{"report_id":"bcf313e8-53fd-4124-9140-d28ce1f38b4f","version":6,"status":"done","tags":[],"date":"2026-04-06T18:00:07Z","url":{"schema":"https","addr":"secret.ringinghub.com","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"title":"Steal A Brainrot","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-11T03:43:54.694744Z","times_seen":1037019,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"secret.ringinghub.com","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-11T18:00:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-05T22:24:03.651898Z","alert_count":0,"request_count":2,"received_data":1024673,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"secret.ringinghub.com","ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2024-07-03","domain_rank":0,"first_seen":"2025-10-29T16:41:26.920329Z","last_seen":"2026-03-05T18:45:08.737578Z","alert_count":20,"request_count":10,"received_data":186243,"sent_data":4714,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Publisher Tag","description":"Google Publisher Tag (GPT) is an ad tagging library for Google Ad Manager which is used to dynamically build ad requests.","website":"https://developers.google.com/publisher-tag/guides/get-started","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["Advertising"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":6334,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":5,"received_data":46291,"sent_data":2723,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"secret.ringinghub.com/sandbox%20eval%20code","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-06-07T07:56:57.266545Z","times_seen":161086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fa84f064eba803ab41675b519710b82","sha1":"91c3f3b0e9e6124f5674681575a313b4e6b23165","sha256":"85717bbda793b6a4c320670d91744eb5bb691d2289af6a56bc58c36fc7f5b0a6","sha512":"5c07badf350090b9029e86a8cee1658ad16a8826581d3de12846f311fc256022b4ac82f1381ff5b5aa1f0a3caf2f1695602df1f0b5f7b0ca231224812a841c27","ssdeep":"","tlshash":"08c02bcd251a0cf186f727008fbfb600f042321ce4e469314c1923049d30e03db44854","size":153,"data":"","first_seen":"2025-04-18T14:53:08.035822Z","last_seen":"2026-04-06T18:00:17.376848Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-06-07T07:56:57.284078Z","times_seen":147384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FV0V42PNVP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a0911a7ccd8b90e4511001954cfe9e51","sha1":"2e701fcc037f2c0b4e725f8b0e8690ed9b798f9e","sha256":"21ce6186581f83d8928aac3bab4e96771bd0b4f5b1314fb8ea8a3a114eb314fe","sha512":"e901a2477da078f37c1c7af8fd03898f4f2ecf88d0f7b017f129956c19510faac6eadaf218202f8e57496df88897c0374c30b91884c78a319d862b9217aff843","ssdeep":"6144:DdOsP1r/F1KkX3t5SZEYGeddUYi8+WacQqXEJ4XK9u4m1vyyEpkf/:5//KkHmzdU98HmI17","tlshash":"fda409ceb3d674625396f478903f018ba57a28e2b44cc8a9f189cce42d7465a4277f7c","size":469686,"data":"","first_seen":"2026-04-06T18:00:10.577135Z","last_seen":"2026-04-06T18:00:10.577135Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"af3556bbc31c2d79e75f1cc0c91f6d5a","sha1":"6aba669b8799dc6889e45a6f60f43cf0921e0907","sha256":"a851ebe451a376ec61a164e648faccadd6893508cc1b0be76f59b42aa14cfd22","sha512":"059c7116318a239c6f66dd91eec4da1e205fd8a0da2c4045d9a4260a95781ab315b31cc2f930f00b4eb0d57209fe6d7dd71570daa2656a80038bfde844b28236","ssdeep":"","tlshash":"b011e932579b00f5b373b7519bdb64ad0e725e4b1348242531fc4b003f8d6cd82e249a","size":909,"data":"","first_seen":"2026-03-05T21:30:40.976279Z","last_seen":"2026-04-06T18:00:17.377861Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e3e0cec45947651b2aa0e70ba1fd1c2","sha1":"334eab04ccd2e8397456ccc28f787514e400fefa","sha256":"6077dc91c6fc3303106d4a6a953fb13d58e68bc0ccf2dc8dd71a681966148b8d","sha512":"d2d869a68800995296387607fc6acfd4e6b56ea3c423b3e2c1a16ab105d22ee942a975