{"report_id":"c995526f-6f31-4bfb-8b85-14ef9fe3aca5","version":6,"status":"done","tags":[],"date":"2025-09-23T14:57:24Z","url":{"schema":"http","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"172.67.132.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"title":"งานคอล - หนังโป๊ หนังXXX หนังเอ็ก หี หนังเย็ด- ล่าท้าหี4.com"},"submit":{"url":{"schema":"http","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"172.67.132.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T14:57:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":3,"received_data":1098455,"sent_data":1353,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"image.cdend.com","ip":{"addr":"104.26.1.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-05","domain_rank":619541,"first_seen":"2024-03-11T08:26:01Z","last_seen":"2025-09-22T08:45:20.149528Z","alert_count":0,"request_count":3,"received_data":197920,"sent_data":1442,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"publisher.adsok.co","ip":{"addr":"104.26.2.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-27","domain_rank":516599,"first_seen":"2024-12-01T13:49:14.161867Z","last_seen":"2025-09-22T02:23:20.703668Z","alert_count":0,"request_count":1,"received_data":5953,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xn--4-2xf5bza7abw1ml.com","ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-27","domain_rank":0,"first_seen":"2025-09-11T03:26:05.993255Z","last_seen":"2025-09-22T08:45:20.820148Z","alert_count":41,"request_count":41,"received_data":2184280,"sent_data":25416,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","size":4500,"data":"","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-05-15T13:01:41.832755Z","times_seen":3700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3285a84ef7556792dd179b2f337a3cd","sha1":"93860e73b90f82c2f4c8fec32b62c080deb279d6","sha256":"2a0af3146efecd63acfb29193863159d7d660bfd7a0fe08e36919107c85d3ba1","sha512":"0f37f64ffe4d63c10fa1f57ac56d1620799b6a63ad94ab63597d00cc996ac137c93cf1924613fa8b0fbf59b5d40ac611acec7ec8b9e7f901532237acf8b01c2c","ssdeep":"","tlshash":"df61a8da3775348b32b604d16a3f4e07fb7258261a88d035cab9e7141cb14a3d37ae4a","size":3421,"data":"","first_seen":"2025-09-22T08:45:34.927Z","last_seen":"2025-09-23T14:57:32.051448Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.037086Z","times_seen":876844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","size":683,"data":"","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-05-15T13:01:41.840319Z","times_seen":11538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"publisher.adsok.co/advertisement.js","fqdn":"publisher.adsok.co","domain":"adsok.co","tld":"co"},"ip":{"addr":"104.26.2.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3274e89abaf73fdf5c7f64432a7dd5f6","sha1":"415db912a339eaf7aa9542d684b97024f09ffaee","sha256":"9f696a174831dbbf144d4de0892f7c798448d9549eb4065ae7a663da6355cca3","sha512":"b553d90a91220ae24268af3eab574f27267e22539f6f7a6744f38c59d5793164e3bd02a8bb77f3e756616edd39f6007aacaab6c9f8b8041b393a363c50ca2d60","ssdeep":"96:COFcx7w/84qd0InnZ9UD+gn3OVXAWFShDlQM6ne:COORh/nZ9Y+gn3oX1FShhQM6ne","tlshash":"8fa15426a7a250b5424ee06c796ba24a3353d01b6dd69c4dbefc15096fce82c64f26cc","size":4836,"data":"","first_seen":"2025-09-22T05:45:52.671053Z","last_seen":"2026-05-10T04:44:48.477555Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-15T15:20:49.118452Z","times_seen":767752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","size":20430,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-05-15T13:01:41.787113Z","times_seen":4872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8NYE76B8C3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a154defc3677d82a961bd6a81f767c","sha1":"219192d0f235cc75e893c5cae12c3678c8f43c8c","sha256":"872f58ada8dabf233a0a1a25ac316697863066d0d90fff3fbcc4b540bd968237","sha512":"723a179d6f43fe6dd2ed422557fde6817271843add171a74d43997ce141ad95c110215975308d5f455e631c5a30b3e5e7a9bfe36d4faa7e8f63c02cbc4cfd268","ssdeep":"6144:9tuQwWUcGiaJ2EslQLufAXyxUKJJGKJFj9:9s5EFaJ8QBKX","tlshash":"e1840acd73c674664396b478903f018ba5bb2892f44cc899f189dce42e74a9a4277f7c","size":395685,"data":"","first_seen":"2025-09-23T14:57:32.015717Z","last_seen":"2025-09-23T14:57:32.015717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","size":5755,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-05-15T13:01:41.792717Z","times_seen":3744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-15T15:20:45.590605Z","times_seen":830394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c684f413c410ada2e6b7e01fd2dee74c","sha1":"ee9924ac7c6b6fa9c941bbe888d8d918fff2e7a4","sha256":"892bcd81f6d98c654adc31a6cf38b1b737e4f93bed00b3577b3814efdf4a3e9b","sha512":"0fa8a4bc684e6570989f795d825aa4f9dff8eadd3bfb93e857cd6a8c7954b5aa7c0a2d82924bcd1c55f9600be22817466e04636f215d28ca501dc36878e12c38","ssdeep":"","tlshash":"efc02bcc210f0c7045f72700cf3fb604b202326498e06932480923444d30f07d794c94","size":153,"data":"","first_seen":"2025-07-12T15:14:53.661407Z","last_seen":"2025-11-01T21:23:20.181657Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1735835767","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"783fecdc0e20f9cbdee6b57839de44e4","sha1":"0d9062e511793c4ac674742de2de74dd13a85dc9","sha256":"45c5b2ddd2dd6bae51444e5c06a67a069b87457c72e3876bbaefa17dbaf9315f","sha512":"a7d0a8702df2b6d6074ee47e746ad8d46fb851ccecfb9f8925a2d7cebd2073d51591ac4722c3d09184cca52e9ae241820330e3d7db05bd2c9b1d49ed3ce06981","ssdeep":"768:lqZvNO9ADc60/sjbrtXxCiVR3xCoP9nnI33mnDSb4B34BI3fs9a:lqPO9V6pZXc8R5nbGQGa","tlshash":"01037385fb7c254a827a30ee6c6f12cc353d5132a442046fbd39a6e458a0b3d73a7d79","size":39275,"data":"","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-05-15T05:42:32.710643Z","times_seen":2035,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B5RPZJ31PY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0604f846d3108a0138c5f078fbec7058","sha1":"bcaa6a555e49d39f8ec9c8742633421f5d658520","sha256":"a443053928b6aa83f765f19ed1954ddb42ea5a82aac42a2d79bd8d12f0e40f2c","sha512":"865edd0cd05b8359775b2846b21a21251f4a67df3287841279fe917020ebdd9e871d56a160589f46380f90cd5abd7b3503054f321b4d96d70903ea9bea0b093d","ssdeep":"6144:PBawEqNrxY1D2im0DgfI2QNTs7eAT/PK1f2Q:5F//YN2ixgMAw","tlshash":"39940bce73d674665396f078903f018ba5bb28a2b45cc895f189cce42e74a9a4137f7c","size":418221,"data":"","first_seen":"2025-09-23T14:57:32.042621Z","last_seen":"2025-09-23T14:57:32.042621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/sandbox%20eval%20code","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-15T15:20:14.035685Z","times_seen":878509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b7b66bdd61a758f4740350b8fe7c1c2","sha1":"86191649a0ca302d1d7644e42d1218b5a45ca81a","sha256":"95038acf679c8ba52e9a442633b68316149c0be1360f9faa1bbd3500d629ed15","sha512":"2fe4bef173c6afb8c350b97962f568dfdedc308e1c11e17353f1c9b2444d0b9a1726fb2c12013cacffc16ad59eb4de2dd0d313da1a43bed72c6e3e13326c64a6","ssdeep":"","tlshash":"73c08c88210a1cb081a626008b2fa600b002322498946a31490a63048d30e07d758810","size":153,"data":"","first_seen":"2025-09-22T08:45:34.931077Z","last_seen":"2025-11-01T21:23:20.183769Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","size":24252,"data":"","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-05-15T13:01:41.850512Z","times_seen":3980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"becc3cb9b996248f662f6ac0b7f75aa4","sha1":"4b60dc2261fae997d286f30f2b1bdef4155fdc10","sha256":"1a6bc06f2e9e6d3df8f3fb0ecd362c0e7735c8ab8c2c57097751b036e436d0b2","sha512":"97eac64d03f6217fa6593592865bd834dbd58cdb1a38693d4d3aa6341c9ac7df853c78700600bdac633b2c4af0a55b998b35f808cfe2035adfdfcaf83e34920d","ssdeep":"","tlshash":"27e07d606b56afe331e1b6c0a02c4ea3b9b9a1119458cd7723cdc8984d91e02f7ed41f","size":337,"data":"","first_seen":"2025-09-23T14:57:32.067206Z","last_seen":"2025-09-23T14:57:32.067206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-05-15T15:18:14.353229Z","times_seen":204536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-232789402-1\u0026cx=c\u0026gtm=4e59j1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7aef1b2d3ed333fdc47bc27d4542c0ef","sha1":"e68c4aba87962e474889f0bfe9d2b1f1eaa1698e","sha256":"87fa455ae046c4622e96cbccc2268dcad62c474f9e642f5efe4e2b0ae91609df","sha512":"51e148d12451070ad365e6031dc796e2545a3b57d41bd3741b965a2b4d422f0c6ff9754937746a5c53483453ebb652f764e8d27e4c6108d9a78d280342d96577","ssdeep":"3072:LXIJ//6sqQZB40nhisGiJM5kEJIDZTY3sFUNx8eufAXyx6vFE9uWUYfbyv/7:EuQZBJGiaJ2EsEufAXyxUEAJyy7","tlshash":"1654f8ccb7d6b42243a36478503f014bf17b7992e84cd894e186d9e82e74aa94277f7c","size":282711,"data":"","first_seen":"2025-09-23T14:57:31.825131Z","last_seen":"2025-09-23T14:57:31.825131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2023/10/%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%81%E0%B8%A5%E0%B8%B8%E0%B9%88%E0%B8%A1%E0%B8%A5%E0%B8%B1%E0%B8%9AVK-%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/10/%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%81%E0%B8%A5%E0%B8%B8%E0%B9%88%E0%B8%A1%E0%B8%A5%E0%B8%B1%E0%B8%9AVK-%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\netag: \"498e-6528d025-432e5cd6;;;\"\r\nlast-modified: Fri, 13 Oct 2023 05:05:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18830\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ec7mBUUEU2eHFYCGiMlGeihdILoaRHZ8%2BTPefELDTjqMxJmJNQDecEF3OIQkgLV%2FHJsB%2Fjr16moj921RDb3C20sssihm%2FDTMcAcABxlLNHRXAu06N%2BE%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fbe3756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"b0f530c27b18f0995bbcf5cad04b6682","sha1":"261271744ad3811030fd6cf6ae16ecaaa4696cca","sha256":"fc20cdbe0f1f261b1ae9c6c9a1b7cc6942a1933b26bfd31fcd4785da49a69ca4","sha512":"ab87803f0727301c68e0097784cbcca4d97e612715daf7c10b61de831866e1be3fee058d39b0455ee264dfe9817c1a9aa153810cfbd6fed46836f981890a93ce","ssdeep":"384:RrYho2xbeIDY15PA7qj33UGEO+BNQ54VPDhPVG1HYwRoslUrgO8:9J2xzDYf8qoO+BLD4RRoq1","tlshash":"1882df0e8e6b07e2ee0cdcf45fb4514fe2286762c7459cf0d8b6412552ad6f2b1bc02a","first_seen":"2025-09-23T14:57:31.815491Z","last_seen":"2025-09-23T14:57:31.815491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-232789402-1\u0026cx=c\u0026gtm=4e59j1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=UA-232789402-1\u0026cx=c\u0026gtm=4e59j1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nexpires: Tue, 23 Sep 2025 14:57:01 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 23 Sep 2025 12:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 100744\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":282711,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2886)","md5":"7aef1b2d3ed333fdc47bc27d4542c0ef","sha1":"e68c4aba87962e474889f0bfe9d2b1f1eaa1698e","sha256":"87fa455ae046c4622e96cbccc2268dcad62c474f9e642f5efe4e2b0ae91609df","sha512":"51e148d12451070ad365e6031dc796e2545a3b57d41bd3741b965a2b4d422f0c6ff9754937746a5c53483453ebb652f764e8d27e4c6108d9a78d280342d96577","ssdeep":"3072:LXIJ//6sqQZB40nhisGiJM5kEJIDZTY3sFUNx8eufAXyx6vFE9uWUYfbyv/7:EuQZBJGiaJ2EsEufAXyxUEAJyy7","tlshash":"1654f8ccb7d6b42243a36478503f014bf17b7992e84cd894e186d9e82e74aa94277f7c","first_seen":"2025-09-23T14:57:31.825131Z","last_seen":"2025-09-23T14:57:31.825131Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Sep 2025 08:34:15 GMT\r\netag: \"7918-6776c077-44e3ac3f;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 6646\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8uwAOZOwcLAyKZ9s1v%2BhfZqxF%2BU%2FxfZh%2BwVsQcnIVtD02E1wd%2F3TI9XFmeEdHy23U1dXANxrVEE%2FDREZNRvqMYae5vYE%2BPk%2Fp65qrdlRluaqysJUdw%3D\"}]}\r\ncf-ray: 983ae45cadfc56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-05-15T15:20:19.247676Z","times_seen":271197,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A15.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A15.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Sep 2025 22:54:38 GMT\r\netag: \"adf0-6752b0f0-5e6326;;;\"\r\nlast-modified: Fri, 06 Dec 2024 08:08:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 44528\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 418823\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPXZP%2Bl6%2BAKM2mupovVw46rDvftoQmLbHGDo7OjKjlPilSUPTuuAjzVKvf%2FgbX9KIXieSyeeQTYgDBHfFFalH%2FA9ewfj7EBhBRUrL96nQD0rRc69FkY%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":44528,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2024:12:06 15:06:16], progressive, precision 8, 135x181, components 3","md5":"d9b75983596c811574eeabe27f7ce807","sha1":"428a45a6f59c65a0c78ba36280e96c7873421e07","sha256":"2d859351e395d1135ef0adf60ad997ccbe5eba4e17d734b2beeb66980d58e42d","sha512":"04831c9a73da15baf86737f6e938cf32179432ada20c7f680051ed9f1a87c9c5b28b807b17b65bb91509e67cccb9177937ab23255eb343b1f198cc62d9716927","ssdeep":"768:eX+JtKJP75X+JtKJoQHETgis7TCvjjtgeT5:2++J9++J5kORa","tlshash":"9813bf07a6019d22e8c8253945fee1b157b34ce06653168abedc7d837f313c6cd9ea91","first_seen":"2025-07-12T15:14:53.63844Z","last_seen":"2025-11-01T21:23:20.061048Z","times_seen":7,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A14.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A14.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 05 Sep 2025 08:23:45 GMT\r\netag: \"a3f7-6752b0ef-5e60d2;;;\"\r\nlast-modified: Fri, 06 Dec 2024 08:08:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41975\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 324665\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dsxmr4fMCFfjBCTq4zae%2FynFaKoa8HlwoJX0PE8vgxY%2BGlToYKFyUknBdWD4n0bbVir5VRX7HjfIfjixbgfEV5Ro0IuNma9%2FtQcRSvMIGkWKBgcY6sM%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":41975,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2024:12:06 15:04:14], progressive, precision 8, 135x181, components 3","md5":"98cc3a9d7d7d82b401803ca55df7d3de","sha1":"5cb87b7f2957845e0bd500201f362ef48f134036","sha256":"dd73bff9b189a0d6240114e51f72c170953f8fd293b60ac8e2ee8a9754cb1425","sha512":"e6c2bad8bcfbf8dbfc94ec1f64e3011e14af467f1ede7c94bfc7f3b15c6c59df148aa7e09dbd1c82f1a94f80a683388c1bfd4f10495138b26d3ffea2145cee35","ssdeep":"768:HE2N0237l7EE2N0237Oiuox0/7t6aYmFAZzxtR:HEEP3mEEP3Fu20/ZxFAZ3R","tlshash":"4a13be21ba819d72fcd5317d9aead3b683e34e804a5301563dccbe437f21b248d6a253","first_seen":"2025-07-12T15:14:53.640184Z","last_seen":"2025-11-01T21:23:20.0654Z","times_seen":7,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a1.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a1.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 05 Sep 2025 08:23:45 GMT\r\netag: \"686e-6753edb5-5e6263;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:39:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26734\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 324663\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SRkH00YaX8C0yNjkvhLDBXURWYVw8%2Bfk1LSOo27zUXHTcuviHk4Sgps70h1A1j9YzPwKnibSyroWLrtHr9NyDMj34U%2F9N5h3MyEUkfQBzeUTKxQzhmQ%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cce0956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=53, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=172], progressive, precision 8, 172x53, components 3","md5":"27e8ace83ec12ff8ad286dbeab37670f","sha1":"e57a30c0fc9255d6e94fc7ccf5713f4a08a8ca76","sha256":"d9f3a8279a32e2ced72442bf5470c8960299b146e448705f0737546a7b62f5b4","sha512":"ca2a684be21eab43e21b760afa05f1f347c38fbbc98c2ced8f4a2e9c86a886ad37d6dc82b44f70b346aac7f8604c1520b2d63b8070909db54545e4de0286c46a","ssdeep":"384:Rl2ED2QrG7i8l2ED2Qrz2e/TjnYl0QAW1fyj3mOW9pWvIpvei:R7DI7T7DHP3jVHv6","tlshash":"6ac25d166340ac12eac86179a8acd27597330ec49d9317977ddcae473f31ad18c4f287","first_seen":"2025-07-12T15:14:53.616127Z","last_seen":"2025-11-01T21:23:20.156676Z","times_seen":7,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/navigation.js?ver=1.0.0 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1194-6776c077-20881aa1;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1394\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndfd03ahpIjOk6n33zZ5x2Wg5M8dVuMIwfwcez1K78dGNHdel6fznu2RQYP2ZG4bD63%2F2EGiKxTCqzpyxILXNuKJLwQdc32aJgtUvhoFGD8d%2F4PVPZU%3D\"}]}\r\ncf-ray: 983ae45cce1056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4500,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"eca10535dd65f4979e3b3ad3ec8e02c2","sha1":"54c38c3bf24825e407741ef0e316f678a5b580db","sha256":"802bc6725fd37d15aa9d599fa3f921fca0d4c585162c7b23da8ccd6f3ded751d","sha512":"680521331d53bb6b47390979cbb907f78607dc713d99405ea8664d401b8e9e3106bca7111c1142d8abb4a5d71a7957998ada61407432f084648bba32ed8e1d27","ssdeep":"96:wqduIPMiXjA1L1AWeyQqECAvBvRgY31rr/qBvHsMTFsPFxLdY0fdKI:wktP/W1Henqxy1R31/iRHsIFiFPBkI","tlshash":"7c91318aff88217b71b7326a697f61ed373844339a085c22f874d1a03d9446406bafdd","first_seen":"2023-03-07T01:26:46Z","last_seen":"2026-05-15T13:01:41.832755Z","times_seen":3700,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/skip-link-focus-fix.js?ver=1.0.0 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"2ab-6776c077-20881a9d;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 329\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxsBPDH8qZsdeiaNkhiH6Iuv5aLF%2BjpY24aVuc0lySjX8gGsyqtlat49iedLcwG2PuFjlKLZp097wI8Uyvnb6fG%2F0l8zHg6H3Phh7FyOJZQecrHEkaY%3D\"}]}\r\ncf-ray: 983ae45cde1856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":683,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"75abd4cd8807b312f9f7faeb77ee774b","sha1":"e7b7a7ed06d0123ab8667a1d1eeb23de9f2bece7","sha256":"ca424c0181141900220a19f998ffa7660380bc99ab99557ad458a083251f7034","sha512":"c9f1f752994f1361555680ca5a60339fda152587ccc055db20148c086d82846887dd0801187aa033829b7d5eb9644b9391f493965eee35b4a1592f82cbb36aa4","ssdeep":"","tlshash":"bb01cbb6b30d44b604aa32178d5f61cd297d91e3a829649b8cc909502924c6d23befb8","first_seen":"2023-03-07T01:03:28Z","last_seen":"2026-05-15T13:01:41.840319Z","times_seen":11538,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2025/01/logo%E0%B8%A5%E0%B9%88%E0%B8%B2-22.png","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2025/01/logo%E0%B8%A5%E0%B9%88%E0%B8%B2-22.png HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 16 Sep 2025 08:34:15 GMT\r\netag: \"93a2-6776c235-20884578;;;\"\r\nlast-modified: Thu, 02 Jan 2025 16:43:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 37794\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BfASn0cwkTrGm0%2FPKdYRgol3aPsPwWbypfEMXwA%2B2xalHWGHTb3SWBxYHYxEjz4YJjEiV4wa3NG7D%2FQwCX1TQWT02eZAwgN8eUnJA7md0DwIAJ%2FiJ8%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 204, 8-bit/color RGBA, non-interlaced","md5":"3da9d670e0afe0e8b373bef7f1342e9c","sha1":"06be0f5e6bf1ee3dc86fecfe69fa6312a91d8e2a","sha256":"2277cf3ccecfc65340a77e9e509f6fccffea87ca0ccc6780c9daf8a1265e21b6","sha512":"63ca457def9ec9faeb3c84b242fbddffd6c488f86f6897fc7cc0275d7999b813b97e1094a4948a72e49559dbfbc90c9c1ae4476c215f96c36ae32cea1d6436d7","ssdeep":"768:1r9KvDYbLHMFD3b6QcS/4eZnQDzWj+YJ82vZzkfaKKDj:R9ifFLb6I/4gmz1l2EaV","tlshash":"7f03f131c13bc2b7fa5fe495e280d3a72d14aa649fe74d80339003369ed369295857db","first_seen":"2025-07-12T15:14:53.613292Z","last_seen":"2025-11-01T21:23:20.104046Z","times_seen":7,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A11.