{"report_id":"cbbdf8ab-54b8-49e3-b2e8-0f15d2c69529","version":6,"status":"done","tags":[],"date":"2026-01-07T00:49:23Z","url":{"schema":"http","addr":"mail.give-rewards.midasbuy-page.com","fqdn":"mail.give-rewards.midasbuy-page.com","domain":"midasbuy-page.com","tld":"com"},"ip":{"addr":"43.160.250.121","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"mail.give-rewards.midasbuy-page.com/","fqdn":"mail.give-rewards.midasbuy-page.com","domain":"midasbuy-page.com","tld":"com"},"title":"PUBG MOBILE","dom":{"size":146434,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1906)","md5":"e2927c3dc6b33bb18bbe3ea986eb1a0f","sha1":"7125ca766c6cc6a9d5d0a215a41526023400a733","sha256":"6bd2e96202fef1d22aff7dd85626aa40d35433e35f09592c8c9211ecfa5513bc","sha512":"ad512d7adfc53a9f6da413ff5c85785ce2add0c23090807848c0bcb866f37991352aad7b9b9ec4334780545a4dcfe49113c30c2ab2430946eda67631e917d3ac","ssdeep":"3072:lNGMurQn302S2urAf4k0F2oxTGqZxPdf2cU/vLRdE:lNGMurQn302S2urAf4k0F2oxTJYs","tlshash":"32e3aa7051f2917344b781d2b6a99f2b3fe49617c967090636fc2be01fdad8bac1305a","dom_hash":"domhash7961b76171f7fecafab14ba0bfd58274","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.give-rewards.midasbuy-page.com","fqdn":"mail.give-rewards.midasbuy-page.com","domain":"midasbuy-page.com","tld":"com"},"ip":{"addr":"43.160.250.121","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T00:49:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-04T22:27:18.120727Z","alert_count":0,"request_count":2,"received_data":36489,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-01-04T22:45:39.840493Z","alert_count":0,"request_count":3,"received_data":264152,"sent_data":1347,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mail.give-rewards.midasbuy-page.com","ip":{"addr":"43.160.250.121","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":2,"received_data":2518,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-04T22:21:06.427471Z","alert_count":0,"request_count":4,"received_data":398857,"sent_data":2011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"jipang.fortoday.asia","ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2026-01-05T04:44:03.575122Z","last_seen":"2026-01-05T04:44:03.575122Z","alert_count":243,"request_count":81,"received_data":2697455,"sent_data":38448,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"www.pubgmobile.com","ip":{"addr":"2.23.13.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2017-10-18","domain_rank":76737,"first_seen":"2018-04-27T11:06:13Z","last_seen":"2026-01-02T07:37:44.117691Z","alert_count":0,"request_count":6,"received_data":249605,"sent_data":2768,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":25585,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-01-04T22:40:02.941781Z","alert_count":0,"request_count":1,"received_data":93697,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":1,"received_data":16099,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-01-04T23:46:08.267685Z","alert_count":0,"request_count":1,"received_data":31896,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-13T19:30:59.184465Z","times_seen":68897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84245,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:37:50.195817Z","times_seen":58573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/gift-zone.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eea5ff01ef517ae1846c26b99688135a","sha1":"4fb74d0214b456d89d17075bba66bebd7bc3e2cc","sha256":"8d1fb3c5d89b26a6fc1a464659e14ce36cc3c17700fbe860202c96110729bee9","sha512":"2caba2d4ec36e8132581608b313ab093cf63d9bc720ec505df0c42c847cbfca49c8725e2ada2b1f9d694a91032ded8a7ca4ce788706ae927baf0b2d47adc1caf","ssdeep":"384:KhiSpB/52CZ3UTjX+uubYRA0VNFiubsiV1Ft2Rarjh70o0AGEBqCM1:KcwB/52CZ4FubY20Td1iRm17z0AGEBqB","tlshash":"4462f8e34acd34d06a2df160f73ee199875609b9289d84ebd4277a62690409e04dffb3","size":15039,"data":"","first_seen":"2025-08-08T20:20:24.979512Z","last_seen":"2026-01-07T05:28:10.107521Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d19a56583c79c9ddc4aa83bf3b8eda2","sha1":"739b5f1df9b0bf85acbb525dea0ecd32cb3bf3a6","sha256":"d254c48b26197d2d8fece7e61280d5fb2c73e169c961c0453b75f78bd4aac6bb","sha512":"f75f13647fd7f67c730f47fc280ab108084f941425583865dd9d821accf20241d09e64fddae385d28adba0d8a949bb24498edf0476b33e43c02f305acea8d1dd","ssdeep":"","tlshash":"beb01250830c8709025b50e1833185c439bc8332f8005d40fc0d1bb0489194c9306330","size":105,"data":"","first_seen":"2023-06-20T14:57:33Z","last_seen":"2026-06-05T03:08:03.297402Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d0a76198143f27ce3baeb5be6e5215b","sha1":"cf3b632b2802998a6ec0420abfac950fae3c2ce9","sha256":"288d25987b3368eb994e5c7c8d6e0498c78690d643894d9ad7dda85c2de371c3","sha512":"a85574f68f72875fb7f7f8d82cbdd5cc262c893c6d5690219ccc058fb69de7775a712c3f914dfb1bc95748f2b996aeaf2b7ff6ac22770734a3101ce1637641ad","ssdeep":"","tlshash":"871138291361183a41ff22edf78b53d971210013714794b07a5d6f066f526b5c923bed","size":977,"data":"","first_seen":"2025-08-08T20:20:25.091152Z","last_seen":"2026-01-07T05:28:10.134304Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.give-rewards.midasbuy-page.com/","fqdn":"mail.give-rewards.midasbuy-page.com","domain":"midasbuy-page.com","tld":"com"},"ip":{"addr":"43.160.250.121","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"78008bbc7787a8e1da514f7d25ec332c","sha1":"22cda4d67fd035d5eca3fa574837bd3f3e8bd486","sha256":"c64dcf9b406eed7ecc6d5f56157fb28d580a4b70d99ce8660a3cb38b20c5bceb","sha512":"1925c999d343e035bb58ba35e46f4e79216f29fcfe1e0576484e642b97a04eca9b5ba2171e9389765748f149dc6210ea2a88ad1481a1f76e4ac6d7492df4b430","ssdeep":"","tlshash":"56d022d33c1793352d590296275fa0d8289586336915c438bcfab7000f70b43b506be9","size":208,"data":"","first_seen":"2026-01-05T04:44:18.372217Z","last_seen":"2026-01-07T05:28:10.1351Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6ee2daa20c27ee69e42acf035afd0ce8","sha1":"42ab9e2253fedc79a20ee608705ed064486f4ccf","sha256":"e8e33e5f75348d44a11f75c16b78716d3652f8f5d524bd5301d419658800478f","sha512":"c3960f6550bedbf8421f324527658a3819684bf808140ff482d0ddd82837030a7582baf562ee40aa5dac9a21548f0717795aba8c4cb03b09f5348b7847eb046a","ssdeep":"192:G4cfEmAM1s66yU1w1bR2j85FCmrSZ7sMjZ3L3jVfCwXFk0ont4qd7Y:G5fEmAM1sdyOw1bR2vCwZon2qd7Y","tlshash":"c6f1ea7afdc2676223875e7af72b00d4c726de657d004e8ee664f8847942b31e492970","size":7982,"data":"","first_seen":"2025-08-08T20:20:25.10258Z","last_seen":"2026-01-07T05:28:10.13584Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c26a9ecde657fc5ec86a1ea15631045","sha1":"cf5519ebd8aea2cc37e8fa6e8b403c89731fd0a6","sha256":"d260de3b6d9028274247656fdd4a53918748b67077a15528bad581bda44cabdc","sha512":"2e83d4d6bdc7fb54708b294db59ac9ee6e2e919f722844176714a7657136d267859fb5241b69ebddec7d1cf05139a775e3754cb2890801daf915c3383e29bf7e","ssdeep":"","tlshash":"c7019938303809690e9b33e0178a3eea2544d5cba302cc59731f432f778e1592a7adcb","size":720,"data":"","first_seen":"2025-08-08T20:20:25.093849Z","last_seen":"2026-01-07T05:28:10.136548Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84320,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:57:41.25068Z","times_seen":15308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/flaglink.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71265f03b29f12786fa4875dd0fcd969","sha1":"dfe93bb771002f96dbba3741677b6127dbac7c68","sha256":"93591bc5651c6e9b71c21693b9cfa0f7b893ca11b479d47b8fb5d2f50341d2b4","sha512":"21f4998d8329e4bb98006930e6310b7d5d4eea14ea5cf601c59f7a82d28b7a6f6a3bb5805df1f9292a93d626b7e834029011758c1b486f948858dd432634dd51","ssdeep":"1536:vAeva+GGnn5tjvy6h5arX2C8dA+pnOQlddbv7ZXyuVr4Vrv6kHg84g+ELXJOpja6:xvHGGnnLjDkzEnJdVr4VryJEZ5/Cb","tlshash":"b02458a3e635ab3a36d136349a0f73ea4d8c7ddac68c44c82ac36dcfd7745e26518184","size":212386,"data":"","first_seen":"2024-02-25T12:54:42Z","last_seen":"2026-02-18T03:17:17.908198Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a94b1ff5c0914c3ec4c0bd4f17efb2d","sha1":"5aafcd03aab5870e8316a92870fa2780342f13bf","sha256":"8757ce5f4ad9dea63b4490a6a516ee73060a55e94ed7ebb841b751676809ea12","sha512":"1b162368af8c21232cc6abeba99f3fbd9df22dd1fcc7ce27fc9cdefb517828ee5c4927532fe8c85925068bc4095d0e572e3334615de2235ca799b1149b31ad7d","ssdeep":"","tlshash":"0631311934602038512332751a5fcd1ab8d5e12bc015de02be9cd2213f91e9de2fafe6","size":1509,"data":"","first_seen":"2025-08-08T20:20:25.096332Z","last_seen":"2026-01-07T05:28:10.137324Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2910f36c7989d9160dde89c726d9c488","sha1":"14479574342bd2da9f72443e5b7f38bed2f5476c","sha256":"5bfbbcfeaa482b12d3da31d958dab4ef343c09e463cec2177cc1ccdf23c9ca66","sha512":"e671f9e49699439ba3253b4d1acd9793b06d88e88e9f5ff4b694c5e29cae96ff88ef858bab3871612f7e6beb7a797e219135b9bf366d70b1310b5ddd3eef2708","ssdeep":"","tlshash":"d870000020000c000020a2ab200ce2e000022008f08088822008e02e8a3208088cc200","size":25,"data":"","first_seen":"2025-08-08T20:20:25.100602Z","last_seen":"2026-01-07T05:28:10.138102Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T19:33:33.1292Z","times_seen":368261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.10.