d143dadb4bbe7421f264cc3868ee7838af9265f5255720fccfa8797146","ssdeep":"","tlshash":"1ec01249110b4c74e6a766955b2f7585b0066211649088313a4a72048f31a179349554","size":187,"data":"","first_seen":"2026-03-05T21:30:40.977926Z","last_seen":"2026-04-06T18:00:17.3786Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58563b2a7f0a7d8c716d249e28e6f16d","sha1":"901b05efca1666af0a9213489b489b729141c4fe","sha256":"dcc8fabc7a256b7895282e206e63970405747edfe19fbbfc1dbde9806b7e78e8","sha512":"be7750dcb9bb1285be9f7c4305b22240e5a659b266444d4c3606837d00aa0044a9fc4de84dd193d4bf16e870cdd7acd9e1fca8568e8fcbd4da247e707585449f","ssdeep":"","tlshash":"38b01273f20a12f5f821a400013b810504e7110340005001378c0b011f7e608000bcd2","size":103,"data":"","first_seen":"2026-03-05T21:30:40.9798Z","last_seen":"2026-04-06T18:00:17.379878Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7452b6a4b7f0a46f52b4fd2541edb14","sha1":"3acdf1c3ee1c66b1447cf972761194e405636c09","sha256":"57cdae772ba26a83e57ad2bc3431ae59ed41faec7c6399c4702d0e19c40a0c56","sha512":"9eb83de9e61afb323aa8462ffe9368c0dab3bc78c731f80dc59c3f05bb5ae345bfbf0c9617026cb8dd6584590f329cc271e8bfe67329ce97fb5e2c5175e022e2","ssdeep":"","tlshash":"c7b01273f51d11f5f425a4001036810604f3110310006441169c06012b7e6080106891","size":92,"data":"","first_seen":"2026-03-05T21:30:40.981749Z","last_seen":"2026-04-06T18:00:17.381568Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e92601ece73e94875aef601d4468426","sha1":"6f4224f03c60bfdaf032d2a51b40fdd192316268","sha256":"ddc873c79a2329b916ca47b1117d71c74f8fb4be39ca86d204ecf25c761dc3bf","sha512":"093c3210c5ef58ef7df74a64d87180f4ab0ddc6b0436543875866f15314ec7691e7dbd3bb411a58bfc12a8b24f5206ca51fe0dd3e85b444710a6463b98700109","ssdeep":"192:8uBOsDi12Iyje4HLVuvzdgvkUZCy7+8IFJNDKg4tl:OUzZsrdgNCw+8ezCj","tlshash":"0df1c6b3b47b5835066b50fba3c3b6857a2150077a40ca467ebc53558fd9e41acb23ce","size":7744,"data":"","first_seen":"2026-03-05T21:30:40.983615Z","last_seen":"2026-04-06T18:00:17.386726Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3058351bd64659b5c9e28ff6f61ebe9","sha1":"3641a5d4ae9f7e3c53b97562ce6b55482338a6f5","sha256":"fbfa62a2100b7252402b66b6c01839c952509f570dd1a94867465e1cbfb3b1ac","sha512":"01fad5664e030b05cbff7379a101ada6cd0b6318f096334b8e629319dc7e5420c9dbadffaa7b8853a73f29db9a150471c9aa89f794fb0e1937d1693ac289f85c","ssdeep":"","tlshash":"6fd02e0913f9883602bf018344d763caa23200020cc3c98f38e8e8090f38ad29bf06ed","size":265,"data":"","first_seen":"2026-03-05T21:30:40.985791Z","last_seen":"2026-04-06T18:00:17.388168Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-08-11T03:47:33.356683Z","times_seen":191229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7XP2RD1NM3\u0026cx=c\u0026gtm=4e6420h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"230c7f8209a690895fcbc49f8e566e46","sha1":"878b3211dd0245902d6da6773f394d2f10c51565","sha256":"9d99fe9502491d8a081effebd54f05a2305a3695bf1e5e346baca5b95bf8b302","sha512":"93607642512424b30a14cb507416d64b1091929b578477ee8fc32d08b8b63f03e23801faa6583105c8790ba3f07c8ed32a2a5d16b88b13bf3062cd9fbec927c4","ssdeep":"6144:x7OsP1r/F1KkX3t5SZEYGeOkdWYi8+WzcQqXEJ4XKfu4m1vRzE52mw:t//KkHmbdW98IeI1Z","tlshash":"b3c409ceb3d67422529af478943f01cfa97b24e2b49cc8aab1d9cce01d3454a5167f78","size":553797,"data":"","first_seen":"2026-04-06T18:00:10.574837Z","last_seen":"2026-04-06T18:00:10.574837Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret.ringinghub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:00:41 GMT\r\nexpires: Sun, 04 Apr 2027 02:00:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 230345\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-11T03:54:00.237208Z","times_seen":291055,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":94,"dns":1,"connect":20,"send":0,"wait":8,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7XP2RD1NM3\u0026cx=c\u0026gtm=4e6420h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtag/js?id=G-7XP2RD1NM3\u0026cx=c\u0026gtm=4e6420h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nexpires: Mon, 06 Apr 2026 17:59:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 178194\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":553797,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8819)","md5":"230c7f8209a690895fcbc49f8e566e46","sha1":"878b3211dd0245902d6da6773f394d2f10c51565","sha256":"9d99fe9502491d8a081effebd54f05a2305a3695bf1e5e346baca5b95bf8b302","sha512":"93607642512424b30a14cb507416d64b1091929b578477ee8fc32d08b8b63f03e23801faa6583105c8790ba3f07c8ed32a2a5d16b88b13bf3062cd9fbec927c4","ssdeep":"6144:x7OsP1r/F1KkX3t5SZEYGeOkdWYi8+WzcQqXEJ4XKfu4m1vRzE52mw:t//KkHmbdW98IeI1Z","tlshash":"b3c409ceb3d67422529af478943f01cfa97b24e2b49cc8aab1d9cce01d3454a5167f78","first_seen":"2026-04-06T18:00:10.574837Z","last_seen":"2026-04-06T18:00:10.574837Z","times_seen":1,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret.ringinghub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Apr 2026 18:54:17 GMT\r\nexpires: Sat, 03 Apr 2027 18:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 255929\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-11T03:54:00.259042Z","times_seen":275166,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":176,"dns":1,"connect":8,"send":0,"wait":11,"receive":1,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FV0V42PNVP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:45.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"GET /gtag/js?id=G-FV0V42PNVP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nexpires: Mon, 06 Apr 2026 17:59:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 155949\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":469686,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"a0911a7ccd8b90e4511001954cfe9e51","sha1":"2e701fcc037f2c0b4e725f8b0e8690ed9b798f9e","sha256":"21ce6186581f83d8928aac3bab4e96771bd0b4f5b1314fb8ea8a3a114eb314fe","sha512":"e901a2477da078f37c1c7af8fd03898f4f2ecf88d0f7b017f129956c19510faac6eadaf218202f8e57496df88897c0374c30b91884c78a319d862b9217aff843","ssdeep":"6144:DdOsP1r/F1KkX3t5SZEYGeddUYi8+WacQqXEJ4XK9u4m1vyyEpkf/:5//KkHmzdU98HmI17","tlshash":"fda409ceb3d674625396f478903f018ba57a28e2b44cc8a9f189cce42d7465a4277f7c","first_seen":"2026-04-06T18:00:10.577135Z","last_seen":"2026-04-06T18:00:10.577135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":94,"dns":0,"connect":21,"send":0,"wait":49,"receive":65,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/platform1.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:45.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/platform1.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T03:55:58.852761Z","times_seen":148815,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/Headlesshorseman.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/Headlesshorseman.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 13 Apr 2026 17:59:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 07 Nov 2025 08:04:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47712\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":47712,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"388b968a2dbf71b585fa551a67d4d18f","sha1":"ea0aebc9522e689fa66786bab35cc9a92098b6ac","sha256":"83f895dd4e323bc98fb623dc37961f18981d8cebbbbf37f90691fe9fa39e1012","sha512":"a0ae0a184db90df7183a005d0e2aae37cdd534fdd043f98185946b0bf2f5c91e3f328fa68a60557d33d10adfe409f8859b1cf19b6c1e9fe565771b4954bb6d3b","ssdeep":"768:PRSqFVKXuKVVRiFSarZlDt7fATWCZCaP18ux/fqMiokQhF3XEmYIu+FeLgKPJhJZ:PRFS3VQSIdcyiCa9M2F3XEnIlAL1FHOi","tlshash":"d223f1e7063179afa16ca6bdfd940c0b1395ec9b65949b413cacb8082ba9328379650d","first_seen":"2026-03-05T21:30:40.949533Z","last_seen":"2026-06-28T07:46:11.108956Z","times_seen":5,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/dragon.