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A11.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 05 Sep 2025 21:23:00 GMT\r\netag: \"b671-6752b0ec-5e6494;;;\"\r\nlast-modified: Fri, 06 Dec 2024 08:08:12 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46705\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 251210\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owxDLj0Sanwj4Za5jURjwA7fVhAzEiR6G0Gl74ueaakwJoRIo5bgNVZsCvhRjTvqgylYlkOwcmmAmE8UT8FMDeRstMGXvpawpmSDkmpjpnlKc9ufNZg%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0156ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":46705,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2024:12:06 14:58:49], progressive, precision 8, 135x181, components 3","md5":"97a9f6b57e948860818410f89961de66","sha1":"de66c2770f303d755a82ce6d305bffe4214a5463","sha256":"45685b05515af65b3bc51ac54aadcccc26428fd537040009521fb2670283c007","sha512":"2299f363ffa4f3e9e55ee06a1b3cd0e0ed1b9adc87f1220d5f716753953766aa71e1aa86c5918c51d1327a0d955bc9757bc7fdb53606c4f86507186cf8a14752","ssdeep":"768:TTzjAhHPUy7TTzjAhHPUdIqIc2a5QfXScoyWGH2qZ8IpjsSD45nTAObo:HvevU4vevUaqk9CcBbHPZ8ajsSD28","tlshash":"9123bf06ab55ce62f8c41539a4f8f37266538e849b5703823edc9f4f7f20a91cd69287","first_seen":"2025-07-12T15:14:53.597283Z","last_seen":"2025-11-01T21:23:20.11089Z","times_seen":7,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.cdend.com/wp-content/uploads/2024/03/728x90-ufanance.gif","fqdn":"image.cdend.com","domain":"cdend.com","tld":"com"},"ip":{"addr":"104.26.1.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdend.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 09:38:45 GMT","end":"Fri, 12 Dec 2025 06:27:09 GMT"},"fingerprint":{"sha1":"2F:4E:23:5A:B2:42:47:F4:99:08:4B:C9:01:35:1D:24:43:B0:58:17","sha256":"03:2F:4D:58:57:37:97:B9:E8:27:43:B6:D8:A0:E2:72:5A:22:30:7E:96:C8:65:A1:2F:80:35:0E:DB:18:31:E0"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/728x90-ufanance.gif HTTP/1.1\r\nHost: image.cdend.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76658\r\nserver: cloudflare\r\ncdn-pullzone: 3741850\r\ncdn-uid: 191c188f-fd53-441a-b40e-67cf78304311\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 16 Sep 2025 22:38:54 GMT\r\nx-bo-server: DE-185\r\nx-downloadsize: 111239\r\nx-bo-origindownloadtime: 761\r\nx-bo-processingtime: 20\r\nx-bo-compressionratio: 31.09%\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/16/2025 22:38:55\r\ncdn-edgestorageid: 1047\r\ncdn-requestid: 428015870d950f19f82c5b62aad6da71\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nage: 380832\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQ9wS%2F99ZMMSdrjiVIjx9nP1gwX77HFMDXQ6qMamOys3LFhvytKBEfEjzjXHbCZme0FnBEhKzMNnGF67bqS7TLgiUC6qAcFJOiggW9U%3D\"}]}\r\ncf-ray: 983ae45ecae2569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5054b99940d043296deb88c761ac3beb","sha1":"bdeb7e7fd51f657a7538039658d5b80c0e8014a0","sha256":"4368ee48c17a30542fbd89e65175f41ab33dfe2cbf37eb5f87933f4561ae47e1","sha512":"bfae83135688d92c1338424fe40b9199dbb170a137f3ab85acc87304e853cf21afe03fb4365990d34cc8e23fbda3a972ed873645e92f2ddec4d2210c9e138167","ssdeep":"1536:ZxFtzNXw1qPdtNGiWs5Keu+zufBGqZIL+lx6f+811LMU6bfdZVpM:ZHtlcqVtFWAZoFBqfT11LNafdni","tlshash":"227302d7159a68098c76ecb39c8380a6d13ac98d4bbb6d3362e5d072d0ac7780c9d3c7","first_seen":"2025-06-28T08:19:40.508613Z","last_seen":"2025-12-11T05:15:16.764588Z","times_seen":18,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":294,"dns":4,"connect":1,"send":0,"wait":11,"receive":3,"ssl":320},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a2.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a2.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Sep 2025 22:54:42 GMT\r\netag: \"675b-6753edb6-5e62d6;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:39:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26459\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 418822\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hL4G4FNZxelhm1X6xy%2BaCHUN77cwbsIro168vrMwHzPCpCAJlT1gAVjO%2Bvtp3W%2BhukNWdTQvp02pIHheTSfljRnqsoYFvbu5%2BOYCV5KgYqHW90Gm8H4%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cce0a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=53, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=172], progressive, precision 8, 172x53, components 3","md5":"b2cb3d1d7078e27a6e02a6af76572b45","sha1":"4e5e96f61a89536d1590fdd8fd26ee486ba7bdd9","sha256":"d84f0dea83bb8f9d5fa7cc037eb4493722b6dc6bc6e0f23ac84efb4f101d1444","sha512":"494d84bc9b9175ab2fc20525061c97182ddb75beaa3f28748b41e80da976f77b35c8ac6fe2d41ff556d10c617b2613679e66903bc80db0baf06de8267dc2ccdd","ssdeep":"384:1/v5a+Pw37iS/v5a+PwI2e/TmnQO0QAWsiHSauw0+Zm0yPIpv/kphKgokD:Jha+Y377ha+YuqrSRw0+iwpvcDokD","tlshash":"d6c24b11b651dc12e4c82a3d88ecc2b49b738ec86e23424a7ddd5d433f717958daa663","first_seen":"2025-07-12T15:14:53.573845Z","last_seen":"2025-11-01T21:23:20.12252Z","times_seen":7,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.cdend.com/wp-content/uploads/2024/03/140x250-ufazeed.gif","fqdn":"image.cdend.com","domain":"cdend.com","tld":"com"},"ip":{"addr":"104.26.1.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdend.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 09:38:45 GMT","end":"Fri, 12 Dec 2025 06:27:09 GMT"},"fingerprint":{"sha1":"2F:4E:23:5A:B2:42:47:F4:99:08:4B:C9:01:35:1D:24:43:B0:58:17","sha256":"03:2F:4D:58:57:37:97:B9:E8:27:43:B6:D8:A0:E2:72:5A:22:30:7E:96:C8:65:A1:2F:80:35:0E:DB:18:31:E0"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/140x250-ufazeed.gif HTTP/1.1\r\nHost: image.cdend.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57604\r\nserver: cloudflare\r\ncdn-pullzone: 3741850\r\ncdn-uid: 191c188f-fd53-441a-b40e-67cf78304311\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 13 Sep 2025 08:01:16 GMT\r\nx-bo-server: DE-228\r\nx-downloadsize: 77057\r\nx-bo-origindownloadtime: 613\r\nx-bo-processingtime: 14\r\nx-bo-compressionratio: 25.24%\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/13/2025 08:01:17\r\ncdn-edgestorageid: 860\r\ncdn-requestid: 26474d47f47fdf457e996cfafcf00e58\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nage: 379639\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2B9cxdV0tFspX6W51U7Kc8iKQOhFxyrO%2F3Suw8uffBgBvg52UPCDYv5d7L4CAPMEZpmf1PQ1Tlrb2aVeciDyGJKQaD%2BS8Qj8pmB7YCA%3D\"}]}\r\ncf-ray: 983ae45eeaf2569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57604,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b02df4397f4e7481d219bc31eca25a92","sha1":"daaffc1ad1a055b33362032a7b801b18f05b82db","sha256":"942016be0421fd5dc534ed01899c1ea96b917b99eb4a9c80f02a4b077c71acd3","sha512":"69f0c32e15a14ab1e5c37a0a35bffd2f381772bc1ceb2a8021684aad3ce3283ee88d5e0d33badb1878df6457dcde2bc8a0fb996eba60614a3ce37601a3795cae","ssdeep":"1536:IWb8D1PB258Ng0wmwGCwDZEammhYBcAx0ZDmu89Qu:IWbW15TPTEahAGdu9P","tlshash":"7c43022698c5c1d554c832236aede67fe205208b57e96ce59489fa9b1cb40acffd31d0","first_seen":"2025-06-28T08:19:40.546195Z","last_seen":"2026-01-03T17:46:35.190764Z","times_seen":24,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":300,"dns":2,"connect":3,"send":0,"wait":7,"receive":2,"ssl":330},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.touchSwipe.min.js?ver=1.6.18 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"4fce-6776c077-20881a9e;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4876\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bSREMzADkaH5F5KP7SY7P6o3nQIZEPjzma8ja2GtsRgvjO2ZXba6e6FbNAObNnVL0OqOeq14wMzgAT4D%2Fw01ssC7FEUuJwEzVo0kfePxVwYh8HF9BE4%3D\"}]}\r\ncf-ray: 983ae45cde1556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20430,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20018)","md5":"4cd5ea35543390c5fc4e9def651ab721","sha1":"d360aa74dff157fcefda69336ecf420f04940f98","sha256":"9167cb37ed21405ef9556646b83789a2099c15398f5cea867470df1e81752e17","sha512":"d666a51729862abb8d23b0cca5d5ade738c08df2a23fbabb55be95f2a1fbef60255bda850cb36457e70bb2706067f9cee620169c9166f5e9f29a48af470d4fab","ssdeep":"384:lrKvSC3FheMYNzktJlro8aVfPxodAuyalYleh++PFoAS4TSPE9MfA+0UUTK7:gqC36LkJcjPxodAl8DiPE9/+0UKK7","tlshash":"da9294c5bb053d53e9ff12f64157170ba2368eed050e10289839efc629314b1a6efb69","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-05-15T13:01:41.787113Z","times_seen":4872,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2023/03/287-%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%99%E0%B8%B8%E0%B9%89%E0%B8%A2.