{"report_id":"bb608ed3-a2d2-452b-8dbb-fc9db79d29df","version":6,"status":"done","tags":[],"date":"2026-03-03T03:36:42Z","url":{"schema":"http","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"title":"KPH Advisory Services","dom":{"size":75703,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22887)","md5":"5200185427c22ea6c65f60dd9fbc98c5","sha1":"cedbc5911f79d0b9fcb01c22a3c42a1403e75db9","sha256":"40a553546cc89514a1da4d9de206661fb578be934c3624b81da34f4f53db297a","sha512":"4411b4dd39df8004513e5e196067f0abeeb363875a70b25ca7634933ccddb51b346b13d63b350cec837b2664533105eb95e491c107ab88021bb60e83583e96b1","ssdeep":"768:1T2dgy+8X/ROVwgNZAho3eVGJZdypJVoTxsPC/UaDmILMdfuo0sCJR:B/y+HwgNZAh3VaypzoTxIILMdfIR","tlshash":"aa730935f010312a46378a28e1e9fa58b46ae405db735e96f7b9c20f47c25f786e270d","dom_hash":"domhasha99fced373e0834843acf39d20c07955","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-07T03:36:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"portalkph.online","ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-11-26","domain_rank":0,"first_seen":"2026-03-03T03:36:43.166925Z","last_seen":"2026-03-03T03:36:43.166925Z","alert_count":14,"request_count":14,"received_data":1317513,"sent_data":6697,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup:8.31.1","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":62075,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":2,"received_data":169170,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":49930,"sent_data":1120,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"231bffa52af30484729fde5e0af89f90","sha1":"ffb17df5097fcd6b6a06a8eefbfa60b2285d6ce9","sha256":"3de9312984dd5e1fb373f34764d06d91e37ab7a9b6e89c1d5a84e13dacda5f37","sha512":"0593cb2f3c26a6f3ba624b9e43a6044e7c2cd6e290794b8df1d4d8aae1ecc4e6385183930b03075d1bfc26add22cbe7d74e390a8df7be5f447e8ef0319ab7093","ssdeep":"","tlshash":"a9c08065df5e411780e9384d747551cd343890659433150149dcaf4891adcf04056d5d","size":173,"data":"","first_seen":"2024-09-06T01:54:38Z","last_seen":"2026-04-04T03:00:12.975953Z","times_seen":1618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2787b0d600b3371537cbf8a27885559","sha1":"9cd21353e239c1149f9b98063fd968b6ee266564","sha256":"9ba604003c8ed376e625715fa15c240ffe43f985190623e45754249f481e75fb","sha512":"c5c234e8c67429012c9c6bf85a64dbe37c054eee5d46365164c816f66b75e71a47e718eefaa03da3552b82dbcfe406482bb6744f24045181784542974e650e92","ssdeep":"","tlshash":"b5c08cf0e00c842601a2106c3ca4cac8383824717155701af98ca9a4b422cd10416d86","size":152,"data":"","first_seen":"2024-11-19T17:02:56.846131Z","last_seen":"2026-04-04T03:00:12.977608Z","times_seen":1537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/js/us.core.min.js?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"30762b84d4966da932f295c56705d788","sha1":"8a4ce20cfb1b6c61c75e5fb29a7d0591b97d4947","sha256":"d3a4eed7e937393fb7b4cafc733896d99c3afc0635caee6b214df1952cd26b80","sha512":"faa3bed7a166c1633530a9fb34c036b6e1917a839a9780f0163ee7e6b7116c38bc65ea35a4bff2681daa832147f202a81742624f07183ad1eaf3625b7ebec959","ssdeep":"3072:BVp3mquL1tI5ZxwnjN4ly0EGW9PVJEze6B+hU:Bb3nA1tI6njNiBEGfze6B+hU","tlshash":"003409897310376582ef607d506f6a03e233d662a10d046fbab5c8e59eb4a07617bf7c","size":240019,"data":"","first_seen":"2024-12-23T13:55:12.295036Z","last_seen":"2026-03-18T07:49:40.191034Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7ff11da41d9650bac14a4115b1a7892","sha1":"8ec5c1c433eebda8807e3dd3ae2914bbd3986333","sha256":"dae9c7d23ed427e7789331a196908959a6cdd2b6a10b7fbaf96a229ac8fa1f22","sha512":"d54