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93107,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:54:33.040526Z","times_seen":15655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5145b4846f0a79c2aa5d41676fba0b88","sha1":"f105f3f4664d7931d8c5a66b7fb0c8f312a43e63","sha256":"f6c741f1e4b1962adba760419d4c448beebb25a23cad5bc90407c5c93c83d6bd","sha512":"716651bfa6933e7422a21920cd89091041af0ca2cf3dd3e2b91760e0ccd4d0c7c4c3f108d0d47a12a817c5158e8ee0ce9e8dcc43f4b499d2c2baccab1ff08368","ssdeep":"","tlshash":"93f0e2e4f5b403c8125fa0b3243b80007ebe750be68da522b91d60c85f867a0a57f72f","size":608,"data":"","first_seen":"2025-08-08T20:20:25.106028Z","last_seen":"2026-01-07T05:28:10.138892Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@0.3.8/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","size":17266,"data":"","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-06-13T06:52:26.301698Z","times_seen":1626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/slide-zone.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51fa3cd57f3290182f63a907434997b1","sha1":"6cdf7e765b8bf86a9b09f9f21550bfb98d3a638c","sha256":"c4e61e17585e4c2766ab32ba010c88bec63fb51e605ba374099f1b2516f906d6","sha512":"a40c6ecff7d049fcbddc32d53e8a578b31061372cf090a9dabff5255c239d936ef3f8f4fa701c8277c968063c2f634d39ce5422750936214e2013689a0556b04","ssdeep":"","tlshash":"a711c606d0182d5c99b5653caf6ddd12d8fa08128d09da80fce8905f5ff0e1572deaf9","size":940,"data":"","first_seen":"2025-08-08T20:20:24.943105Z","last_seen":"2026-01-07T05:28:10.086928Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"afc22e8e3be45d7aaeb1e024e07858ec","sha1":"5b581ec2739022a3dc0dd097639836f17ec22bec","sha256":"35b9e9004d8051dbbe521c55faae29e39e646ca56fa654232359be58e42fc66f","sha512":"9cf66f16c8ba57f8565cb0792f3f7b7cbb43b97b51c1011a1f14c1bc81c4bb92d2b9ce8f0c01a6f19dfb6223cfd8893813db97760cd0c098e7d03813aa80592a","ssdeep":"","tlshash":"0a900441400d3354c45c03dd75d00534417c437044374d14d13d4d3f5c0444035dc504","size":39,"data":"","first_seen":"2024-01-05T16:39:51Z","last_seen":"2026-06-09T03:21:52.04577Z","times_seen":423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/laza-slide.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2dac41498cb2950e303c5e78fbd10ad3","sha1":"0f48744da81ce0007cd2819b17ebffa153d253cd","sha256":"ec11f49e96a1c0bcdb253c9e6835331c2428a7a9f53e071df199540bbf805e99","sha512":"1af2359a56449af7e75e6fb1fe8d389f969facf53973f5f7dc95a9bb791f5703ac83b71e8a656d28bcd3ff066cce2e7ef1076f5e26e73a38aeeb550fdbb10078","ssdeep":"1536:jKJSQfGoh04w8NOLjuBEFUjF3j7Mt0Blx1hFYkEl+pANMtkOmC1myiBnmYlXv9I1:WJdhdNsMYkEsmZBn1v9Is2ohDvaDYU","tlshash":"a3e3e789a261b67646e3169b93e8c211b3b50540b409c8f470fd4c9f597ec9813feefa","size":153571,"data":"","first_seen":"2025-07-30T14:27:42.363403Z","last_seen":"2026-01-07T05:28:10.052387Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T19:33:33.1292Z","times_seen":368261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/validateLogin.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b880e470837853360570ec8c04c13780","sha1":"09ad03b3be7d7469ec5d71045eadd88fabccd756","sha256":"3c32d9fbbcf37c5a33196abf5bb7671d513346b299a7e2241b101880f605d145","sha512":"925efc9131f2111ac6300e686334742044f6e326451e1eaeddf5301a3f72a8dfddc82af9736cf6ff3c849cd971d991146019a6408da60ae3a2278ac6894552e2","ssdeep":"384:XYXGinAiZjQ9Ab8vMOOl5OXWpmTpKOQRIC0v8yThxbw+MKbkDlmd7xxB6oW:eXndZ7l5sbTW","tlshash":"80b29a49b2041e955932e6b661b74004ff2c591f05028f09f8bd59c82f71f9afeb6e8e","size":23625,"data":"","first_seen":"2025-08-08T20:20:25.020703Z","last_seen":"2026-01-07T05:28:10.049932Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8290bee0eb42a77cd103777c53b216d4","sha1":"940b169fa1576298a80b1100050ae49107e6ff28","sha256":"d6637d256fa45609fb673a18abca9fa7eab93f628d0ce0bdcf8ff2e6b4b870ac","sha512":"c1b969199b57ed9b82a9161c549750d14fcd0cf1a3628d4ceeb192f265adafb89503e82cd9f1fec9bd287675a7fcce8bf4aac51e4bb317cc67284cab9d304713","ssdeep":"","tlshash":"7ff049648b0ad3a644833399547fd5171eb2f4789229b0c138cdcfc305f4b7451758ba","size":646,"data":"","first_seen":"2025-08-08T20:20:25.107923Z","last_seen":"2026-01-17T01:41:20.615195Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/lazcode.