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/dragon.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 13 Apr 2026 17:59:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 07 Nov 2025 01:38:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8224\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1edfd51f765a17325ee24ab71f00217a","sha1":"8e78b6080dbd87aefae9b8a0a52389189c9456f0","sha256":"1d1ebc1a7ce4a566c7c549be669e6108f509e870b2d42f19458230ebf3bc7234","sha512":"5b4f5c2a5c619b793f0d644923be81e9f25722d3b76b6bb95cb1de85e9f5e52714506d79a584dc0cbf0c6faecbe16c7f7df01f11ebe945e675c975dc86274c10","ssdeep":"192:0x9PM9UHhh40qTJZoOG0k+0QG+V9e5rCPBY1oTLAYNf:0TPXhqTL8+XGuGCPC1A","tlshash":"dd02af57a421cb60cc7c5c3c0469cb8aed97d1b42d5a3fed62c64ce2285a912cfad864","first_seen":"2025-10-30T02:42:32.238216Z","last_seen":"2026-04-06T18:00:17.372473Z","times_seen":6,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lilitaone/v17/i7dPIFZ9Zz-WBtRtedDbYEF8RQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/lilitaone/v17/i7dPIFZ9Zz-WBtRtedDbYEF8RQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret.ringinghub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10672\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 00:59:05 GMT\r\nexpires: Sun, 04 Apr 2027 00:59:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 234041\r\nlast-modified: Tue, 09 Sep 2025 17:08:13 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10672, version 1.0","md5":"9a95c766f3e10049fcb4e726719e531d","sha1":"3b71f6c24c7e1301971abb9a80a74b118188fda4","sha256":"d2575d4fa3632580aafcbcdf6978b3b57e144b90cf5bd9c2c98194f28b869704","sha512":"ba654fa2765cf9877139ca0cdd7de4124b970109cacba2dc6e91cca2adf6fda9d93e80342264a2e6d97f7cda20e17acf88784586ddf9eae84e695721ddcef6e0","ssdeep":"192:gAYkEaKmmdv+uBQGC7JlO/0U9xcdDrnBpyIUi57SK73GEXpFnhIzXEDsikkfjTOU:gc5Wv5BfC7Js0UvS3BpyJi023GEXnnhL","tlshash":"6a22c084f2754c74331abf776002df777a7a43016e278e83b68499c13a016bca48b79c","first_seen":"2023-05-09T15:00:14Z","last_seen":"2026-08-08T23:54:27.448155Z","times_seen":607,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":83,"dns":0,"connect":10,"send":0,"wait":9,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret.ringinghub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 02:12:26 GMT\r\nexpires: Sun, 04 Apr 2027 02:12:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 229640\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-11T03:54:00.231702Z","times_seen":295990,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":84,"dns":0,"connect":21,"send":0,"wait":9,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/noFilter.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:45.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/noFilter.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 13 Apr 2026 17:59:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 07 Nov 2025 07:37:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70968\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":70968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 768x432, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"68d05a56050e7c8bf1e1f44a573f59db","sha1":"8a0b84eea744598f3666fddefd4fad96237e2662","sha256":"cdaddbb5b17beac2ee50de423052d7c475e23fe5169e10f5471cb95bb508d814","sha512":"0be88688f647af8ff413f6f1de5003fb83c8b52ef4d1a4f811ddfb147daa68dfecc921319b82166223e47c0a0c5393191f9fa2ccb3bce62e3c160b66bf8fd9a1","ssdeep":"1536:zxRVgW1dW8Uq12RatHxOugzq4DknSR1ggIkBr+M3mO221F6zcc7OhJJS7FT1jO:nSW52ahCwSRigIgrEeKOiy","tlshash":"766302bec56c481096fb933aa47140717693c6cda8f57d38c9ac3c7cf9546a8e6ac094","first_seen":"2025-10-18T20:29:31.524423Z","last_seen":"2026-08-08T02:44:45.143249Z","times_seen":91,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/platform2.