db5891731a93cf9fda5453ad64b7d13d9ae402071a1c921652df4b0c22d53ccb103dcb35f2e780bffb310a0a2a0b87a132920be1442e8c4a9a314b20fa938","ssdeep":"","tlshash":"92e0203914249d329a31c1d1da6926953451800f35039a9539fccb0d2f77ca34961df7","size":340,"data":"","first_seen":"2024-01-14T17:01:47Z","last_seen":"2026-03-17T12:16:54.141331Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-includes/js/wp-emoji-loader.min.js","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"11439fbc33208cc20a6a3a3ce7fdfa25","sha1":"ab73b93caefc172361a66b3c88d1b4f3c6392a7f","sha256":"09ae1a6e2953dc2eadad887f09d13d4f3cba1237c769e4efe0fa9c760d3ed82b","sha512":"313df4177bcfd5c6e75c18fe57547bb9528fdaa6059ca972e1584714e4d07ac4c2d364f66babda8e8a26aac2673463fcdcf9de379aa234b71125948e34c78052","ssdeep":"","tlshash":"fa519796e77638dfb2f900f2697a0d47e7614435d6c8d438c9bda3141cb5893c274a46","size":3142,"data":"","first_seen":"2026-03-03T03:36:48.634395Z","last_seen":"2026-03-03T03:36:48.634395Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/common/js/vendor/magnific-popup.js?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-04-04T10:11:58.682955Z","times_seen":19121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T12:45:57.048388Z","times_seen":131494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"219c26d67e5498555a22907a44e19e8b","sha1":"0bcbe63b1de90759fd5f8e96ecf384eff9666dd4","sha256":"3f534b9a77c33f86460823ed7af5daad359b9cf6c06bc93d181ca7a490ab7d4c","sha512":"95be11516e5a5f9e1119e27733d81549c324b65b5a86c6b56d30aee1445e81cbe0b1892f9ef70b22b3a1a13325baaf18ae906500eb20e6a940f96e727f226d0b","ssdeep":"","tlshash":"9f1178a1978c27278acb448cce8362c1d271da379d981c37fcd6dc540596a1beec2d78","size":1027,"data":"","first_seen":"2026-03-03T03:36:48.637225Z","last_seen":"2026-03-03T03:36:48.637225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"703801526fcf5229ff9cf661157b2ef8","sha1":"0af85dc70f74ca3bd749d7132928ac9753bce12a","sha256":"bd61b594fe787dd23a6686947dc366e7f216e49ebf3bea9e61e2f7602dd002ad","sha512":"cda6374e933954dd160fee121aeae232033362ce384427af5ee5381fad708af8e561ed689d4e86de2c71e707b61cefb64a7ab439e5973d836c09674abf93f1de","ssdeep":"192:le4zV/DgNYe4+V/ogNLe4+V/ogNce4+V/ogN0:l1ZzazXzB","tlshash":"efe12489e51a245e017bcf55edefcda5641ff407bae65e52bbb0c60b52cb048cf88602","size":7364,"data":"","first_seen":"2026-03-03T03:36:48.639021Z","last_seen":"2026-03-03T03:36:48.639021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T12:49:15.258785Z","times_seen":685263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"portalkph.online/","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-03T03:36:19.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://portalkph.online/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://portalkph.online/wp-json/wp/v2/pages/115\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://portalkph.online/\u003e; rel=shortlink\r\ncontent-length: 13464\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Magnific Popup:8.31.1","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":75726,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22887), with CRLF, LF line terminators","md5":"bf6493d0ea7c550fc838c8bb1091f372","sha1":"dec6cf7b69424984e008ff34a31684fbdb96a3f5","sha256":"ab6f5dbb57a1f535a782ea251774d4faab920a0bfbf0ca32e71c1dea33a271d2","sha512":"dc4bde4cc57acec1389fa1d2197660398b97931109c9e8ffef250745d0ec819e16c40c66fb8af3a41093b1505deb83c4d6bc6d81c2e49a9aca8e1a27a98cbed9","ssdeep":"768:T56Jry+8X/ROVwbNZAWo3eVGaZdypJw4Ycw+eCujFiZ9LMdfuo0sCJr:9oy+HwbNZAW3VXype4Ycww9LMdfIr","tlshash":"f8730935f010312a46378a28e1e9fa58b46ae405db735e96f7b5c60f4bc21f786e270d","first_seen":"2026-03-03T03:36:48.592414Z","last_seen":"2026-03-03T03:36:48.592414Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1362,"timings":{"blocked":455,"dns":27,"connect":164,"send":0,"wait":451,"receive":1,"ssl":260},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Plus+Jakarta+Sans%3A400%2C700%7CNanum+Myeongjo%3A700\u0026display=swap\u0026ver=6.9.