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7f8827d2fd837c9c2459976bb5afe69","sha1":"70d28336f0ee3f630e01a3a63b08708f5934cd5a","sha256":"fcfe0b657446e22a58de4c5d512f25bb9eca825c219dcae53e15e9688baf618a","sha512":"f54d882a01dbef351621b86b5dd1fb395765a8209f09bbaef0c19c734609fef5eb19f38e2d5de8eab61bc65aa0b323a161bdd8cc4aa2c26985e636c7f22e32d4","ssdeep":"96:mh/HIIJuZPmumfuJblun1Q3/JiVn3+6i9QBUHi7TF1b8MBA8:mC4EqcD6i9dHinF1oMf","tlshash":"d1b13184b1486a1a967767ba827a7104fffc100be2454f08f8fd48c52f744053eb798d","size":5260,"data":"","first_seen":"2025-08-08T20:20:25.078743Z","last_seen":"2026-01-07T05:28:10.111733Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-13T15:52:38.645184Z","times_seen":4470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"79c215027f08cd82c529a10402c8b253","sha1":"99e302dfaec95f521c1deee55d07fe431578dfd1","sha256":"6e6f81dd25c454e564a7dd6db3c735f45dbe63bc45aedfc18d6c63fa82b0934d","sha512":"58088a5766f6ae5f6cab1a8baf2234da56d9ae35b6591b0f51b50ea2c1a9c685966838cb26c2c1ca455d53cec6e2876e691baae9c170d5604f64f0724fc68119","ssdeep":"","tlshash":"497000000033c00000cf00c00030003000f03300c0000300cc00cff0030000cc0c30c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.382466Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"249ee03bf7db43c6f29e76ba6404b78d","sha1":"9b4125a177d266bfc1519b6335a3fbda4d67c5cd","sha256":"3956d7cb31e362559ca075d5528bec5005aee524c51a9f77cd9455d3f41615a9","sha512":"51185abd97f31e023d4cf51144580bb51c4c0230021e6191affe6bcd0972493c3c663ddb53d6bfcd452d9c4b09f93952799c4f7d55339b8361113dbf7ef24e8f","ssdeep":"","tlshash":"997000000000c0cc00cf00c00030000000f00300c03c0000c000f3f0033000cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.430637Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4faba762a8b0eeda162b204eacb9c3af","sha1":"9b9ccf92f9811df1df8ea6d9d4cd650f8719d23c","sha256":"67a750f06cb8461db3c08f09cd4cb51932b8f99be5afc6e97b094be20ff17b45","sha512":"70e70ba41601a9fe1ec144ba99d592332ebfa2a4d4d9d79a555622155e0764be03d2d705df58c25380223e868e2ce5c84a44c54a95ddb69acf49519517d533ee","ssdeep":"","tlshash":"6170000000c0cc0000cf00c00030030003fc03c0c3000000c00003f0030cc0cccc3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.417496Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fcf74b4a77f8a18258dfe246846fd85d","sha1":"4c9f24c70f5d69ff80690a78e47f62c2ef9b8fff","sha256":"7a519afdf92bd1373c0aa3900c6c455811f624a070d68cccf5da124e6579f54c","sha512":"dc827220ccf2c5ec3426f6a80bd9fae99c5659bc936d2baa4fba0b9c07f6bec8664dd0e0809f6221ddf4251b3f278ad7e71b1e4a9b738b440773acd1eec295d8","ssdeep":"","tlshash":"167000030000c0c000cf00c00030003000f03303c0fc0000c03003f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.414696Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1fdff8c34626da4017aff0a2821d8b13","sha1":"55f2cd64499c15d5984aab9866dd55d365ccef23","sha256":"b3dff5aa27eafabdaad74a18cff6b5fe4c1d8f3772ecf27d7f97a929cb88de33","sha512":"12a4a8ae51557b64e6f163e5e00280848a72f3dd76e14dd56412fc97333a28201396a2c0ceff6fecb96345f552e2108a863df9ac2736d70e65a1366747206954","ssdeep":"","tlshash":"6c7000000000800000eb08c00028088000b20302c8800088c08003f0028000cc8030a0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.40631Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"680fb8d8d22989bb18183258dcdf9f56","sha1":"57474cf81ab39e5b093493d0c35d048cbf466fb2","sha256":"2e2f7a853d7480bd50d7021551e427eadcf5e7814f07eaa47ee2542835a512c3","sha512":"7eb04dfb32439f24cc67ca37a6b2f9349bfa96f271a5e33f54336497a2bdb93f3528d2c1221a387f1cc4a2b2a982a48b313d3a84ee454cea5c9a42368e1166c7","ssdeep":"","tlshash":"0e7000000300cf3000cf00c0cc30000000f00300c0000000c00303f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.440825Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c64569b31d5a228f032c7af0dbbb959e","sha1":"e73d60cace93a0fba385efd2dda2fc91144b857f","sha256":"faff0e661677302655ef41c0fbef9c2a414473eb4fc91717bff201e5d58e311c","sha512":"5efb141ba1f51e65821fd3476d2ca7f73ec11a7aabf1cb3ccb2d533372eb742f7f49f24324e6ce044e5364558c0cb8aa41d6853ee07b30a055c1f3c8188dce0b","ssdeep":"","tlshash":"187000300030c00000cf00c00030000c03fc03c0cf000000c03c03f0330000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.375472Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dbca3d0c2e30aec4bb8135129e26071e","sha1":"c9e1cfe63d9ca153308d08d009b38f5281ac9073","sha256":"39e9000d8bf5dab29600ed51f277c601b33e2950a545e583542b9bd68cb9b1da","sha512":"5cd62ee6a5a51902cad5e230e616dbfb9b1765e6b0d981a8a94b9f33cc238af64c8d54b2e4fb92ba0d1008ccc2f570821fae447c400b8170668050fe49d5781b","ssdeep":"","tlshash":"867000c00000c00000cf00c00030000003fc03c0f3003000f00303f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.376039Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