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/287-%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%99%E0%B8%B8%E0%B9%89%E0%B8%A2.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 20:16:17 GMT\r\netag: \"3e79-640f0276-208839f1;;;\"\r\nlast-modified: Mon, 13 Mar 2023 11:01:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15993\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 412843\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OC6IgPVyBpKkGM1J1HL5sT2fyX5F5V%2BJFsjy108cA%2BpZRMsoAYLN1djuRpR%2FqBxONzcGjnhSCz1r7Fv4yQK%2BWIa748E6OxQ%2BBSkjZiN5uV0W2HUAttA%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fbe3956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15993,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"43161264c22ed35fc66719c0636aa940","sha1":"4a1568400b5643c618ced0dcfb0fa646fdc9a5c9","sha256":"6cc5e87469773017d4c009af0af1a9748d8fdac6eae14171131079f83aff9151","sha512":"705fecf7f14a66b4df046159bc9978f209172b41c4f1d6826878e7d04de20b9c26861d844e88f256ffa8d5f579ff1baf954746baecfba635589aff04b62fe39e","ssdeep":"384:R+PRQ7FkvOPqYSh4q2jAiVN5yFiNmqHjyJb2enE+:e0EOS52jAiVN5y5a+","tlshash":"4972d00fb68b7b0788ecd6f016bac66d5161c4c4c14c166b177b646b52ec7742226bb8","first_seen":"2025-09-23T14:57:31.894863Z","last_seen":"2025-09-23T14:57:31.894863Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A13.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A13.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\netag: \"a6bf-6752b0ee-5e613d;;;\"\r\nlast-modified: Fri, 06 Dec 2024 08:08:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 42687\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8KmhtTGFWZlL1%2FZnG0BJmVTytrD%2B6Fqu%2FEjMR73WQtpvbcDQ%2BKZenRm4hwAJzKUM%2FHPdWOx4KqvuZbc0ItjR%2BvBpqMznrStIX1v%2Bqy%2FIAPxWaSfwvc%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":42687,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=181, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=135], progressive, precision 8, 135x181, components 3","md5":"68054b2f68eacb6ef6d71cb41feef87b","sha1":"dfaf6873fae9747eaf92ac6a294cfb90e4ea87d3","sha256":"ebdcfa84657ccddfb7d8ea3b5d2c1f446a20828541312b2b0810582f41b27b0c","sha512":"0f9314bf80328a5cc15eaba0911e90e5adb6784146f179acb0f2b5ce9f63c4ad37eb8cbafc1d504d29d4c8f5987deb40222a3db20906d04d6c371e3b8577d91c","ssdeep":"768:jCOlqB79COlqxegRbrtYokEjsBl7ZFthDtvYWBG:jCOc7COccKbrxOb1Yp","tlshash":"09139e40bb42cd21ecd82674519cd27153f34dd49ab3624a79ccbf033f756628e8aba2","first_seen":"2025-07-12T15:14:53.560822Z","last_seen":"2025-11-01T21:23:20.041753Z","times_seen":7,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"publisher.adsok.co/advertisement.js","fqdn":"publisher.adsok.co","domain":"adsok.co","tld":"co"},"ip":{"addr":"104.26.2.222","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adsok.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 17:12:32 GMT","end":"Sat, 22 Nov 2025 18:10:14 GMT"},"fingerprint":{"sha1":"AF:E6:75:AC:B6:0D:C6:8F:D5:EC:5F:ED:D2:08:05:03:95:36:7B:60","sha256":"63:2F:B8:13:43:E6:54:4C:D1:1E:D2:10:03:6F:87:13:CF:AF:50:0D:C6:9B:65:CA:32:13:E9:67:C3:6E:44:4A"}}},"request":{"raw":"GET /advertisement.js HTTP/1.1\r\nHost: publisher.adsok.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1517\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9IdliaQwtU9cr6XNGpK2rstK3JvT906L45Iz1l3uUC8hJy4Z7Prwpjkpvhg82mkI%2FK4Rqca1It8PLYq3vUonjcTZ1alodqinyb4t1w5Ig%3D%3D\"}]}\r\ncross-origin-embedder-policy: unsafe-none\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npermissions-policy: geolocation=(self), payment=(self)\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block;\r\nlast-modified: Tue, 23 Sep 2025 14:46:03 GMT\r\netag: \"12e4-63f78fec27539-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncf-cache-status: BYPASS\r\nset-cookie: SRVGROUP=common; HttpOnly; Path=/\r\ncf-ray: 983ae45d38b956b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4836,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3274e89abaf73fdf5c7f64432a7dd5f6","sha1":"415db912a339eaf7aa9542d684b97024f09ffaee","sha256":"9f696a174831dbbf144d4de0892f7c798448d9549eb4065ae7a663da6355cca3","sha512":"b553d90a91220ae24268af3eab574f27267e22539f6f7a6744f38c59d5793164e3bd02a8bb77f3e756616edd39f6007aacaab6c9f8b8041b393a363c50ca2d60","ssdeep":"96:COFcx7w/84qd0InnZ9UD+gn3OVXAWFShDlQM6ne:COORh/nZ9Y+gn3oX1FShhQM6ne","tlshash":"8fa15426a7a250b5424ee06c796ba24a3353d01b6dd69c4dbefc15096fce82c64f26cc","first_seen":"2025-09-22T05:45:52.671053Z","last_seen":"2026-05-10T04:44:48.477555Z","times_seen":48,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":199,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2023/01/%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B9%E0%B9%80%E0%B8%9B%E0%B9%89.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B9%E0%B9%80%E0%B8%9B%E0%B9%89.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\netag: \"4de1-63b94ced-432e5900;;;\"\r\nlast-modified: Sat, 07 Jan 2023 10:43:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19937\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFseqpF6C5%2FYa6LVQC00CY8fJBGqR%2FOZ6h9AQoeoJcnfzxKJOvhBKPf96Zppxyjk9RvIVyRZngm9HBc7vgnAPW61JhpXtmjwbBd2ZwnIbPqvtbN%2B8cI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fce3d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"b2f5762649415f8a54911dc0f161111f","sha1":"3f962a6a027e40f3b64baf8579548b43cad5fcc5","sha256":"2644ac1c876fad1a9a17cf7ab3db7472e3a1db53857e1ca2a17bcfd860a4d778","sha512":"4034eeb06327073ba9e9fb089242e5869be8f8fdd1b4c49acd91a8ad62006940ee2d5d435f26d86f68bd4151f44eff94fd8d14e060bddab5430a690e24aaceeb","ssdeep":"384:FODzrLmXvnyVRgAJjbvCcGrCapuh2mHPfPW7zreII+MafV4DgxDLhARZB8nNPe:FaHL4nHAlGcGrCape2A3c9nQgxDt+gle","tlshash":"3192c009ed23c9bef9e24d7f6135026b6b490784b8c98cd8fcfa20688570161616e5b6","first_seen":"2025-09-23T14:57:31.958256Z","last_seen":"2025-09-23T14:57:31.958256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/cropped-%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%AB%E0%B8%B5icon1-32x32.png","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/cropped-%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%AB%E0%B8%B5icon1-32x32.png HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nCookie: _ga_B5RPZJ31PY=GS2.1.s1758639421$o1$g0$t1758639421$j60$l0$h0; _ga=GA1.1.1218739151.1758639421; _ga_8NYE76B8C3=GS2.1.s1758639421$o1$g0$t1758639421$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 05 Sep 2025 21:23:05 GMT\r\netag: \"82a-6753e92d-5e625c;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:20:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2090\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 232882\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtJLJQKmjjyXZijuxHpcHrkr5%2FUI4v6kXUdiCED1wSS8iXA%2F7jG%2BuHBOi9wXNhIb4uNOjWbqnhsmKw%2FGKqr6n8NYLf%2B1R9O17qUTixt2iVeieICKRrc%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae4619e6556ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2090,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1e053c838b5994bda891a2017f1005b0","sha1":"cba8cb342367503b4adf4bcd9548f91dc85b2692","sha256":"6faebf78fd783367cd69266c343fbc8a3093ed9cc2d522746d03c5bdd2d97205","sha512":"ab02d86e72dec5235d3de4e58eda63e068b8508a0360e345224c0a51f67d759c2f31d5052dd035ae869746b7525752cb56ff6a1ead6cd8a39cee84f82430c75b","ssdeep":"","tlshash":"c8411c7874b4363422e5b5771fbc426474363246ec2c606f8110dbf11c7f58ae25a1a3","first_seen":"2025-07-12T15:14:53.59292Z","last_seen":"2025-11-01T21:23:20.087005Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"3509-64d2d65b-20881586;br\"\r\nlast-modified: Tue, 08 Aug 2023 23:57:15 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4679\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oy7AETxQcK%2FA1vFYAKAFT1ZEuFcDEPV7vgZzuBaRX%2BHGx6WFYk8JN9mtJOZyUbiyvdKzIqvvCa8byR1C0VnCd8I45P20S%2FkbqqJYEmFnkbAczMdE59w%3D\"}]}\r\ncf-ray: 983ae45cbdff56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-05-15T15:20:49.118452Z","times_seen":767752,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/lazyload.js?ver=1.0.0 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"167b-6776c077-20881aa0;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2036\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4Zj28zMxmE2WLJ2ciW5LKYAw%2BSeP8SrQgxOUxano74PazDlPviFoysZ1dX5RFaRZdFiIxlDy%2FVt34aISeFHvQfkYEJsgnNYlEyKG9tQza5wKT9Q44Q%3D\"}]}\r\ncf-ray: 983ae45cde1456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5755,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5710)","md5":"6dcca58db348f35d6eee39aadb7cd280","sha1":"0a513a0ebed60f4b0b4d69f7aaf519feaadbfaec","sha256":"2683c87843149db588b42abb7ef80b2815438fc44b368e1a855983f93ae431e4","sha512":"ee897cdc326f80eb18c74b3c42fe1b97b3b16c0be8f048a763cb33db134fa47dc2eb07bc1ba6cd8feb91385d791aa89a28816fd49217a57763dc54df1ef3693e","ssdeep":"96:IncwFK9HqOq0tioGJULBx7PYuyrr5VrcAeS1h3osyTaZ+1KZZ/p5k1QDSYRV9uR5:M9YH9qfJ2x7PYf5BcVSPfq+DkGDjP9u/","tlshash":"5fc15308b065b43f65777032523f130bb23a606778884494f6b4eae99ebc81e5923f7d","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-05-15T13:01:41.792717Z","times_seen":3744,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1735835767","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/main.js?ver=1.7.6.1735835767 