FUX7OJU3KhroWolKNsFEgdlmMzGqqsyvaagl2Ux%2Bu%2B8aB5Nl%2FcuF9RMvVJ825iS0XestZhWqQtcl3%2BVo1%2F0OkKMSaJ%2F%2B94Gx\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bdaaa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2504,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 100x75, components 3","md5":"a497f5830cc075de6847163f657a511c","sha1":"c47f939d32752a736374d07d3b975ae8535eaa94","sha256":"8c74c8895455220c9ee67eff5d099d5d7e00ccf53b14362cf63a5baa2510730d","sha512":"c84a3ce06abc22bcd1b92c3f9a0fcd7a6725e07e6ddfcca014e58382604916c46cb2537dfd962c7de9e312b0381c826c1ec140392251f1c6ba4796be85cce837","ssdeep":"","tlshash":"35513a975b472192970be339341427f3a1a948a43e48173d33a2857d4830efacc9acc4","first_seen":"2025-11-24T05:17:44.884544Z","last_seen":"2026-01-08T23:15:45.825772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/main.css","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/main.css HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 12 May 2018 08:26:40 GMT\r\netag: \"95b8db-b3d-56bfe0303d000\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 469\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHlqF9CJkAH%2B3K3vl6MwxiNsYprxqkCUw5LmufsaoF5E2VKFuvjdkA%2FeJYiHqSfGJhcvpCLWkmtidX051r78IcqJ%2F9ar3ZwsWLM0MUC7HjtX\"}]}\r\ncf-ray: 9baf65679d97a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2877,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0ce778d6473bd7cb01dc934cd1fc983d","sha1":"ba229b5fbb1df0883ece88fa16ada07125ed6199","sha256":"5089fc358dde53df194455d40f60035f6d0abf283cd714c400733bd2a134ba7a","sha512":"8f231056bd883054b9015ab79131ba8db937ffad90d8c73c8ef474a9c85e369c144ee2e0f7de0b64fb3e05a41ef4562cf8d17aed32d9b675faf44c75765accba","ssdeep":"","tlshash":"5651024796630742f9476c5eb327abd7615ca583946ec7b03b8ca344cf8a0a42ad4b8c","first_seen":"2025-11-24T05:17:44.891465Z","last_seen":"2026-01-08T23:15:45.826594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/homepage_1logo_banner.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/homepage_1logo_banner.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:54 GMT\r\netag: \"95a9da-15778-4c3ddeb8e4180\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 87928\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uiHZwgsyUfikqtyUtUAVDHodc64TCCUGLg4Ds05D0ZleXHCdakMtHI8%2BfU0lXAqcApfwoxeM%2F0qwwDoaSjcS%2BuZhQBa7ZqohPIkBwr%2BbCuJq\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567ada2a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87928,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2011:10:17 11:07:49], baseline, precision 8, 790x123, components 3","md5":"f98b14355358953443c67e4575af19ec","sha1":"2c292c9ceb0cb632497c76f4077cba2ee3ac75a4","sha256":"608ee4e47eee9cd68c05b89958a4b6ac730a23e1b63403af5bc94b8b1bc9f562","sha512":"d7bd09ef69164b680ba8c3074931623fb0dd75d72bec78a39a7b91448e112840d7a61aed34206d7d181d1d30dfc9e523aba56ffff8a24a5fd5258a305ed2b770","ssdeep":"1536:ejDjFcjnrP97jlOGF5oWFukdMTWkkf8ExTrY6U:ejDjuzlLF5oAuPT6U68","tlshash":"7383cf64abb0ef01ed90193457a2bbe7412d3a1f87f31209385dde4b73238c5699fa15","first_seen":"2025-11-24T05:17:44.877179Z","last_seen":"2026-01-08T23:15:45.827578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":402,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/main_r3_c8.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/main_r3_c8.