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:45.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/platform2.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T03:55:58.852761Z","times_seen":148815,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/platform3.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:45.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/platform3.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-11T03:55:58.852761Z","times_seen":148815,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/favicon.ico","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nCookie: _ga_FV0V42PNVP=GS2.1.s1775498386$o1$g0$t1775498386$j60$l0$h0; _ga=GA1.1.1108032783.1775498386\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 13 Apr 2026 17:59:46 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 10 Sep 2021 19:34:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 525\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"68208984e7e1dd87ab5f7c7d587c7a9b","sha1":"e1257a0d3863d707eb3dda6953068a1ab257585a","sha256":"1cb7faf06f9d66b671a030ad6a5927119bddfc43fa473b9b9dae463f8175da43","sha512":"6d88db780d7f68ac2d0f5828c001f0aec778e990ef95cbc007320b7ecc5cee76c3db4e74813eb8ed3dd85ab98b130f01ec916229b0050166cc222ae9ee2f707c","ssdeep":"","tlshash":"b3f075d3b6c0f6a1d4634113fce2c110559391780902c0a58451fee58bf87da40f0431","first_seen":"2023-06-19T00:28:49Z","last_seen":"2026-07-30T14:11:42.781319Z","times_seen":170,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/meowl.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/meowl.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 13 Apr 2026 17:59:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 07 Nov 2025 01:38:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21108\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ef09eff63eba8c1a92a6e4a1b1f23e1","sha1":"c10a592da0d0b171ac6affbb24ee8429fa68c3ef","sha256":"b88bcb7932cfaf1ae7cb2d19dccc27087411fe28c1f690cb156e937e8f2763c5","sha512":"b1a1f00b82ac909b87acdb820ce0e6537979c6a5a413d3e6afec3035f332372dbe4e8f38edb7ec8e92707e74358b8ca309fe8745a09f782120cd451233d513f6","ssdeep":"384:6Ervo9MpfaTuLUWmDOuuVuYvAy0f4GU+PMgJTwqUnB1peH9NvpLWveh:1oC9JlZuuI0RN+PcqSB1pe5ieh","tlshash":"3592d1417797d7844274d86662e8f03f5cbf543b6a15041d8642efe9f2f5f64012a608","first_seen":"2025-12-20T17:43:47.293145Z","last_seen":"2026-08-08T02:44:45.146412Z","times_seen":7,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/images/strawberry.webp","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET /images/strawberry.webp HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 13 Apr 2026 17:59:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 07 Nov 2025 01:38:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8222\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8222,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e40cbc21cced76b053895a3dc5812b","sha1":"0729fa49d7e548a6fe13754af7864d086d27f612","sha256":"d3e653f4b410fc1382d68481ec94d1cb82ea204465019307b5f6d9ef02cc4327","sha512":"8d6fc57acc96692e8c8d1ceb8737eb654fad8ba0120556089ad7bc624820e318e13ad105b8e6b1c677e58a35bcc1c083c222dcb977d7dc24f433e8a0a92368ce","ssdeep":"192:1Y4bVmb1KTPEnM+RwpeuFdJm4VfaSfbQzdjJHS:3bVm5Pwwq84odHS","tlshash":"e402bf7dc18231a0e99f0c3da2563ff4404e9c017a36bbb8e625127fdc01b9a18f12c6","first_seen":"2025-10-30T02:42:32.237249Z","last_seen":"2026-04-06T18:00:17.371933Z","times_seen":8,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:46.