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"996b-6776c077-20881aa2;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 9598\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYZ3jZoKqOoaG09mVFitHLhfhvQnevBYUOglSmlkhUIJJUljUrr%2FiQiPPh6c8hvcwy6xUK65Rb2qfQKUe9osFHF2C4Ptt3eCRiTZF68jCgWyArqnlUY%3D\"}]}\r\ncf-ray: 983ae45cde1656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39275,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"783fecdc0e20f9cbdee6b57839de44e4","sha1":"0d9062e511793c4ac674742de2de74dd13a85dc9","sha256":"45c5b2ddd2dd6bae51444e5c06a67a069b87457c72e3876bbaefa17dbaf9315f","sha512":"a7d0a8702df2b6d6074ee47e746ad8d46fb851ccecfb9f8925a2d7cebd2073d51591ac4722c3d09184cca52e9ae241820330e3d7db05bd2c9b1d49ed3ce06981","ssdeep":"768:lqZvNO9ADc60/sjbrtXxCiVR3xCoP9nnI33mnDSb4B34BI3fs9a:lqPO9V6pZXc8R5nbGQGa","tlshash":"01037385fb7c254a827a30ee6c6f12cc353d5132a442046fbd39a6e458a0b3d73a7d79","first_seen":"2023-03-07T12:12:33Z","last_seen":"2026-05-15T05:42:32.710643Z","times_seen":2035,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2022/12/343-%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%84%E0%B8%A5%E0%B8%B5%E0%B8%A2%E0%B8%A3%E0%B9%8C.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/343-%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%84%E0%B8%A5%E0%B8%B5%E0%B8%A2%E0%B8%A3%E0%B9%8C.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 20:16:20 GMT\r\netag: \"5372-638f36dc-5e7843;;;\"\r\nlast-modified: Tue, 06 Dec 2022 12:34:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21362\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 412840\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1nGK1qoLDnPmd5fV7VsuzOkQKTB9DTTj%2FaVYw%2FKS6Le%2BYVq79CCEJJfDAUVy4MfQcdWomIg4QJwRorQ6xdE4gCs%2FPtigkDpbRpG3CRe6XfrXI88mmRU%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fce3f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21362,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"c48bd05de6facba97cb2dc93d2f3d099","sha1":"fb4513ab225ea11059cecf6a1510e9a636d55e81","sha256":"3130104612cac7b27c7f703b7c9e093f75b5dc0b11e5fcf97aeafb22a2c80a51","sha512":"f53ead19ab4ee74d0a8262faac113cc8a4e2021d205f5c212a0dc710508177dea2c670a23604ba227991817c489ec7487262865da1d2c0009552033ec84fe72e","ssdeep":"384:RNcpJh83Ao5wk/yjHtk10A2F/RsLYgySJE9PeWxSARAJVMapp:4P/ka+2F1gySJE9PbVRCM0","tlshash":"57a2e0007b095ba1764ce17d73b52a89fbda50c494431e1b59df09a527f02fb6630bcd","first_seen":"2025-09-23T14:57:31.987547Z","last_seen":"2025-09-23T14:57:31.987547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2023/04/L9DT205XXD8MQ72Y.png","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/L9DT205XXD8MQ72Y.png HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 12 Sep 2025 01:28:00 GMT\r\netag: \"5ab-6435b5d2-60790ede;;;\"\r\nlast-modified: Tue, 11 Apr 2023 19:32:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1451\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 376701\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NWysDQLt8R1Z0oeJ%2FnmRw%2B6fBaddbC4gVpm%2B8QBzrKYec5RBY9Byp0YxsGF4500oQWcBS%2FAPRdmf%2F37KH%2B6yUIOqZp0%2Bx9XKkC04%2FyhLtkNW7dCBVcI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0756ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1451,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"3f3660847c2f3db7cc1c0a181fadd95e","sha1":"7d5da4383a149957994a951390e7b1886eba41c5","sha256":"7965d89f94528b2a4bf452d3a4a6f82acd665f1652a038846b0ac939ab14f4c2","sha512":"fda9dbc9443cd3d611a2fc6dbc7dd601c8b9c452e7726bf1cce986f74ead27ce97874d16b9f2cde066a702a5d9342793f84a2bfb2bf3b647fafabe21ce841c7e","ssdeep":"","tlshash":"da3199c9eb401a1253989b8320e9402f9ca7cdc0ac95ed7d694bf41bae355b38574bcf","first_seen":"2023-12-06T19:07:12Z","last_seen":"2026-05-12T18:34:09.650325Z","times_seen":25,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.cdend.com/wp-content/uploads/2024/03/140x250-brazil999.gif","fqdn":"image.cdend.com","domain":"cdend.com","tld":"com"},"ip":{"addr":"104.26.1.38","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdend.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 09:38:45 GMT","end":"Fri, 12 Dec 2025 06:27:09 GMT"},"fingerprint":{"sha1":"2F:4E:23:5A:B2:42:47:F4:99:08:4B:C9:01:35:1D:24:43:B0:58:17","sha256":"03:2F:4D:58:57:37:97:B9:E8:27:43:B6:D8:A0:E2:72:5A:22:30:7E:96:C8:65:A1:2F:80:35:0E:DB:18:31:E0"}}},"request":{"raw":"GET /wp-content/uploads/2024/03/140x250-brazil999.gif HTTP/1.1\r\nHost: image.cdend.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59176\r\nserver: cloudflare\r\ncdn-pullzone: 3741850\r\ncdn-uid: 191c188f-fd53-441a-b40e-67cf78304311\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 20 Sep 2025 07:56:30 GMT\r\nx-bo-server: DE-138\r\nx-downloadsize: 74759\r\nx-bo-origindownloadtime: 619\r\nx-bo-processingtime: 14\r\nx-bo-compressionratio: 20.84%\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 206\r\ncdn-cachedat: 09/20/2025 07:56:31\r\ncdn-edgestorageid: 1075\r\ncdn-requestid: 1e7be520a3cecd2c3b126ac21e7d914e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nage: 242300\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3g32RkGsIFI8SPSJWy0kiZsjvqWP6ag5i2ulEh6QB%2FpAtkyYOq7SXmwj4FfCzlOiixRmNyKCQ1VzEzmkO0hjYR2eXqF5XKi7zv734KU%3D\"}]}\r\ncf-ray: 983ae45edaef569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44aa3ede18f1424560b6866a1c526ce6","sha1":"a1822613b0f2ce3b71f9cfcb797ed9d4eed4c232","sha256":"1a3d92f49afce9719513bbd32652d1b024f18e3e3b54189b11a1b32213f632a6","sha512":"04543f6c9cbcaadd8cff40fec025eaaf0a154674e5815f4957ff2629357d4032e55dcb3d6dba7e421d65e1ab7ea3cf839f932d57a1d922fc096a3bda5ed4d941","ssdeep":"1536:5EkIwwxnHobTEsDW/Yuj4AFuo/sScHfNCwYI17Ek+Lteov:5JIoBW/Yq9sFfIwwX","tlshash":"3d4301fdca032b29b1a1b93d5efa03c599f607629cdea8e494f98513763c4021f21757","first_seen":"2025-06-28T08:19:40.57357Z","last_seen":"2026-01-13T22:56:25.735819Z","times_seen":24,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":296,"dns":1,"connect":1,"send":0,"wait":9,"receive":2,"ssl":323},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2023/01/1123.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/1123.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\netag: \"4c60-63b95bcc-432e57ea;;;\"\r\nlast-modified: Sat, 07 Jan 2023 11:47:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19552\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGdDapLUzJejUPDkeOUnWbjy4CrQM9DjCzBgxFZm%2Ff%2FlzsbpCBSG4bYZHgCsA4axr6t9gFnaEShe96IccICbRnm2KY%2FjN0wMKk29AdFYzNMli%2BdEfO8%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fce3c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"0b342aa5a8bcd84c4f4547d2e09db48c","sha1":"be351dcdda40048048d0151f0139f83369f630cd","sha256":"4e57bb255d2111b4705fe243352b0649399226a38cae758b5585474fefe2243b","sha512":"4d6099aad4161f34892b08669eb859794317517f666033111f67e1e216846340efd3901e0cbc3876b779b7f53967587d472f87b8ce18aa21161d970242524c3a","ssdeep":"384:FOiPxLiWXyWGVoukkkhHJ3p4x2BvKdyY7pLGOQt5Bbegf+Iw:Fns2ylnmhHJA2BvAJNCOQtzf+9","tlshash":"e792e1a6be61e727c8193d763cb2261ceddcce182c4470bbe4b9ac10516827566b73cd","first_seen":"2025-09-23T14:57:31.997139Z","last_seen":"2025-09-23T14:57:31.997139Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a3.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a3.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Sep 2025 22:54:45 GMT\r\netag: \"5dac-6753edb7-5e63b3;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:39:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23980\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 418822\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GAtS7RSut79ToLngNu88WA3njihviADZU2K9%2FaOPv%2B9acjHyUvQigzluRbjGYe%2F%2BffOzEqSxYwks0pVZMBBXH2UDYW5Zu1xpT%2FPoRnurBDLHhwAKN4w%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cce0e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23980,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=53, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=172], progressive, precision 8, 172x53, components 3","md5":"12e21022284dca5332bb79f43f1d3192","sha1":"6d1c540a032995d6ac78f5c210ac8544f8ac46eb","sha256":"36d1ce76c3f1041547ae68ee292a418368431f762ac9e2c751c64a05cc225798","sha512":"5ac8dbb4417ccf9a5115a12d2b834e445e83a3a5e6a9535bc3f872bc48752e921061dd05f1498bd429c9516fd541132771c9ce3c8bff2fb4653b62baa69e279d","ssdeep":"384:cTrgBYPu2z7i5TrgBYPu272e/TpnFkO0QAW+4T69onncr2II2/:cTrgX2z7yTrgX2B1F0oncCId/","tlshash":"03b24905bf10de11e9e8253d89ecd272a3b35f886a13424a7ccd6e873f717548c9a297","first_seen":"2025-07-12T15:14:53.587443Z","last_seen":"2025-11-01T21:23:20.119051Z","times_seen":7,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.2","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.2 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 05 Sep 2025 21:23:00 GMT\r\netag: \"1c679-6876ead4-44e36b3a;br\"\r\nlast-modified: Tue, 15 Jul 2025 23:57:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 14004\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 251210\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QhVkrIeDOmbA8vGUEyEncHVR7i7YrXKuBbhGM6ugU5ecO8qg5DxQ3uZRKr7ZRr2DF4EXi3bGLB0eJwxj%2FMgURdgRxz7wmqST4qYZzf1wiZ50lENmYHI%3D\"}]}\r\ncf-ray: 983ae45cadfb56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-05-15T15:16:41.935143Z","times_seen":171367,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"15601-654acee5-20881588;br\"\r\nlast-modified: Tue, 07 Nov 2023 23:57:25 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 29597\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9X%2F%2F3cnYMZ647pZ3q%2F%2FaeeSJWUdtaZWqRRF7oQ8LCav2AcJLjD2SFwpnVtwKroDVirQUxNTyh%2BgJdX%2F17EypEuDWs%2BItERx9fIszv65mNOOztozTpe0%3D\"}]}\r\ncf-ray: 983ae45cbdfe56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-05-15T15:20:45.590605Z","times_seen":830394,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A16.