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:48 GMT\r\netag: \"95b8eb-198-4c3ddeb32b400\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 408\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKeioYXlfuZEjueZJvHgael8Ls1VwK7BL8xDD0BM1T6uOlBB8ecxeAxRBmJT75B5VFqvub6Xmwp%2F3CC%2BxBqUlTLnemmLrofd3u2TuHiNDnvh\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bda4a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 6x698, components 3","md5":"8e1d01e83e3b8fb60a82ebf0e21e8e4e","sha1":"176ed1a541e827619cceaccd862588e464bf27e6","sha256":"f90a8bb7788c1a0185cc3dc5f4aad760996c744806a69b66aec42c66f95d572b","sha512":"56fd674f7117df5170ebb353a6f9f9f4cbc35a000ce2dc14a9c14856800aa095e8ac9bbe0fedf04dee7193f0997695adf3bbc1388b3f163b9abdb69579633434","ssdeep":"","tlshash":"12e0a9875e06e0c2ec2a0d7582641220a30b2e0da6b50a0f103b2d20f9660cb2866302","first_seen":"2025-11-24T05:17:44.883711Z","last_seen":"2026-01-08T23:15:45.830056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/news_1photo_%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20191102165948.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/news_1photo_%E5%BE%AE%E4%BF%A1%E5%9B%BE%E7%89%87_20191102165948.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 02 Nov 2019 08:45:59 GMT\r\netag: \"95a921-447e-596591c97ff1a\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 17534\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJNYyWvonlm44g5TtXUvwaSn2T2k0u0MDAhqYjIXVuG7nReJgLLPSt1s%2BT5qStY6HZZea7c24y68eaw8CpstUzjJXQPuqApapab%2BnaLzKxba\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bdaca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17534,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), default quality\", baseline, precision 8, 300x225, components 3","md5":"de9e653737cd60fdd65913e9d5b7483c","sha1":"7f52579ffdb16ea5b9216790cbf9ea0e9babf46e","sha256":"0e33f49c0ec5af18f9654960e4e8c0561b967bb528e4d2f2d52c84a5550f8d06","sha512":"4c5cf38563a77434e7c1c062ed147da86cafa5b623fad18023a00b6badd5a05c23cc8d17370cf9a78d4967198eb31ba445cd572eec956fbb27d2be988eebb16d","ssdeep":"384:LVVEHF8SnGYmo3a5z/Xa+DoKfR+LTrXqPk21ZG3HYPTuji:LVVEvGY8zJfR+LTrXWOYOi","tlshash":"2c72d02db1ad554683bc3fb86ae61c7787b0440419f4b4b025b02f712a07dfdaa8f60b","first_seen":"2025-11-24T05:17:44.878983Z","last_seen":"2026-01-08T23:15:45.832313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/main_r4_c4.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:19.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/main_r4_c4.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:48 GMT\r\netag: \"95b8ea-42b-4c3ddeb32b400\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1067\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6KcctMiFj%2Fp6AYQVYlN%2B6WKIrvr1cHvajZZjAc%2BJJ5BR%2BhjihJoM0HAs9t8a%2Ff9gFG%2BAdDwAYTxfQiTjnpgY%2B8AuvbiKrRGn3jAxV8RTYx79\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf656c9e29a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1067,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 92x45, components 3","md5":"5c7bd602e1b99254ada26a536afa4240","sha1":"ddd471baa35a1c5b7b95e2df75853544d49c4439","sha256":"3facef6cd971d52c33c12a7f165f1f13b939e163f8da2c0147368ae759519fae","sha512":"be3724158259a575d38ce7220f3bb12257551ca36c653c317b14595ad8ca895928b619bede84b0f374960e2b0351e7ad5e7365ebe5587bb3c5576ea342ac80b9","ssdeep":"","tlshash":"6311cc12263087c3caaaea75d4709232fabd85075e3d827a7f467168fd08593381eb74","first_seen":"2025-11-24T05:17:44.882136Z","last_seen":"2026-01-08T23:15:45.833475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-08T23:15:17.