1f0abd9d8e8190ccb8b56268b03eb97a","sha1":"852e909d6d20f5672428502ba0541fad7f0ee2c1","sha256":"a14c6fff6bca9d195ec25fe83830d69768fdb69b0fd1488e29cc7ba00ca04755","sha512":"7d8b11bb30b489f3247b3566fdc6655be78ce35914b1cfbf92f0781be9d349cae704d45c1a872c9edbde2d30d90a1926e18c7601951fa3bf26f450f3fc9a36b4","ssdeep":"","tlshash":"617000000000c00000cf0cc00330000303fcc3c0c3000000cc0003f003c000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.403133Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"892073ca8ede08c4c19af3b85f4738de","sha1":"eabe1476df968605084d2546e97ee712e62657b8","sha256":"ebb8dddc409d0524ba533290ecbe2f1c59ada52063109d097a5617ddd53d514a","sha512":"e9f5b86eb6dc832694430db0cbb55360951151a9707f86d7eaa92d7e965efdff635955461fb743063d776952c66e55ba4e3f3e8d8af6a35f3fdb141dad5cddf6","ssdeep":"","tlshash":"b670000000c3c03000cf00c00030f30000f00300c0000303c000c3f0030000cc0c33cc","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.382948Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d3b57cc7a3f68972d1d815b2b7c9d262","sha1":"d753b0fa88877e503d25cb2d4f84a46b742ea90d","sha256":"faf7526df94ba09d8201c854b3605295bd6c991b47bf736166a418e3f86ddf7d","sha512":"d7d485d7e0940479b9ba585364eea0baa6d4fb2058eafe38012c8395c1ba5a146d689752414d9ffda3c0301a22246eb83dd2afef3f426e88ae9f63dc3f4c963b","ssdeep":"","tlshash":"b070000000c0cc00c3cf00c03030330030f00300c0030000c00003f0030000cc0c3300","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.412517Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3a3037c3b96ff0a3193bca0e7f88aadc","sha1":"76a57d086b2730b9f8ed53d9d436cec27afd6f25","sha256":"427baae29ffa2912b54f3efe7289d6feb962258dab66f3e66fe7f97a74c05781","sha512":"7816d8cadde05ab305d89cbfd7942d9bd1cbf53c42ee1e8ceb55f365fa0a96f4872973ce2ee0e6ce106811e44c96cdcedff2f0a261dea361130b9efd6f351859","ssdeep":"","tlshash":"777000000300c0c000cf00c0cc30300000f00300c03c00c0c00003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.413549Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e8af7d0f5e6370da8570b377c888d9c","sha1":"c2de01f9d3daa641b9401c4e55770b1a4bac5b4b","sha256":"8ef50bb1bcd890c39e916c12f6eb9f1db9c08bf1e326342d1cc5ebaa4fe446be","sha512":"626a0da759cd83929530eb12aedb1a5f908cc44f57a516c6a5e1c766cdcd0ac7c20e29dbd1d441ed3c159d9679001a2f77a4ea7bde2504b3ca7051163dabb4bb","ssdeep":"","tlshash":"cf7000030000c00000ff30c0003003300cfc330cc0c00000c03c03f3030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.427286Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2eabd15d7fb48764ad68da88149d6155","sha1":"d8a3fe7e022a7625954db8a68c259d8195898051","sha256":"7cd8d5733848900383d3a6998886c7cdfd5a57eaa280c916d7c39c84c91faa3a","sha512":"c82d9f451841bfcee8b64252d16b2f30471b0ba326df9e334f5cd1ce3267ceb43ae2a62ee411d8b584822a2ac4d1f99f74e6f6c6f11c383a3531e724609551ad","ssdeep":"","tlshash":"29700000000fc03000cf03c00030000000f03300c0000c00c00cf3f00f0000cc033000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.408917Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e4c7a3c9e72ec837c02a88cbf6b7a80b","sha1":"0444c709587d095566e6bebb1d03c22291bd0784","sha256":"dcc572e88b89cf5f1e285e3ecdf898574e421fcdc7edb5e215a334161e7a23eb","sha512":"c779a1cd14a13e9171ce59fec3f728e3e896e6527a35e041c758b215a964243e8cdc901dc36d1f1c14be877ea410e571c095d4dab75f9f13c03b09f60a6425b4","ssdeep":"","tlshash":"ec70000cf00fc00000cf03c00030000030f03300c00c0c00c00003f0030000cc033300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.403671Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d376a619d339b30958e60e92b3613146","sha1":"28cc836bf9fb7b587bfb4b7159862e2adc8d432e","sha256":"ff4ce15fa895a6743337778c3a010eed23f7ffc99a2c50f64ccfbd6ca4e76dd1","sha512":"831107c930076ad9ea26c88529a8e5880280c768b5a88ae5a39243b051d256c860bc443734f82e086853b1faf89fa9a7179faf8842db03be7ca8bd54cf302159","ssdeep":"","tlshash":"8a700000f000c00000cf3cc00330000000f00300c30cc000cc0003f003c000cc3c3300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.383476Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5d2dc822e8d4f0b306ca69e54950679d","sha1":"ec5cf0bb110d219d7e4bda5d14c0071c703cafd7","sha256":"374f328ec9257ea51783a844612b0d075cc7ecc70805534c0224f44adda5e069","sha512":"af8d84cbf0093e0a52753c419f82290b88aa4447ce835cbb5deb78afa02f8b7499b160dc86850d0bc7aacd72f6a5a8596413132a37d8786c5e4cc92637cb5ea4","ssdeep":"","tlshash":"d0700000c330c00000cf00c0cf30000c00f0030ccc000000c03003f0030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.39871Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