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A16.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 18:36:38 GMT\r\netag: \"b0e9-6753eab6-5e614a;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:27:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45289\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 418822\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3dL4Ed9OH8fJCsoBAoCSgojrIUDVYk%2BkjvzXeDMllOA9d3ElfXXJR%2BZh9VRpuE4MuDk%2BDZQYNlFWbY2XUl6CtMOSRkj9v%2FBmGVBPM2Aws7u%2BKMEFcYo%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45289,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2024:12:07 13:24:59], progressive, precision 8, 135x181, components 3","md5":"0a1a11ca7005a62da4c4145504384f6d","sha1":"66f028e93d1d4e87b619e323e6f34ca5fe08bd5a","sha256":"29e3f9b03516d86cc8cf58b9d4dcfd966e27e9a5778757a09c769b344b643fd4","sha512":"f9c96aecb049a236e735d9fb781793a543a6a0389152976dd929dace2a1e57c83c79e9f36b091ae540e9dc5bf622153c10773eee742aa564938a74412c873b3d","ssdeep":"768:PFBxNHCmd9iI6HM972FBxNHCmd9iI6HMaPmrxAXJOwTQFrG40oiq0fg2SbAuuugh:vxNH39F6TxNH39F6vm1Ag0QFy4gq0H9h","tlshash":"1813ae0aa7458d51e8cca97e98cce37683a34f901e57561b7bec4e433f31a44cd69283","first_seen":"2025-07-12T15:14:53.567415Z","last_seen":"2025-11-01T21:23:20.072426Z","times_seen":7,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a5.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a5.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 22 Sep 2025 16:32:54 GMT\r\netag: \"16f3-6753edba-5e6433;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:39:54 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5875\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 75903\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6VtzKAtsRgRsLQdYwhL2Puebl2%2FGnyrAmLMkcuhYu0M9vuJCtOr7ksGGqqJ34JwlD%2FqdpoP8Ee5f%2FcJxlTHJpsvtfq2mo871gDm9N8iexyTVvFiQkA%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cce0b56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5875,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 172x53, components 3","md5":"8df63c192bf05f179e6bd56d0e7a7c15","sha1":"b1323cde871094939ee3e726983a74472a851976","sha256":"795060c879c83c7d50b3d7217e93c01900508124538f63adaea4828575c04f25","sha512":"24387a80dedf56090e6a101cb93070ff45bed49207ddb07779616807c3827b2fe659fc559cf4570631fd2b4070137438d225016b761e930f5f5807774a9805f3","ssdeep":"96:wblR/HvYh2Yavqi59j8UkDyr34oZct1qLrZLM6EQ/lJNUzuvJEYVlBX:I62YaiiX8UkDyr34oZzhLt9E0BX","tlshash":"82c16c4f99863f42d16aa9d23dbac23ed7fa0010d2c9605d5af6ccd68d452b5224f386","first_seen":"2025-07-12T15:14:53.624346Z","last_seen":"2025-11-01T21:23:20.056704Z","times_seen":7,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/02/jackpot.gif","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/jackpot.gif HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 23 Sep 2025 21:16:37 GMT\r\netag: \"de805-65dcaa75-60790759;;;\"\r\nlast-modified: Mon, 26 Feb 2024 15:12:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 911365\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 582023\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22qlDKgEoW%2BbbwLqItS4ZOypeUuGfSie2TaH5EIKEJF0%2Bxfzo19ryDAB3GcWa545eiG3F6SHnURAdamcOiYWUFRMq5QznH52j5U43Mo7njERbxQKeKQ%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cce0f56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":911365,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 121","md5":"8ce17b60b5d6149aaa1fb67ff22db8e7","sha1":"d3f6120762a5982f9e5d26bd3fc321f25beee080","sha256":"f505d9578b9afa91883ecf8a680b670c9c58ab8097557b14c9607db5dc20d0b8","sha512":"860f015cabd554a10f96ecc5290456d8074318a72d0ab26a17b4716943ae044ca60ac3cd95f1b459bdebc36d444081f19e7f293329405c9dcd9546960378d152","ssdeep":"24576:9mTRFgnMPIHx/LyGlTj9ei+9x6sg+36UTuaYW3Mc:L/HxDyG1j9x+TZ8c","tlshash":"a615232e9abc427cdfe749be259e4ee810bfcc61948040065d76b883d6446f8b439db7","first_seen":"2024-12-16T05:36:18.113192Z","last_seen":"2026-05-10T04:44:48.426859Z","times_seen":29,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8NYE76B8C3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-8NYE76B8C3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nexpires: Tue, 23 Sep 2025 14:57:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 134799\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395685,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"c9a154defc3677d82a961bd6a81f767c","sha1":"219192d0f235cc75e893c5cae12c3678c8f43c8c","sha256":"872f58ada8dabf233a0a1a25ac316697863066d0d90fff3fbcc4b540bd968237","sha512":"723a179d6f43fe6dd2ed422557fde6817271843add171a74d43997ce141ad95c110215975308d5f455e631c5a30b3e5e7a9bfe36d4faa7e8f63c02cbc4cfd268","ssdeep":"6144:9tuQwWUcGiaJ2EslQLufAXyxUKJJGKJFj9:9s5EFaJ8QBKX","tlshash":"e1840acd73c674664396b478903f018ba5bb2892f44cc899f189dce42e74a9a4277f7c","first_seen":"2025-09-23T14:57:32.015717Z","last_seen":"2025-09-23T14:57:32.015717Z","times_seen":1,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":282,"dns":1,"connect":8,"send":0,"wait":45,"receive":27,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A12.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2.%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A12.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 21 Sep 2025 14:23:22 GMT\r\netag: \"b062-6752b0ed-5e638b;;;\"\r\nlast-modified: Fri, 06 Dec 2024 08:08:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45154\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 150906\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDM7t%2B6ovFrz1ALl%2B4Vrc4phuCOWMuqhIZqDqvE%2BR434k87jEuGsohTYtZlp7VIt%2FyEhnPOIyqKTMJ9Lj1hGQ7GwliyEXKiQ6fp7QoGbIirOZmyQzog%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cbe0256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45154,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2024:12:06 14:58:39], progressive, precision 8, 135x181, components 3","md5":"f5198c2b8f541192b131f682bdd8097e","sha1":"942e5445d95db758be6af6693326c2c36750e869","sha256":"86ff76be2238e88a6b2ef574c6e593f40d15815f4775ff7087a076ea67814ab3","sha512":"ee3c56bbe457e502fe1e330ecd3d4ec92a23357ff87f4a5eaefeb199826914c32515cd2ffe54ae48c6e843063c80fc7086ed7c49e80cf92b5a66d562a110b175","ssdeep":"768:TPdS+Tb1hNhv7TPdS+Tb1hNhyGAOZkZ1AgubsM2W8pyW4AIxVXVnazBr:TE+TZhzE+TZh9s1IbsHWwOVEFr","tlshash":"5813cf49ab94ac91fae11235a8fae27102a31e849e13114e3bfc8d577f701f48ddd687","first_seen":"2025-07-12T15:14:53.581148Z","last_seen":"2025-11-01T21:23:20.117262Z","times_seen":7,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/cropped-%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%AB%E0%B8%B5icon1-192x192.png","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/cropped-%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%AB%E0%B8%B5icon1-192x192.png HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nCookie: _ga_B5RPZJ31PY=GS2.1.s1758639421$o1$g0$t1758639421$j60$l0$h0; _ga=GA1.1.1218739151.1758639421; _ga_8NYE76B8C3=GS2.1.s1758639421$o1$g0$t1758639421$j60$l0$h0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 22 Sep 2025 18:36:36 GMT\r\netag: \"4123-6753e92d-5e6413;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:20:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 16675\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RK9Bsw2nAMf85XUdoem2xM98IFhnrUbrQ0%2BYldFm3qlGSAOGePHW4sD834nudEiWKLT9crA0%2BGjAEe6JkSCfU4XLY5nBAjnr1Sb82OMDRsT6bCny%2FyM%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae4619e6456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"d1cd26327af2a899d25dd0532b0dc7bd","sha1":"950db1b825c258a65f74913c7581a64215e9f96f","sha256":"8852a7e60f252accd4d846ef8d2223ee1164478316146baf66b3dbe6e3d9059f","sha512":"c902ad32f57878fa35aba9afa44b2abcf7e68e9573a55aff11f484650f031092e0c4dce8c20f3836b9dbf9ee9f00218fb19cf1cda08c6e38bdbe49e1e9f850b2","ssdeep":"384:lqOaFIB5UMAC1mlic8oxY41Cz6QOMuywjbxN/8P0:lqbIzZwa005OfxN/S0","tlshash":"3d72e1c7aa734d86c1cdea809c9155fa7fbc8a08377a25485d16c6c6a8f87d0d9f0c09","first_seen":"2025-07-12T15:14:53.635249Z","last_seen":"2025-11-01T21:23:20.126172Z","times_seen":7,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T14:57:00.