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nx-powered-by: PHP/5.3.10-1ubuntu3.18\r\nset-cookie: PHPSESSID=958hmdusn9phefkvo3ekvln916; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfGQJgifxQxDjTw88ZLWsGafG3g4NqT3UGkz5yBLCoS8nerlwrBYQFHZFnOxosEyZCUrllp1eCLWFJ4zz0u%2FLoFlJvu462aDOgU1XiYE0w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9baf65635dc9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:5.3.10","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14873,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1096), with CRLF, LF line terminators","md5":"3c6ae47d581b8099e90a287827bdb997","sha1":"e91f75267ad80a1e2aa881618926672ac1297617","sha256":"a7cb295d2884f409cac78789f3a2b640f7fced52ae4be980a5d25bb1a12cb613","sha512":"f8e53325cd04ae345c3bdf7750ebde45060048d75faad7bb9d8a3972d2378b1b24393d8eca479192b4dc2ae7a83eb3c5530edf7e9bc326eb16a8893fe33e006e","ssdeep":"96:D/PN7ePDjCVeqLtHD5rpO9yzfsVAEWWMJXa9TdxJl6GWvXazap4Fvjfog5eUIXJ5:TN1HlzTuSv0RuJRU9FTA7+nECWbM/ySU","tlshash":"61524060a7f5372b780241d9f0103fd95ae3855983a25810fe5f31afabd85aa8c3375e","first_seen":"2025-11-24T05:17:44.872165Z","last_seen":"2026-01-08T23:15:45.834933Z","times_seen":2,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":433,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_jscripts/main.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_jscripts/main.js HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:47 GMT\r\netag: \"95a3b2-3c9-4c3ddeb2371c0\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 545\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEJhrSsIPcIsYrzSgPCwrAHX3fsVczMaQMn3FrP3%2B%2FecaMwuEkTSdNnuJxfVw7dWRBjLf0OrJ7F0fZ5fVuORMVNGtHuzlxNWkUVEZjEeBQlb\"}]}\r\ncf-ray: 9baf6567ad98a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":969,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"645ddd246af12a138cc97939cbe84b2a","sha1":"8da246f62a00e6238da0a01fbb9f63fe816d4ca2","sha256":"3c9e7faef40f47b625eebbd546538fdde270f5868365d4b5c76f6971c1e51023","sha512":"1d2794d2e773e42970e0e7615ffd9228fd07e5d5c21baa205b2c330019b7dd7c7cb62270e5f6222dd057b7a223ed854f265725b8a0d58f40ae2b619f3344f6d3","ssdeep":"","tlshash":"801102e926022436c0fb4f26b20b4a8d68224867772a6532facd11e2bb2065d1331f56","first_seen":"2025-11-24T05:17:44.875881Z","last_seen":"2026-04-06T00:30:28.745338Z","times_seen":3,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/gb_scripts.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/gb_scripts.js HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b269b-305c-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 3376\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ja%2BTktelo9fQGA3mLNDZZyjD1yrbI%2Fm4QkrB2mnWXgKfzL6y1GDYRjDL1K7ACK9Z%2ByODTKnYcX4xjMjAqBxNCca9RU22yUyrjvBuRqHLRy%2Bh\"}]}\r\ncf-ray: 9baf6567ad9da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12380,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d39a64602467339e78cef4299e2d5741","sha1":"da993d1c9547b97aaa92334d052b22866da8db1c","sha256":"b7e8aec98d17761257a44f9a690ce6a866eb8fb02105c0afaec30d9aa256e1c1","sha512":"24352c8155ac40c7cd4691a2c1179a87beb55bc31224aeb95b040173dbeebf80a60e2fad929a18a4cbb4aefd5f16ef13dd006b82c526d64a5cd98e4011b61dcb","ssdeep":"384:GiaehjnIs+u73iLXRde1sPWdVrAT/3XkHd:GBWjnzTSLcfQI","tlshash":"2e42970cb01128acc1eb3238063b2b09aef65603e916d11e78fdc6c775a165b527b6fc","first_seen":"2025-11-24T05:17:44.896154Z","last_seen":"2026-04-06T00:30:28.728362Z","times_seen":3,"resource_available":true,"data":null}},"time_used":740,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":740,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/gb_styles.css","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/gb_styles.css HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b26a1-8fd-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 689\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFOMTnKj30wplDYEPRE%2FUJmwV0l29SW%2Fe8T9UQ9s2bMKvyCQbw2IZPXBg1URj%2FG2xniiiWd5QXbcMD8VpylWCUy79OyNJ%2B5gpYTbpLax8dAa\"}]}\r\ncf-ray: 