f5cab08d58af1c86a04a9231f211264f","sha1":"f2d69d788b83bd5ae40c26941d0c498b2fffd6aa","sha256":"f17b1d59157c1da10c25ba260aee32275310e2af951352611a5d40acee244cd0","sha512":"96a611175cf28ef88b66dc11d964de97377dc8f8b0672a69e311b96fda1431cc9f9de700ba3f3f210ce8815cdefcef15288a2e534708771f6796e25117714132","ssdeep":"","tlshash":"f07000000030c000c0cf00c00030030c00f00300cc000000f030c3f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.379856Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c2274bf4d3d8c56c24099c9c6c922129","sha1":"f9ca14e62356c3d1ac19c1cfbaf96bd721bcafd9","sha256":"da55c710a4bfa6102e7212e9685e1e6ca6072de478b9b5a4ef73fb629043b9f2","sha512":"5b98acfddcf6c7700219b2f584de898054fed132c0f121c6dbb0a620299de9e832ec621f3df038d9d2790ee8a8864836607018c4930b5a07f52b9933df1e6b89","ssdeep":"","tlshash":"fe7000c00000c000c0cf00c00030030000f00300c0003000f003c3f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.40521Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b6dc090a79226495e9644bbeee756518","sha1":"449b67436c8785555c781956ba56a454515682bb","sha256":"8367a78ccb1e3cde37697b3af2f117e317393718fe68e566e6c13ef210dcc66a","sha512":"b846940ecb72d97808d5f1109f2b04c7ad24266490bb85b416b34b7ed607c09b58a3b73c2604caee225302f1978cc3d7f77e9cb786501c4fe173c5e482ebea28","ssdeep":"","tlshash":"2e7000000000c00000ff30c0003c00300cff0300c0c000c0c03003f00300c0ccc030c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.428942Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f81a8aa27ad547b620591c871a087e2d","sha1":"77daa19609f08762d1e7544cc63e0feb2200ddc7","sha256":"6f75db5c15ff88f889f6ad98cf6ce1a0aef119df1777de1b1a992fa0798fa077","sha512":"32bf1a11a083f7acc19afea88e7249b24d88eae448c50c99f47a613db18679aa08b358de48421c80972e0dec7d8b64414ecbd74357a60d7cedc0d57ddfb9855a","ssdeep":"","tlshash":"217000c00000c00c00cf00c0003c000000f30300c0c030c0c00303f0030030ccc030cf","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.418057Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c03b9a1c6d2d1376ab7110b920b5d11d","sha1":"bc7832ff98ec68e189cd59bdac5faaa8cd059747","sha256":"ee40c4a368f53c7893aff3c16c8ac59dbec639ee5bcce94243e05aff45db1089","sha512":"a47089e16195d486038c9931dfc79e71b305f5fce1b8a9e8833d7c4b1a4a624800820afea5d86913fef30a484a13fc3810472df5ed28ce0ecfaa9ea68a758e6d","ssdeep":"","tlshash":"107000000030cc00c0cf00c03030300c30f00303cc000000c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.390286Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c063106f27cd1452ae135f642e53eebf","sha1":"47a5ba2c254149265ba308a7be7b39924ea90b2a","sha256":"7ce37963c8c42196e5562cd6f4804e4e7eb5ffb3d9393e0e8404bc55f6113cba","sha512":"648b8a67273dff0b5a04c9d760335b8aa48cade46cda4103f1ed56700f37cce7e0d7272e8f07ff6b8f670d2bf4eae2c94c8b4be0c5b07a80b84c2ebe3a9b59c4","ssdeep":"","tlshash":"aa7000c30000c00000cf30cc0030003000f03300c0c03000c00303f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.376742Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7b777c8258be4d66daa963d0851338d0","sha1":"7d3e13bc46e3ff6b2d1365e2c51b943b6b250f5b","sha256":"690824b051f1ae8815e995f91232422bdb859066dc36605eb3d5cfacf604c908","sha512":"6c1214626f9160f0a0210098b8f658f8cb42ed3c3f7a8fb6e67acf45a10779400a56c51c03676269320ef27ccb2669ca4545203b5c539356fa33bf641ad47dc0","ssdeep":"","tlshash":"b470000000c0cc0000cf00c0003cc30000f30300c0c000c0c00c03f0030000cccc30c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.425644Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c57e69dc1c3714796fe1663d7f6a758e","sha1":"103d84e469f09107059d8a67f615cf2e20652664","sha256":"eebd48c89f0b43036acec1a4db2909eeb314c5076bacaa6ac8bf9f4921a50ece","sha512":"18088b30af3e40d8f9bda2a487312b8ea56de42981041184b341fdb115613f4a25693cf00b574d68706ce77e393435be6ea49d35d51bbdb39134166e181c0fd8","ssdeep":"","tlshash":"877000000000c00000ff0cc00030fcc000f00303c000030fc00003f0033000cc303030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.407906Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1381ddde79e03e1767f7819397700163","sha1":"bdc8e80553918ed9d64bf922becac723bd9fb729","sha256":"9b80a2abb7cef34f34d9c1b5f2ed4154352b8b4b1802b6fa3609b3c9d2b1a458","sha512":"256cfc038c118ad64df5cd0fd40a1c9c3b15cf689dd91e3f8c1058d062d928843fbd4584a53bcd47d3f2847e688a6e420e9c4e462f7beddead220c1c171e1210","ssdeep":"","tlshash":"0d7000000c30c0c000cf00c00030f0c000f00300c03c0303c00003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.418611Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"246541b0664433f23212b252305bb32a","sha1":