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/ HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://xn--4-2xf5bza7abw1ml.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://xn--4-2xf5bza7abw1ml.com/wp-json/wp/v2/tags/1247\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsGjwGNK1lLLTiTS%2FEvHgA2VtLVy%2Bj3XJaWHk534CrwRVa7f28iLyxWFvS%2B5gp%2FLKgpQeQiu%2FgVSG87qIzDeFyNb6tH9e7FoJclNc8DNVHnHBuobPBqpuw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 983ae4595d8fc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider:4.2.15","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:25.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":78742,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8856), with CRLF, LF line terminators","md5":"8d28437a53dc42e497224871523455cc","sha1":"54320e187223a0e1d3d7bb1c3f299cefddadd294","sha256":"1d6f316bcd87911326ba731aef1f47d9c05dacc11adf64d44469f8314328ebf3","sha512":"40578ac99f4db546a674dd1134f598dd4f01de1dac954409829c99f4b1ecd091098c66e29c5458f9cf53c29ebd9dc12d60724dcda04fd9e27745f22537d728c0","ssdeep":"1536:KMByapHagFNQKlXBwvae/lnP0HgHfp3eo:Kml1agNylnP0HgR3eo","tlshash":"4e7396f33b5b8436230973954c85334ca1aa6c26af37e9e7b1bc505c83e1f9514a2dda","first_seen":"2025-09-23T14:57:32.024797Z","last_seen":"2025-09-23T14:57:32.024797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":180,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/style.css?ver=1.7.6.1735835767","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/style.css?ver=1.7.6.1735835767 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 22 Sep 2025 16:32:52 GMT\r\netag: \"125f5-6776c077-5ce69c;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 13354\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 75903\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BT2l9JPTX9wut%2F7JyRKUl4VftZjKqSwtXZJs6t0094QEk7q7PVw2pqo7Di4XFpAOhRPxQQPe03U3cDlRnZ2DtBIX5P7JRKQxuigLNbyqIT4m%2F5%2Bw1v4%3D\"}]}\r\ncf-ray: 983ae45cadfd56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":75253,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"19a81816a03f797efa315ef794b3eb27","sha1":"b5df551290d7bbd114b4ce5c62d93d43a5648ef0","sha256":"5ff56b68c5503c4a79ce2b964121cfaf67ada9e09db076300169bfcd5213122f","sha512":"0274f0ce71847a33bd11c295c8bd56f83962c924b66df0b567f5660c79b150a11e407bfdb4fa69998d8d0a9faa6cd062450ea74aed9e765a0705743e1c082f37","ssdeep":"1536:9+vfevN5dbpil/zinqEqFkQiN0NtIhjwU3zl0oyEjG/2WmM1/S/5s5DX3F/Is5Du:9+3QN3pil/ziBN0jKl0KyrWixLO","tlshash":"7b737465af141c44932bc2a9afd5e750c63e4051df0f0edff099a528d38a69502bff8a","first_seen":"2024-07-20T15:34:07Z","last_seen":"2026-05-09T08:36:00.697409Z","times_seen":493,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2022/12/370-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B5-%E0%B8%84%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%AA%E0%B8%B5%E0%B8%A2%E0%B8%A7.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/370-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9A%E0%B8%B5-%E0%B8%84%E0%B8%AD%E0%B8%A5%E0%B9%80%E0%B8%AA%E0%B8%B5%E0%B8%A2%E0%B8%A7.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\netag: \"484a-6396067b-5e77b3;;;\"\r\nlast-modified: Sun, 11 Dec 2022 16:34:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18506\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9Cm4Kcmr%2FblRwmwKChq%2F1OD18SZwkrmQWsv0ALQZKo4YtSwD75yRvc0BwFlmTZXoEEum3qj%2F9T2bjq85Eg0lvGfCAF6fQ76pWyA9%2BlgvPUwhMj4MYo%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fce3e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18506,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"f5f9f42f4078ce67e20821d5e25e839f","sha1":"fadee57bfdb38f594791c0cd6c0f01378c617c94","sha256":"d3d9ee7bcc642fc862bd60f7ac7231004754e829ec5ab7b001dec6f1cd86884f","sha512":"97ce7f9af850c5fb5cda52dc0ab2af08f403e7c82fb09806dfd2a737e31050f9af208c3c162624d4937f37bcff6d3f853c424688eb34a447e7eb1a6fc6ee64ae","ssdeep":"384:R7iCakSBPwwPTrKmOnwCPhXJNCQbfJPodNCcJmsCrzG7orI:ViCakYw6KjnwCPhlxPodUcAsuycI","tlshash":"5b82d00b7db19f29e7614c7c71f1aa79e19d0744ea982c0635f4db8d6f090f9822931b","first_seen":"2025-09-23T14:57:32.03085Z","last_seen":"2025-09-23T14:57:32.03085Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a6.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a6.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 03 Sep 2025 22:54:45 GMT\r\netag: \"1294-6753edbb-5e64e8;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:39:55 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4756\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 408471\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRUPQBgwFHkqQc1aUcR%2F15rOK8OhCxNsoHzP82m4vAtTwQ1uP076pxVcQ2j4iuboEXH6APoBenQp%2B%2Bj3TPrIvEYYBrEG7zmT7bwKJludFfACWp1Y9hs%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cce0d56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4756,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 172x53, components 3","md5":"2655cd037f896362c4dde85a9652cc3d","sha1":"98be51e5351d3ad21754c4f7cebc8cff012ff75d","sha256":"91d70b4226a3666a4d1d543d4a1a6a5d7a6dfda959f06603acd471737673e8c6","sha512":"10b306ee90fc0518749f9f2e0012585bb45f728770630ca47a9b4702d7b95da4ef0b9e0271c7a7624d419d755202d238c85032ad23bb99fd9c8087f59f2347da","ssdeep":"96:wTCt2lR262yyRviXiBXHdGIas44QBTXHeCJFj5VPcuoP8C:lUDyRviQXHdGIasQBbHee9Tcuon","tlshash":"69a15d4afc449361eecdc835a9fb8566dd100a94dbc0ee769cfac40770541fa96153cb","first_seen":"2025-07-12T15:14:53.622412Z","last_seen":"2025-11-01T21:23:20.082171Z","times_seen":7,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2025/03/paraweeka-%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B8%95%E0%B8%B5%E0%B9%89.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/paraweeka-%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%9B%E0%B8%B2%E0%B8%A3%E0%B9%8C%E0%B8%95%E0%B8%B5%E0%B9%89.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 25 Sep 2025 20:16:02 GMT\r\netag: \"71ee-67cd7768-5e7ce4;;;\"\r\nlast-modified: Sun, 09 Mar 2025 11:11:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29166\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 412859\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BuYgDA0vXVNXOsZt5iwLJu3KHiSaUihBxBh9F7Q4pMhQ3RvSxQxr%2FBzF1luqELKYUT3z7ooU31xJ1gPNO2AO1X7BTyqeXRkkvaxhjtRyD%2BRvC9R06M%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fbe3656ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29166,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"c0c9248bc7603510d0fc0e30af193088","sha1":"6a2c78bf25a3473db50a7336af052b425752d92b","sha256":"dfd4c57ba17a3fd02e1c4c98979ea7ca0fd66a614414d9318e87be7eef8453bc","sha512":"2c0e0ef1b87d3acd800600b323ccb9a92d0bf1e7f9a569964f22e7cdf2fb7161cd058961311a95f6300f62f35c191b3a730e6175f9c15beb84e2fff7b6755e88","ssdeep":"768:gOqVFmbTJnLzfjbpArPhDi51gdbmu+QjQyQGCsZlr:gOqVIbBLjjyViXkZQyQ1I5","tlshash":"6fd2d178be946b362870ef5c63f63e2105d2e3854a147c717ef609e692669330b43e23","first_seen":"2025-09-23T14:57:32.034185Z","last_seen":"2025-09-23T14:57:32.034185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2023/06/%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%81%E0%B8%A5%E0%B8%B8%E0%B9%88%E0%B8%A1%E0%B8%A5%E0%B8%B1%E0%B8%9A-%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5-%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B9%84%E0%B8%97%E0%B8%A21.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/%E0%B8%84%E0%B8%A5%E0%B8%B4%E0%B8%9B%E0%B8%AB%E0%B8%A5%E0%B8%B8%E0%B8%94-%E0%B8%81%E0%B8%A5%E0%B8%B8%E0%B9%88%E0%B8%A1%E0%B8%A5%E0%B8%B1%E0%B8%9A-%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5-%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B9%84%E0%B8%97%E0%B8%A21.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 20 Sep 2025 06:26:55 GMT\r\netag: \"6114-648ebbf1-5e73a0;;;\"\r\nlast-modified: Sun, 18 Jun 2023 08:10:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24852\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZ1ekpqcCnzP73xHjC7HC5mZlxsQyGD%2FRO%2FBrRbAV8CjYrK05ht8BiQz%2BigPCRfj%2B17IVrTdKhKb23WUuCw06zisEBh3a2HmS4ow6sNuC%2Bw70j3f9Sk%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fbe3856ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":24852,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"d4c3ff5611834166306572dd781732fc","sha1":"d707cbac229d69bb34348a34bf502d3e83472282","sha256":"d7df8af7c624c80685580400c5caf35e3d11910f0641f599896f4775b9418151","sha512":"4885ffb1a6954c7955e84f4b49d2aae4dec03e2d09b9863b94c40ee80556e8e8ed7fde2c4f712d54f8a89471a50ecb2d0073e7921fdf494d9df30441968088eb","ssdeep":"384:RDhn4OWb0RaRBuNW/BIilJkDSEWi5bumXUBgkqDxTlpKkxFo/O4bzi:zn4D4QWmbk+ElUbbusqFQ+","tlshash":"60b2e16795a93b51e54cce34fcb2ab113d1b2ad884a1a3c87afcd0006a6b0edc76310c","first_seen":"2025-09-23T14:57:32.035709Z","last_seen":"2025-09-23T14:57:32.035709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2023/01/%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%99%E0%B8%A2-%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/%E0%B8%99%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%99%E0%B8%A2-%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B8%9A%E0%B9%89%E0%B8%B2%E0%B8%99.