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Plus+Jakarta+Sans%3A400%2C700%7CNanum+Myeongjo%3A700\u0026display=swap\u0026ver=6.9.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 03 Mar 2026 03:36:21 GMT\r\ndate: Tue, 03 Mar 2026 03:36:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61389,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1116)","md5":"0615f553a99b6766dde8549336f4102e","sha1":"25e653052d80912e102b8e612f46d7a392c020ba","sha256":"14ab2e927e07f23ba5dabe552a5cafb6672b19f0fa0a42d7cb11287fb846d575","sha512":"8dbe74d9ff81fb0da14acd186ea0945cc6411f6ac406607a500273a6c8297da4aebff8d95eee016271eb409a97aace86256a63821aea983f518af276bb4af431","ssdeep":"768:0jXNkgKE5ITtHQHPnENTZRUyZg59nkuYbyn:aX6EiTFQvnENTZyig/k5byn","tlshash":"61533fa908378d70f6630cde93efb723df6e14693841c5e887f558c1ac67026922ab4d","first_seen":"2026-03-03T03:36:48.597522Z","last_seen":"2026-03-03T03:36:48.597522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":106,"dns":1,"connect":20,"send":0,"wait":33,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/fonts/fa-light-300.woff2?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/themes/Impreza/fonts/fa-light-300.woff2?ver=8.31.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 17 Dec 2024 17:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 184204\r\ndate: Tue, 03 Mar 2026 03:36:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":184204,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 184204, version 331.-31196","md5":"b33449667ce61388905a97b13f01ea16","sha1":"7ae2739ef4b0ab9336551a6abbbddb8fcfe1dddb","sha256":"1ddc6ae069ea7aedb68a92d53a12933a5a326f28c714869b99f335377dcce217","sha512":"84e5403ee949a1831e6767b16a0405156d5045a33b557f1feea94fe65b0752462c4d6429e443e2f2dacdc3f8f44e31b510a587ba48698f82f732b91b5371405c","ssdeep":"3072:Xkp/F+gqP+UhcYgfm69mi5S7vRrYa3nvQFD46ImDTtSpFMc:UpF+gqP+T6i4lYa3vKkQTojMc","tlshash":"c5041201fc7b8f5ecb24bb11b17fe2145db992d0166674c8712ad633d4a03f91a0a2ee","first_seen":"2023-04-11T08:48:54Z","last_seen":"2026-04-04T07:48:01.99538Z","times_seen":3950,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/uploads/2025/11/logo-footer.svg","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/logo-footer.svg HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Nov 2025 11:43:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5247\r\ndate: Tue, 03 Mar 2026 03:36:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":14907,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dae59e9d537d83ff23abbc318276dd9c","sha1":"e82e4fca793114ba57dbe2a3b51713f17335cb98","sha256":"59384c25d2233dbf7ff85d0b1d0a1221cc2584d6cafc043f3e390b902f9f8c2c","sha512":"981a1792a073f57b411f2fdba96df1e57347f7035f547d2ab9c29428e87fa7d0a423fe55fef2c9c9891cac49f4a08036dd406b63a40a88fa8aac3ab5d449f1fc","ssdeep":"192:hyvujRyZKD1RSK0orniZQGMCTref+Ipa+km1o36ykeIxgyZe9C3JTv:hcIBLiZQzCVIpGnw9x7O0h","tlshash":"58624357533c26fcac970a94897911e23bd0a4cbe264f2dceb779d12a44f9f0846497c","first_seen":"2026-03-03T03:36:48.604274Z","last_seen":"2026-03-03T03:36:48.604274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 