"0866efa92eb7f9c75b3a45856a9c7e3310719b7d","sha256":"d056a96cf6d509c9def10b7dd78a46fc7b137713344e804ed849f9766c57ad19","sha512":"c1349dfaccad1b657deff3bd9329f111398235aa9cf2519526ff671203599809b733bb470379ccaf0afd2688041c421484966ade58f1ffde4dbe30bc28da3431","ssdeep":"","tlshash":"017000000300c00000ff30c0cc3c00300cfc0300c0000000c03003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.409457Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"da8268b7f06713dcb4a225ed4352c5b7","sha1":"64e26d66dbc71a35e56b995b7ed2952cd4416698","sha256":"4565f77725f2acb3bb1ddbd1a8154d6156bf0d399bc87dd62e22e5bd836468ad","sha512":"c27bc82eb01362abcc12fb842e191ca7707094db84b65e851fd51f582d3cd7f6d64ded9289adb6eac0b3c68b68dcebcae80fecc8c7deef08b1e0b111b85b5b3c","ssdeep":"","tlshash":"d17000000020800000cf08c00238000000b20300c2800080ca0003f002a000cc8c3080","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.4073Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ce5b835c74307454b195bc9b87ab25ad","sha1":"6e2a7143cb9d2f1c196ea81fcff842aa7ad2bfd0","sha256":"2bc85f2a21ff1488d409bb7549110022cdc2274fca518696103e6ea4ee971392","sha512":"94af6846f0e4afded87dbf8a89fc1a8900aefef1bf4bedac2e292b749eda6589fcc339ccafa613409ed4c69d6917b6b2e9e7de92fc72238699ca287911f119f6","ssdeep":"","tlshash":"49700000000ac82000cb00c00028000000b28320c0800080c00203f0020000cc8a3080","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.39173Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ada9a1753b25fc846f70be907672be67","sha1":"62284959825518893b665ebea6b031ef55df7f80","sha256":"8e135684ca301e393371d1b6ecd56ae0e4012f5385a482770053ccea41476ccb","sha512":"a06ab12c7912413e05ef2b7789f7703cebb3953697c92931067e032001fdea3e477920f0637bdc692fd97b871751283654288cfc07b46512a794954cefad3f09","ssdeep":"","tlshash":"977000000000cc00c0ff0cc030303cc030f00303c003000cc00003f0030000cc0c3030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.395445Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8fc40ad6c73bea5a889fe64e47f00b8f","sha1":"cbb493e570ab2e501f3932563bb18efdeef3b2d8","sha256":"499654ba55a697b3ae5283cac5c035e0f9c55e1c887d2c53b8a9097857b65c4d","sha512":"82f81e389295414796c1f64624959edaedf897b3fe42e61033423774d5d271f7ae103b76a9f7afd6460033cf875c735a84d41a0a00b60cc05b94985f23d5fba2","ssdeep":"","tlshash":"b77000000000c00000ff30c0003000300cfc0300c0003000c030f3f0030000fc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.374327Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"162f95de2178cea10bf79eb715e4d3b5","sha1":"0ac1048b6863928b93acc3f91cda49b162326c20","sha256":"661cc1cfe956c3e47afe43542b0956d36df0967d344be3a5abc13daf7f6f9646","sha512":"3ccb936c27af9f0c47ee2403d14551ef6274a514c15fdf816235be81f54755db6d6262a19448ec509bce35e5fc9492dda6c6029cc8243a9eb87bd17061239c62","ssdeep":"","tlshash":"1c7000000000c00000ff0cc000300cc000f00303c000000cc000f3f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.38721Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6a1cc42d9ecc09ad04c6b7f1ed9b6f7c","sha1":"0addfe6c569b463fc78a85f1a000f46141678101","sha256":"06f04bb101ca5086aa7cc8625be865598db47cfeadd30fc16d8198aeb100cfff","sha512":"83e4dfe51f33f34b4b3a9e04950ff265a1e63ab35d7601645a810f49f060e995c55159f99c1bb7406052cef4b4b6f8ab1bbd987b8cb7c993ef8eaff06c8ddb99","ssdeep":"","tlshash":"b27000000000c00000cf00f00030000330f00300c000003cc000f3f0030000cc003003","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.431059Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2ae35f56a615f14d8728c7874404207c","sha1":"b41cbe47fbc97c9f18d854d5209e0871beb5237d","sha256":"a6effe7a48b7aaf9b0f0efb65395e3f6a3a0f74703508a1190c62eada4a95ba0","sha512":"b9c5391f5b88e07903aa418990a8c39c606c2c8e8f025ef762b91fb6aad3b3a180817e7ce556cbc005e864c2def8bd8a38efb449e3b8d459ebcd91f74779204c","ssdeep":"","tlshash":"0c7000000000cc3000ff00c00030000000f00303c0000000c003fff0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.41971Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d90560affe7012b8f8e4cbf45b4ca9ce","sha1":"6cf02cda967c64f7b85bcfde72f88c7c53623f38","sha256":"0a0204c41ed0bf5389f077f49cfda3e0acbd1a5941414f8c0fc74ee91aa81581","sha512":"6d2e8440ee6619970f1bcb5c47f3eb2e4ff5a165df28ad2f575abcc907550aa87b03f690a85b6eae7b74c5318faee536200d903c48e4789f67f68918062da183","ssdeep":"","tlshash":"407000003000cc00c0ff30c0303030303cfc0300c0000300c03003f0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.388243Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f82dff41574b0ddcad47c145b0e28050","sha1":"a2370f27ed38a5fc1e12ed4711