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\netag: \"5382-63bbeb6e-432e59c9;;;\"\r\nlast-modified: Mon, 09 Jan 2023 10:24:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21378\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RRsSxqxeTd2MNLKT2rGrFHKA6y6R030rEqOEFVm0goxyUvNQZgefLwUTFeKIyJU9o5EQ0v7QBThbWeshwbAwexl2s3MSYrVjIv%2BN1JSMubRMpFsPaE%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fce3b56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"d7996dc1458020b691c6014948b11178","sha1":"fc788fd8db483c027916f372422d800f88d4391e","sha256":"3c59723111f320b44c87695bccfdea2458c9459a5b3d089faa188f55c9a606b6","sha512":"1c3318cd01a7786ab21e0c1b18609e40cb9cfbfdadc1cc0e5a05ac4332febd657e4cf9d2d2fe8efb99309684e603fc100d17984df302ee762a6c7017ba5a0e3c","ssdeep":"384:FO5UvIDAaA9gsJUAtpM3qLjzGEXtn1n9J48er17O47axLbkb/g2p:FcUvIQ6KUepTDGWMZ7/7aFYD7p","tlshash":"b0a2e1416d74bb49985cbc3934f5cb643c1d5a484e73a0598cb5b80fad0c4ef620d9e6","first_seen":"2025-09-23T14:57:32.037355Z","last_seen":"2025-09-23T14:57:32.037355Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2022/10/169-%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%99%E0%B8%B1%E0%B8%81%E0%B8%A8%E0%B8%B6%E0%B8%81%E0%B8%A9%E0%B8%B2%E0%B9%84%E0%B8%97%E0%B8%A2.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2022/10/169-%E0%B8%AA%E0%B8%B2%E0%B8%A7%E0%B8%99%E0%B8%B1%E0%B8%81%E0%B8%A8%E0%B8%B6%E0%B8%81%E0%B8%A9%E0%B8%B2%E0%B9%84%E0%B8%97%E0%B8%A2.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 30 Sep 2025 14:57:01 GMT\r\netag: \"5ed1-635a53c0-208840f4;;;\"\r\nlast-modified: Thu, 27 Oct 2022 09:47:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24273\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYPZtjXJrVsFE%2Bsv27Cq8T3XDyDkQqKoAjRY%2BEcjd5ngcY6yY%2FH2woczhTcbhAdoX9XkrLk4wsvVC9qU6ruY6lxz5w%2Bt9mQMC%2B8Jkks3LRvp6t5hWoI%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45fce4056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24273,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x224, components 3","md5":"db4ee284400299ea3d3ad891ae8f7c98","sha1":"a782dc1c927a581bef75379eb95afe99b0475c03","sha256":"8052571ba81d530141cddaf99cb1afb455d6233db80d56a0940ecdc2dac2ddf0","sha512":"fd01a687bbf1f145e5519d86857e3dba1b0c5d2790e1fc4dc14ddf918aef53c88c246690742df29494d764cd0995b8f5593ca40431b6b96b3e7333cdd19568d1","ssdeep":"384:6SYKVlCwJZGBy4p/vz1ZGnxFGohngtVgkSUPnI0TFYHld2aRrPdA:NZGBy4JvGvhnKUJHXY","tlshash":"13b2f12612637b84e887e1353df2534187ba03120fc946f6b4f9e872d2768719e2d664","first_seen":"2025-09-23T14:57:32.040657Z","last_seen":"2025-09-23T14:57:32.040657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-B5RPZJ31PY","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-B5RPZJ31PY HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nexpires: Tue, 23 Sep 2025 14:57:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139312\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":418221,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0604f846d3108a0138c5f078fbec7058","sha1":"bcaa6a555e49d39f8ec9c8742633421f5d658520","sha256":"a443053928b6aa83f765f19ed1954ddb42ea5a82aac42a2d79bd8d12f0e40f2c","sha512":"865edd0cd05b8359775b2846b21a21251f4a67df3287841279fe917020ebdd9e871d56a160589f46380f90cd5abd7b3503054f321b4d96d70903ea9bea0b093d","ssdeep":"6144:PBawEqNrxY1D2im0DgfI2QNTs7eAT/PK1f2Q:5F//YN2ixgMAw","tlshash":"39940bce73d674665396f078903f018ba5bb28a2b45cc895f189cce42e74a9a4137f7c","first_seen":"2025-09-23T14:57:32.042621Z","last_seen":"2025-09-23T14:57:32.042621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":178,"dns":0,"connect":23,"send":0,"wait":41,"receive":60,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a4.jpg","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%97%E0%B9%89%E0%B8%B2%E0%B8%9B%E0%B8%B8%E0%B9%88%E0%B8%A1.a4.jpg HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 05 Sep 2025 08:23:45 GMT\r\netag: \"5686-6753edb9-5e653c;;;\"\r\nlast-modified: Sat, 07 Dec 2024 06:39:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22150\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:00 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 324663\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pDCAmsgcNDL0Ph%2FWX1HbDO58TT%2BvIaFuUaczMfguDshUqltJ261y4UxUW%2Bha4rAPgfhXxPq35XNUXiH8TH6wiAoUo7gnF9L17eeZYE%2BU6ghmcgJ1Ws%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45cce0c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22150,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=53, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=172], progressive, precision 8, 172x53, components 3","md5":"7f181207c0579baab01bfcf19550d395","sha1":"e9e926ec665e6c5005e85b3f5c0ba6c4aaa3cb90","sha256":"05c3c9192386f0914e8ee12b55620bfda6115aae9ee28cf883f1059ec2a5e8c9","sha512":"7fc58933bf3b3b7eecdcc8a9160207e1c0845536848e6b0b5cc7cd3dcddd491f36bc6782f087531dcb75b79592922438f20a9c8fd97591e71c06818907c8d354","ssdeep":"384:mFITO7iQFITw2e/TknCsDrQAWCeli4ksa3Alxyny:mSTO7lSTmwC9tksa3A9","tlshash":"eca23a16bb41de12fcd4253188eed27297a36ec45f63010abcddad433fb16918d9e582","first_seen":"2025-07-12T15:14:53.586356Z","last_seen":"2025-11-01T21:23:20.057644Z","times_seen":7,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/stylesheets/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/stylesheets/font-awesome/css/font-awesome.min.css?ver=4.7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 09 Sep 2025 00:48:54 GMT\r\netag: \"12d68-6776c077-20881aaa;;;\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 77160\r\naccept-ranges: bytes\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 22989\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhmvTeNoisYPbf6f3x%2FNctLcJr5%2FZK0oHEKqBszSESGaKPs1oA9F%2FrBiCKV%2BXKuStae3MKEbhETSzXrEoosFYKTHZHq5EAWtRHtQJIw9Y0epiemotko%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 983ae45f1e2c56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-05-15T15:20:19.246473Z","times_seen":468612,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.2","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:01.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.2 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"4b33-6876ead4-208814e9;br\"\r\nlast-modified: Tue, 15 Jul 2025 23:57:08 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 4724\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TbYCOlUZdLR%2F0F692gLnWsAmwawptY%2BmFCy%2BMKfstafgjsgSy7uzesD5DW396Xtq9fbHRh%2BNQcnPiTaQNBHXZ7uCkCtRVbskjrG1rOmmw08loUhbOv0%3D\"}]}\r\ncf-ray: 983ae45fde4256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-05-15T15:18:14.353229Z","times_seen":204536,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--4-2xf5bza7abw1ml.com/wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15","fqdn":"xn--4-2xf5bza7abw1ml.com","domain":"xn--4-2xf5bza7abw1ml.com","tld":"com"},"ip":{"addr":"104.21.4.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/","date":"2025-09-23T14:57:00.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--4-2xf5bza7abw1ml.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 16:32:36 GMT","end":"Tue, 25 Nov 2025 16:32:35 GMT"},"fingerprint":{"sha1":"01:B7:16:B0:25:A2:AC:4E:E4:B8:DA:5B:43:62:8C:D1:AD:42:27:A3","sha256":"5F:6D:B7:AD:10:6D:8F:21:B0:C5:C8:17:51:2B:B9:05:6D:BE:6F:D3:60:C0:06:5D:B6:39:2D:9F:B1:33:0E:78"}}},"request":{"raw":"GET /wp-content/themes/retrotube/assets/js/jquery.bxslider.min.js?ver=4.2.15 HTTP/1.1\r\nHost: xn--4-2xf5bza7abw1ml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xn--4-2xf5bza7abw1ml.com/tag/%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%84%E0%B8%AD%E0%B8%A5/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"5ebc-6776c077-20881aa3;br\"\r\nlast-modified: Thu, 02 Jan 2025 16:36:07 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 6023\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 23 Sep 2025 14:57:01 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7%2BkQ%2Fap9ltwdIGEqVCgh8S4Ayr2ZxMpzf03hWI%2FUv3vf6typ%2B1%2BwDffNFKsQFQeidCRaApMyz2K9n7jV0raPXgLer26gKVzQtYrX%2Ba4kF70kiqSpwAE%3D\"}]}\r\ncf-ray: 983ae45cde1356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24252,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24063)","md5":"c675495748ef0df6858b93dd9e623c46","sha1":"e1be723e4e25d37282821c50b7e12796d3df5f8d","sha256":"9a32744fa4707d6ea1ad2b696c644c4f45d327509989b4625b8a980e4a45e271","sha512":"1775ad0e5bc7d3cc9ebdd032b94e440a0872f616f983ff867511984daba748ed52e1de5c67f0e4648947bef65b499b3a6197ff7726cf1f481b7d4253b6711127","ssdeep":"384:nudkTa6bYaGQZKbZi1X5U59g+rzyPSS1SMVu8r2WiWQK7XYANWck6QDhC2k+0CMu:uv9gPSSbs8PwhCK0CMl+ArJwz","tlshash":"e6b2b609b13939be05f632baf25ecb0550f6448d9827f0f4a8b5c94ddad88d4102fbe6","first_seen":"2023-03-07T01:15:16Z","last_seen":"2026-05-15T13:01:41.850512Z","times_seen":3980,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"xn--4-2xf5bza7abw1ml.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}