9baf6567ad9ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2301,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bf2ec27de6ba4d3c14ca8a1d717798c3","sha1":"481cdbc0f6bc405805e747852f695897165598c6","sha256":"9f551aeee8e5167c9e041c4dad91109bbe5ad7c989d40f47085d1c5336b118be","sha512":"f597a838f4545b191def9df410f66a789eb514641731389811f8c55a8d895c79b6eb779075ecf7ddc106b023f46537ac1acc0c1125de708eb80634c552f6509a","ssdeep":"","tlshash":"c541bc36eba31d15626cd764bb2af786334d21a7941fcc377f9023089f8476485a2a8c","first_seen":"2025-11-24T05:17:44.874179Z","last_seen":"2026-01-08T23:15:45.838525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/main_r3_c2.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/main_r3_c2.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:48 GMT\r\netag: \"95b8e9-175-4c3ddeb32b400\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 373\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3dPpCOkMdaso0Q%2BOSl3Fv81riMy%2FSKf%2F3y0UgTlj%2BZ2C89uCyyt2PinrzJi7BxKAcVbIgTx9w3%2F8ezNw7Wub6TBMlIW5xU1Io0ISOmb19%2Bv\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567ada1a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 6x698, components 3","md5":"3dc7101d4654ecf6b85a176866b749a5","sha1":"9b85ef4b43b2ad5a4d2395b948f2336020ef4cc9","sha256":"cdfe360cff0ff6c051a5d99bc98a72d8fbae4d8fd2d679344ad813e53dede868","sha512":"ea69f4cb6261e7c6e9530ea64edd2751c56c6c89ed806a557793bba1803e7a83dccd859f1e5826d18995ee66db00e029b16ee125a0c8aad7e5419b019017252a","ssdeep":"","tlshash":"42e08c233e0560c2e85a0f3913253700634a2f0ea6a08b0f01fa6844eca16cb3d503a0","first_seen":"2025-11-24T05:17:44.887299Z","last_seen":"2026-01-08T23:15:45.839737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/header_bg.gif","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:21.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/header_bg.gif HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:21 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b269c-4a4-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1188\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ui593K3m5qEuk%2BUb2mmGHq4q8fWC4CMBHQ57JXEGq8zqeltSSnAeYGG8x7fKmDEd3dQoKu0YCn9AC3wHraWOkDvPlAXJXvLh7bpxcDRW%2FZJh\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf65791ff9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1188,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 223 x 35","md5":"11594865f8d093dfae37f12d20f281d6","sha1":"9ca0a3a12899c3bd4afef823575e2691cc54cc02","sha256":"6f1835a06585a3cf90a0b7e85f67607fddebb9a4e7f81f534257e61b904e26cf","sha512":"de63a9e81846736cb5633d0c58de7632a16136efe299566e1c2df21ecee1ee4cfe636f7b03df239c71751b112eb56cbbf68bf83ccb426c6baaa725c51f958d62","ssdeep":"","tlshash":"dd21aa6fd4b1c379ea5545309367646a1e41d41817d29b18633073a7691875e3f03df2","first_seen":"2023-05-02T16:33:42Z","last_seen":"2026-04-29T05:02:51.26259Z","times_seen":83,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/padmin/upload/aboutus_1photo_Untitled-1.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /padmin/upload/aboutus_1photo_Untitled-1.