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:40 GMT","end":"Mon, 08 Jun 2026 08:38:39 GMT"},"fingerprint":{"sha1":"93:71:51:4C:A3:35:66:7B:96:98:73:5F:8A:D5:61:38:29:33:E3:58","sha256":"A7:C2:55:50:7A:01:61:98:C7:16:8F:8D:72:97:DD:77:B2:9D:D8:18:29:80:41:DE:61:95:42:E5:0F:79:FE:EF"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://secret.ringinghub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Apr 2026 22:14:21 GMT\r\nexpires: Sun, 04 Apr 2027 22:14:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 157525\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-11T03:46:43.885524Z","times_seen":390257,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":96,"dns":1,"connect":7,"send":0,"wait":8,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secret.ringinghub.com/","fqdn":"secret.ringinghub.com","domain":"ringinghub.com","tld":"com"},"ip":{"addr":"69.57.162.105","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-06T17:59:45.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"secret.ringinghub.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 13 Oct 2025 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"17:09:DF:C0:30:38:61:62:24:89:B6:B5:A3:50:C6:91:71:57:C5:B1","sha256":"CB:A3:D4:4F:7A:24:DC:95:EB:45:5C:0E:91:0E:0B:C6:76:53:38:3C:5C:91:78:5E:04:CA:69:B8:59:62:4F:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: secret.ringinghub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 11 Nov 2025 02:43:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6874\r\ndate: Mon, 06 Apr 2026 17:59:45 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Google Publisher Tag","description":"Google Publisher Tag (GPT) is an ad tagging library for Google Ad Manager which is used to dynamically build ad requests.","website":"https://developers.google.com/publisher-tag/guides/get-started","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["Advertising"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22725,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"95475bb0313b09980cff02c39c01f27e","sha1":"158c582310fb1ed700fec91ce850add9e8ccd1ae","sha256":"9f2502573ad7266d720dec813d99f4296b7484403f0016995ea73864202a40c5","sha512":"d50469533e5f8431cbbccb3925e7f3a1b16d22e611ecb65449a95b83386e59e311a964c7738095534d248b16591d760413e42a8d95e883303afaadfd824f2e44","ssdeep":"384:1dTEsKwGn58e8UXOS4fba1T6Q+4OhDlLcCUzZsrdgNCw+8ezC9:nHauWe3fb4CHGCoUz4","tlshash":"00a21872a5ba243aa56390d277e3768e3631d007de06c5587afc52944fd7ec288b338d","first_seen":"2026-03-05T21:30:40.939713Z","last_seen":"2026-04-06T18:00:17.369101Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1342,"timings":{"blocked":584,"dns":22,"connect":168,"send":0,"wait":171,"receive":0,"ssl":393},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-06","alert":"Sinkholed","trigger":"secret.ringinghub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Lilita+One\u0026family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://secret.ringinghub.com/","date":"2026-04-06T17:59:45.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Lilita+One\u0026family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secret.ringinghub.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 06 Apr 2026 17:59:46 GMT\r\ndate: Mon, 06 Apr 2026 17:59:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5648,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dc66563aa6a55c98b06b85617e0df4d9","sha1":"dc278dcb4d0d9c980a370edce3541f3b27c00221","sha256":"5845ba595fc094f868090a2f048ea3f35baac1f7f125a0d9d58ddcf4c64d779b","sha512":"1f84842d6ecbea7f6f0c6dea1eccd9761d6a15959b5cdc8658247e3798096743c02e5b9ccd4b85ba7187a8497760eb1f38f39c0ade10266ab0dca68dbd8f46d1","ssdeep":"96:j0OEaYJc+uv0OEaslN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacO7:fc+sAgKQcXr3lVwa3RzJZ","tlshash":"13c1add1087be5149b831cc122cf7d36ee1ea2547810e5786bfe0c98adabc655362b2d","first_seen":"2026-02-12T21:25:35.226063Z","last_seen":"2026-08-02T01:13:18.955377Z","times_seen":12,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":95,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}