04:08:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Tue, 03 Mar 2026 03:36:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T12:45:57.048388Z","times_seen":131494,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/uploads/2025/11/logo-150x150.png","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/logo-150x150.png HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Nov 2025 11:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7010\r\ndate: Tue, 03 Mar 2026 03:36:22 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7010,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit colormap, non-interlaced","md5":"8310c3a4f590e4454b5dce5d47a5c1ba","sha1":"7437196d137e52a5bfd53c1ac8c75a3d4369ee41","sha256":"c8c98add9fb0d061b397ef9b9b0225f9bd9da2ef2dee9c6caec9ba0b5242a863","sha512":"1eb9f9fadf93e210b581c50fad751f6abda73415af1cc7e1a5b5fe86b037d8349d11914c4020405c69dfde0017489d28e89989e41e5736fee707f79850792fa5","ssdeep":"192:zpAs1dNOsEsFO6FmQvG3NX5s7MEY2j5CvpuG:lA5cFmQvG9XaoEYhl","tlshash":"31e1af115b6e2b8c0ed27844b6600f12ecda630a24db8cf4d1fcd5606d55e985fd8c43","first_seen":"2026-03-03T03:36:48.609072Z","last_seen":"2026-03-03T03:36:48.609072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/css/style.min.css?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/themes/Impreza/css/style.min.css?ver=8.31.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Dec 2024 17:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 75958\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":447110,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8ab079f8c39feb1c04de7708523f50cd","sha1":"d7039bd0b1721319b68a52b0493d32694f917b5c","sha256":"895fdf2992141bf06057e13243e4708dac28ae82c794c8dd38d55513fe1ae321","sha512":"10c15d57948d8099404f7c944f30b64dc60fa6c87ed4e2c019c91f26eaa276dc286b482cbc948c0f0a3060dd12b825cf715033bdb2b3b21359b94180ccd1819b","ssdeep":"3072:Oj1E1IZ3/g2ln++1fpbqMAXH2VGw9pEBBiZeJ1hZlJCNVXpd:o1EQ3IOn+yb5NVwBBiZeJ1hZlJCNVXpd","tlshash":"c1946f74e55c11ce2b23c60feb81b27a84b5f320d5510e9af19b4d0f4ed2bd8119abad","first_seen":"2024-12-23T13:55:12.283161Z","last_seen":"2026-03-18T07:49:40.16186Z","times_seen":16,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/common/js/vendor/magnific-popup.js?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/themes/Impreza/common/js/vendor/magnific-popup.js?ver=8.31.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 17 Dec 2024 17:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7046\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-04-04T10:11:58.682955Z","times_seen":19121,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/js/us.core.min.js?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/themes/Impreza/js/us.core.min.js?ver=8.31.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 17 Dec 2024 17:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 57789\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":240019,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7015)","md5":"30762b84d4966da932f295c56705d788","sha1":"8a4ce20cfb1b6c61c75e5fb29a7d0591b97d4947","sha256":"d3a4eed7e937393fb7b4cafc733896d99c3afc0635caee6b214df1952cd26b80","sha512":"faa3bed7a166c1633530a9fb34c036b6e1917a839a9780f0163ee7e6b7116c38bc65ea35a4bff2681daa832147f202a81742624f07183ad1eaf3625b7ebec959","ssdeep":"3072:BVp3mquL1tI5ZxwnjN4ly0EGW9PVJEze6B+hU:Bb3nA1tI6njNiBEGfze6B+hU","tlshash":"003409897310376582ef607d506f6a03e233d662a10d046fbab5c8e59eb4a07617bf7c","first_seen":"2024-12-23T13:55:12.295036Z","last_seen":"2026-03-18T07:49:40.191034Z","times_seen":17,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":657,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/fonts/bootstrap-icons.woff?4601c71fb26c9277391ec80789bfde9c HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portalkph.