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:54 GMT\r\netag: \"95a986-2bf6-4c3ddeb8e4180\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 11254\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90elgB9b0fD%2BG5r8Brd0%2B4yuqPzFkneRnzAc7Vy3QtYzdo4w10wv%2FDSxZ6IdA5Phb7arUnAta4giYrOZgqr040xZkJBcoMLLXlVqczEZvPEA\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567bdaba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 300x240, components 3","md5":"f647ad852fc5bc37af44438232f29d4f","sha1":"38597893e62a2f32116ce331f3d6d52b4377eecb","sha256":"d4425784c3e392406a628aabc24c29652db07a2a2de9c7957672f67abddb6141","sha512":"3ad0a7510e804ad7d040c74b15120fa672f0e8affa9b2c7193d12d4ebc0c0cd0b54f0d9673562fc33c8dec49965b760b2ff2a53cc2349c9dbf6ae17e0b6e0014","ssdeep":"192:LQHpoJNQ07eLvTnhlZ/3SlS3iBHcY80CuAZ5HqzUK2EVpbzsgfyM1JyUHOYr7PS:LM47Kn/Z/odl804VlEDfsgfyqTuY3S","tlshash":"2e32bf5900425c70eb839cbd11f5291af48bae04552c36b49a164769dabadf3b36e38c","first_seen":"2025-11-24T05:17:44.889739Z","last_seen":"2026-01-08T23:15:45.845107Z","times_seen":2,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/favicon.ico","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:19.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 08 Jan 2026 23:15:19 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5E6RZ0cqUjWgKzS7nUl6OrbPyufLJArSwi2QZwqun3GMZh2%2Bg8paNf3reTbgl1fdwNOlJbWZ6y%2Fa%2FIyV5mpfL%2BELxP8oqPxWw3a%2BM6CsbJV\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9baf656ece61a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"cc2b7d05e9ab24558ab28ad993875e21","sha1":"c70e8b954be633911cebb6222f4df611227890ca","sha256":"ea4b206d1972857e04bf1c3c509736e660338556653500af6fccc31b962bc827","sha512":"ecb3f828e9de60cab514c4e58c849896cca6a68abd58e4fb9f740a7f247c447920ed41edac91140c54ac0a7abb84ae2834ccd7c6f1769beeb71ef96e66222776","ssdeep":"","tlshash":"3fe07d8e5042b24b0d12156034c51485164c12e6542946e43887d487425497d8d8a79d","first_seen":"2025-11-24T05:17:44.890604Z","last_seen":"2026-01-08T23:15:45.846523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/w_close.gif","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:21.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/w_close.gif HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:21 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b269f-4a-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 74\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GqaD2GT9e91kUgQKCryaMPIyXDHvOczwiPowF37oS2FAu24tccJyFXRCoC5Y6d%2BeLuQRhEE4lJcZ2ACXQisDUiRDqPVY4qTa1zxh1quW9ee%2B\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf65791ff8a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 11 x 11","md5":"910dd85634d6c0c6b3bd9a081ca4b09b","sha1":"9ea94f1d7c68b7317f7c8a4f7881d58bfa1bbdce","sha256":"7a2730e63aee037949864ea19477701b096c00310ba32e44e22f2124a9c72367","sha512":"34d731a41b98ba52854fe7a09d0ef48a2826766fd1bbdaf79ab4289dd14821e6881313ee8155ce5a28bfcb0954c573e1233b7abd4b899267be0d10ce8352f09e","ssdeep":"","tlshash":"bea00255f1dcb7c5c29da4311c582b046195ed69c37405cd1c548718e4575b32876794","first_seen":"2023-05-02T16:33:42Z","last_seen":"2026-04-28T09:59:47.799031Z","times_seen":87,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/AJS.js","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/AJS.js HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b26a4-289c-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 3723\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ric7Ck4cBZcDXrRBTQYyFvcNjoh9gfBBq2Ay0hFqxO1rk4sgrVrvoF1HnPGnY5%2Fhsr5lNViz7zsvBLhnOTSZn%2F8ZAPhw8TIzZjz68blj5x4L\"}]}\r\ncf-ray: 9baf6567ad99a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10396,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"886ccc135b9c203048ce6b134732d95b","sha1":"82be47c287818d415ef128844b004b11b3bc9524","sha256":"f63c95c2f5c6880410b5bc6422f8ee60a9b2247b8d94a9006b63fc5172cb14f2","sha512":"3dd7bcf95354de15a2d4e8aa028014d553ea3ad205adeb35691a38508376e7bbd3ded9e2805f654e3540361c47d46ccd454e12062d8bad42b5b3a970e098aaa8","ssdeep":"192:KcUxvraTsfJ5/eNlvgFVFsBIw8aRylh1aCBziJiOratqZ/QeG7UyvRgM6juiXbYp:Cvr6sfJcNlvgFVFIIpaRyb1aCZOigat3","tlshash":"2e2264ec3ad29caa05b624bd087f625c7dbdc8a176084240d9beccd4ed7194b4527eec","first_seen":"2023-03-07T14:35:31Z","last_seen":"2026-04-28T09:59:47.811462Z","times_seen":45,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/web/tpl12/_images/main_r1_c2.jpg","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:18.