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 106812\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"1a13c-GxDOCA4lYqi36DlQRNPKg9wRKZk\"\r\naccept-ranges: bytes\r\nage: 1620890\r\ndate: Tue, 03 Mar 2026 03:36:21 GMT\r\nx-served-by: cache-fra-eddf8230120-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106812,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 106812, version 1.0","md5":"df7de9fe96a30f78c7f652f5b00ae016","sha1":"1b10ce080e2562a8b7e8395044d3ca83dc112999","sha256":"011ae1fe8e56c310d82ec3795cb8f86b9dea521dd0bc560a0ae0c2e87baedd4b","sha512":"d8cd580ed4119b0d31c9f3b7ea1b2002ccef31ba26cc6791114e5017e9ccffbfbf57b8611aafa52a8b3e76fc8f77b0d51d333dfcd5b293ddde61da3bbbbda47e","ssdeep":"1536:IEGBxy7wyLnYmvpdgacZtaiLBug50yslpdHfaKoGS3MUt7jCP/KgpL+HoEf7HhDt:0zy7pnYm/zcZta+UNoGS3gpL+Zwul","tlshash":"8fa302c0688d7e9ade37df31a226826373d3094a637c2d6f26997852c946e0f7637341","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-04-04T12:24:33.065566Z","times_seen":10206,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":37,"dns":4,"connect":0,"send":0,"wait":29,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nanummyeongjo/v31/9Bty3DZF0dXLMZlywRbVRNhxy2pXV2Azr_E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/nanummyeongjo/v31/9Bty3DZF0dXLMZlywRbVRNhxy2pXV2Azr_E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portalkph.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21024\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Feb 2026 10:14:48 GMT\r\nexpires: Fri, 26 Feb 2027 10:14:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 17:08:09 GMT\r\ncontent-type: font/woff2\r\nage: 408093\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21024,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21024, version 1.0","md5":"768d16418ddb0dd0a7746c5a525158dd","sha1":"93a880bf17923dc6b5805a22f492da55e4d89a54","sha256":"84a60324a3b8f916547358b0a0e07e80b5826f2890f0df4b29f744dda135230a","sha512":"8bbb92913bd9dd0f70d3d3498ad6e8be7ac971df1f544971d4446aa2c0f5cab2c498c85c1b02f7865a4a3001736b104f94ca37abb62fc685dd6871a698896740","ssdeep":"384:dfkYEOL74ZTSqeWxkMrkIhfxCLrup7YWnnb2djNKmXhF+QE4UrRspGF7Sgh:CYEOn4ZCWx4+YWnylNKmXh1EBRIah","tlshash":"4592d050fca2c6dedb2694b173291dc38dcef84093df18fa9511d82e41d5e472847a4e","first_seen":"2025-03-26T16:11:22.431808Z","last_seen":"2026-04-02T13:07:05.452737Z","times_seen":155,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":64,"dns":1,"connect":21,"send":0,"wait":9,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/uploads/2025/11/logo-300x300.png","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/logo-300x300.png HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:22 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 27 Nov 2025 11:43:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16126\r\ndate: Tue, 03 Mar 2026 03:36:22 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"212518daaac01a265c1da0e59976595a","sha1":"434d183eea5c4c5f87f4ffc43f1d3698e755e5bb","sha256":"06559ac45d5d64ae0134452de68fd8b932bdf73d5870322090da9802aaec9bc2","sha512":"670c20a81e90dd11c310fa105a8228c005341ee43b995b45f7fc5d5342558cd3994c3aeeac0ea2f3577842213cdc8154192b082147cee3c506f1c2abcf100176","ssdeep":"384:+jnNdcUwywPPoyCUHJonBU0cunKNKoGgUCvxtLTq/NEyuAC6Le:6NxylpoBU0cbKoZUC5tLpyrxe","tlshash":"1372cf11ac788bb52ddcbf3211422f56b39b5bdee0c549e459e1c32b8565a510c80b6b","first_seen":"2026-03-03T03:36:48.619073Z","last_seen":"2026-03-03T03:36:48.619073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":166,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/plugins/clean-login/content/style.css?ver=6.9.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/plugins/clean-login/content/style.css?ver=6.9.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Dec 2024 10:24:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1340\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5663,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7b4bb47ee3380b961224a3c7995fd556","sha1":"337d6ae3d9366cf2e25c7761a786e7d203132060","sha256":"50df409bbd46898b958158cda7808da37b837bbd0819a5ae9cb207ae9591dec2","sha512":"3b2c75e3a99290fa3e7fe1f63f4d9572ffae8b27a0064efeedf38d62ee883325b117f39ff9aadbdd836450f8a1a64296fb2bd1a865e3b4efd59f85144ad2d571","ssdeep":"96:QDenjIdHIyZj+VjjFFGuK/8pvf7NdzMFWHHYiFFyK25yvwZjhTQ:QCnjIdHt5+VjjfrdAFWH4ibyKpvwZjxQ","tlshash":"25c1ff6a28050e40d40be4e45b8ad7541f5db7236a0ecf6efa3c5f5edf853a02212b6c","first_seen":"2025-10-11T23:30:52.058748Z","last_seen":"2026-03-04T04:54:24.171229Z","times_seen":6,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/common/css/plugins/gravityforms.min.css?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/themes/Impreza/common/css/plugins/gravityforms.min.css?ver=8.31.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Dec 2024 17:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1544\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7348,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7348), with no line terminators","md5":"a0b7416c9c0aaae44c5995b2fcaa0d18","sha1":"a9d32ac0eac47b3aee973632545cdf420bfc7e24","sha256":"6ccabb12461b9f9dc769e4d64ce5a78708154c5c3df3ad90934b0e404717a695","sha512":"60019dac60ff3b76e99a9965afe3e1eaee24f3e4d4cba7b6a5729649b21b1597afb3e63d5f9936a164ea622065c7c4b595a63336b0a631605e4423fb5cea953b","ssdeep":"96:jFz2Wr/9jgsn48gyFzrAWEOdT/ifA45FRM8TUOYCvInXUyP7XHWP1l4:XZ6fAWFRM8TUObvInXUyP7XHWPb4","tlshash":"b1e18babf7e1241e94f6467d22db367d2b354060e7012eed9a43b7788380ad31662b18","first_seen":"2023-10-28T23:53:25Z","last_seen":"2026-04-01T16:49:28.356945Z","times_seen":83,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 21:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T12:49:15.258785Z","times_seen":685263,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/themes/Impreza/fonts/fa-regular-400.woff2?ver=8.31.1","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/themes/Impreza/fonts/fa-regular-400.woff2?ver=8.31.1 HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 17 Dec 2024 17:57:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168824\r\ndate: Tue, 03 Mar 2026 03:36:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":168824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 168824, version 331.-31196","md5":"a3d7d331957546ae10ad69bb44b83a04","sha1":"d1a227a182628c48649912e8bcd9251113e9c783","sha256":"3bbb0df89b8dbe8001e8c24de4e2d1693f94997b29f007a7bda22a9802832768","sha512":"614c9697605efd52116765e6f53792304c536aa9953fd9309ba4912476d016be360dad69dacf8d14e5de19f73c8619a37f3a380e3ac84fa0d17058d89246f0e2","ssdeep":"3072:N4geYVqJbc9ydAQpiOlqADfSVjExEGii5BqDW9:zeR4yuQc4agXiCBim","tlshash":"1df312c32fc565663613692df728f3c136464437973e06f5eb662a82196c2284ca93ef","first_seen":"2023-04-07T09:42:03Z","last_seen":"2026-04-04T11:50:15.244775Z","times_seen":8465,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalkph.online/wp-content/uploads/2025/11/logo-kph.svg","fqdn":"portalkph.online","domain":"portalkph.online","tld":"online"},"ip":{"addr":"66.29.141.5","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"portalkph.online","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3D:A6:FC:FA:AD:F8:A2:C6:9E:58:71:37:A4:4D:D6:BA:8A:A5:2A:B1","sha256":"E6:7B:FD:12:8E:C7:8D:A5:80:2D:B2:CF:23:75:29:A1:E5:D2:01:BB:BF:80:BD:E9:A2:5E:46:56:31:5F:7C:8B"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/logo-kph.svg