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /web/tpl12/_images/main_r1_c2.jpg HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:18 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:48 GMT\r\netag: \"95b8e3-590-4c3ddeb32b400\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1424\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hrS500IxFvZhm62kX0%2FX44ohL264%2FrYQ06gZSzAp4wQgNK4doBMT0vOVhRD1HJuLu6bHJ2rTilht6%2Ba%2FxgvHP1A4%2BYfWp5ouSOOTqFUrrmcK\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf6567ada0a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1424,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1004x7, components 3","md5":"1e50d3b512450bb46cd4f731c32d698b","sha1":"9fe701d27b05625998aaa180da38955b9f6e4210","sha256":"f35294a5e6f2b6c272c5edf5ac7ec048317d5adace6a929c6dcec2193d1d02c3","sha512":"63d09169ab5eeaf46cdca31785b177cebf8c6c1e6c2158b5d5197fca851b7df321f92f16a16e5eb9f602b2dbb558916dc60ba162d1ab613b9a2e8a31c9ba0631","ssdeep":"","tlshash":"e2216196fcf03190cb220e30066342082e32da0ba9140a4e33aa21f0fb9d08323c3343","first_seen":"2025-11-24T05:17:44.886485Z","last_seen":"2026-01-08T23:15:45.854131Z","times_seen":2,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"samngaimarble.com/_greybox/indicator.gif","fqdn":"samngaimarble.com","domain":"samngaimarble.com","tld":"com"},"ip":{"addr":"172.67.129.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://samngaimarble.com/","date":"2026-01-08T23:15:21.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"samngaimarble.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:39:17 GMT","end":"Tue, 24 Feb 2026 06:35:56 GMT"},"fingerprint":{"sha1":"3F:3D:BA:04:76:1B:FD:64:3C:E0:36:28:41:0D:AF:4C:9F:8B:9B:DA","sha256":"46:61:A3:48:1C:E0:2A:19:6B:27:75:03:C1:FB:A9:8D:1E:38:95:30:6E:5A:31:D6:36:C9:71:98:EF:FA:9C:C1"}}},"request":{"raw":"GET /_greybox/indicator.gif HTTP/1.1\r\nHost: samngaimarble.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://samngaimarble.com/\r\nCookie: PHPSESSID=958hmdusn9phefkvo3ekvln916\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 08 Jan 2026 23:15:21 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jul 2012 19:36:55 GMT\r\netag: \"4b26a2-202e-4c3ddeb9d83c0\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 8238\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CGY8BL13pFEQ6KFcqsfvRQJZjFGx5c0dUctO3PqJEiH0IT3TQK4TmLTs6UqRLMZTxj6JiX9uN%2BQvDTS4u8XKD4BSpCJrLE1yn1SKYgGlbFO0\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9baf65791ffba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8238,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"f64b6f735c03431a65c7b211f55f5522","sha1":"4d9a0c9e8d7aa20d6e6e3ea7881a41503028a7da","sha256":"325c9abd3a010d95544f93d94a8ae5b9fae2a70affb4bfa260dd161cbf2e295b","sha512":"307239143386161b6c6b81c3bf90a6f6491abe5e8c51a51bd28900651ed02976cbf340aef03f3584fac491ad158460c77decad1e59ee6b5269e50199afac475c","ssdeep":"192:Vj3s1SSllIMLzqO1YGPc67C3hxw+ILkAitgGRkVxBIWBSy:JswMLzqOuz67Mw+ILkAid0QIS","tlshash":"a7027c33c3320157ca8c6771e0366aa12744e76ee4196f7fa6e03b687db173261316b9","first_seen":"2023-05-02T08:55:20Z","last_seen":"2026-04-29T05:02:51.24797Z","times_seen":102,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-08","alert":"Sinkholed","trigger":"samngaimarble.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}