HTTP/1.1\r\nHost: portalkph.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 10 Mar 2026 03:36:21 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 27 Nov 2025 11:43:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5452\r\ndate: Tue, 03 Mar 2026 03:36:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15327,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e0a00ca76299bf59a0e1154e3375b2e","sha1":"1931b9678dfd90d12432863de6e33ece895ae49b","sha256":"fadeb45531e80d089918a00240c5ce5a6fa4f8027a52365644acb3787c4f35e9","sha512":"34ecee1d96e1ad42a371999e4e576eb99a6c72797955c2a3de40918db55771b91a1caa9e5e7f84b998aa63024eca9c30b40efaf0858302e406cae6602d658b6a","ssdeep":"192:hypujRyWbKD1RSK0orninQGSCTM6ucuVa+km1o36ykeIxgyZe9C3JTv:hOWmBLinQ1CruVGnw9x7O0h","tlshash":"13625557533c26fcac970a54897910e23bd0a4dbe264f2dceb779d12a40f9f088649bc","first_seen":"2026-03-03T03:36:48.628118Z","last_seen":"2026-03-03T03:36:48.628118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-03","alert":"Sinkholed","trigger":"portalkph.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css?ver=6.9.1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:20.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.3.0/font/bootstrap-icons.css?ver=6.9.1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://portalkph.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.3.0\r\nx-jsd-version-type: version\r\netag: W/\"edbb-Du3MPQ7GnRobCfGvnAP4Uqb5QVI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 03 Mar 2026 03:36:20 GMT\r\nage: 1455675\r\nx-served-by: cache-fra-etou8220023-FRA, cache-hel1410030-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8017\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60859,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dbf1248779dc682a91ba529b5efe0ffc","sha1":"0eedcc3d0ec69d1a1b09f1af9c03f852a6f94152","sha256":"32cc4a47b370e278072a6440249872e681efa1d992600420c03a9631da885d70","sha512":"2e96320bb785273c91c136a4aba02268e2c9ebcc92998c24160331ec14f0f902132d21f4ac4cb130771dd20758bef407d589b1f8e3175796622edb162a517098","ssdeep":"384:vaqJVm8OAL1M+hQokEYm47U7yH2CYEjOnm4zH7fZ6aXoso1v/:Sqnm8OAL1Mzocm4KyH2CYEjOnm874soh","tlshash":"2c53cebad18f05f59341e4d92743674293a9ba7ce1817c7ad342399ee3c06188ad73ec","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-04-04T12:24:33.070764Z","times_seen":14755,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":21,"dns":1,"connect":13,"send":0,"wait":14,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://portalkph.online/","date":"2026-03-03T03:36:21.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://portalkph.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:50:45 GMT\r\nexpires: Thu, 25 Feb 2027 19:50:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 459936\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-04-04T12:47:51.21019Z","times_seen":7766,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":61,"dns":1,"connect":7,"send":0,"wait":9,"receive":8,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