814951c6926b1e","sha256":"db847cb68230ec9117bd8205a6aff20b71d27c3eceace3c765b22f92653cfa83","sha512":"a9b9a450285cd47fc80e0d9dfc2724937f42e4080d686224461a6116525360a8733c2344c0d836ca86643a972a2209232fdf9fd656435d07320414175c845501","ssdeep":"","tlshash":"c77000000300c00000cf00c0cc300003c0f003c0c000003cc00003f0030000cf03300f","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.426725Z","times_seen":1108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2411b0302e914ba65e0fa282ccdb294d","sha1":"7665ae057c875df2a3b5627aed7505144d01ca47","sha256":"dd6dc2cae94ee25ed18e37d5129912d4b59c065c9b4544948d80bd1a090d1f26","sha512":"e2144977c5cc76500630ca96ca8fa541941756df32b7269cd6bf2b280084afd9e8cfb390c079044b5c6a9e34a433f9bd3b074b28b70ef0e851d1f524e288e7fe","ssdeep":"","tlshash":"bb7000000003cc0000cf00c000303c0000f00303c0c00300c000c3f0030000cc0030f0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.381929Z","times_seen":1153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fb95a63e798bbc1c52b2f422cfe52052","sha1":"03786e47acce519416eaea6350a4488f36ef2edd","sha256":"383ca780d1ed19d7c3b4a02d2b928ef255554880c51ee3317b58974bb7ba453f","sha512":"305c63fc47c7008d5f450ca05f6e575c4854405c550733b254c08b4f2f5a383e28dc2cf0519b0c987aba81d70c110a9bc77d3fee852799608c2d80d7f4cbddcd","ssdeep":"","tlshash":"f37000000000cc30c0cf00c03030300030f00300c00000c0c00f03f0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.392334Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d8e70e433e262e3409d713393b5055de","sha1":"279d1b9c1b4f513b80d1b5abe34e691269a5642c","sha256":"a4627a0619402e40b332d3152fcb46564ee28df15bb24963393da28364090d20","sha512":"dfb0974cad223dd5a6202f9ec965c017270249f08f8b43765481167142e3c67b93730dcf06c76215a3235ad55ba89d4f545a922f1c3e76f83959593e71bafb69","ssdeep":"","tlshash":"86700000f000cc3003cf00c00030300000f003c0c00c0000c00303f0030000cc003300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.415257Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3881d0ce03d76f22df4ba5ad7b17e61b","sha1":"344a651785ec5e4e5ca05d468aece729e927533a","sha256":"b14632ce7eeab46e72d4414f3ea594402c906d09dfba025f62ef714681b8008d","sha512":"4df66b1782d046d9e34662bbbce7034c57230c0b57c66a00ed9d8f4842a77f7bc01be54ace550aafea13735ef1107ac7d7ec6d7bf0aa3ad9eadfa420d241f47b","ssdeep":"","tlshash":"ee70000033c0cc0000cf00c3cc30030000f00300c000000cc30003f0030000cc0f300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.424529Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"729409264fc1bf2874651a3c16ed3ac1","sha1":"744d4edbcb9de5287abd15da414ac712e4ba7dfd","sha256":"63370806c302182c42c242c16817f18c7d204507c31a32957a241323a667b93f","sha512":"8fcf93166552d5f33e402fc5b1fc57a072ffcc6350e082e3079743c1f4ef9c4dcbefbc2686b0e424ead208d323d0d1415b4ef645f94fe3e5dcb8d1b8d0df6562","ssdeep":"","tlshash":"4e7000030030c00000ff03c0c030003c00f03300ccc00000c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.404188Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"54dadabdb14c173b950fc5ac0647dc61","sha1":"100c82bb931eedb7fe034bbbbf0c1373cbef348e","sha256":"1d8d74849c3855d65dcdf22c44407e3b34d34279aff0b991e24c5a08a8f62b07","sha512":"06d0506a57fee7281352046a4baa67d418dfa6fea6d4ea8837d61b5e5d14ca5388d5b38a5cb4c59c562a70d5cd9177725ecb8d06846c3f422b1124e9d262be6a","ssdeep":"","tlshash":"cf700000000fc000c0cf03c0003003c000f03300c0000c00f000c3f00300c0cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.383993Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e0783099007df1ed28a11c3e447ea74","sha1":"01fa4d2d862c8d4cec527823cea2028de9928c5f","sha256":"afbd1461a80f657118dc4824a30e2604804026fabfcbe6ca2ab93458a53e8a82","sha512":"14c544dae3baa5f2d7016724721219a19cbbae2db8882cc64c0f14ed37eb75dab6cb29f8c920c6b9a468785abc6d5973b1fa79d4d9971c17f9368e3c35b4caf8","ssdeep":"","tlshash":"dc7000000000c00000ff30c00030f0f03cfc0300c0000303c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.394475Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d04ea7f0b92f18997d7780e97ecc7005","sha1":"46147adf20a41b5c1b52c5f72e9204dc76ca23db","sha256":"360fa8d722755207a3463bfc054ad79c3c49db3d6062f57977f1eba3ce662d58","sha512":"38187574d19d2a12d968c8e5e1737513fae42cc0dcd060b95dbecfe2387bfdace3f31c97b02cd6d7e72cdf59522bab394081b241e6f68a2e057c9466aec58141","ssdeep":"","tlshash":"357000000000c0000ccf0cc00330000000f00300c3000000cc00f3f00fc000cc0c3000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.411467Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b44ff8f68d1f8325df640a60702c18f6","sha1":"38b8117a575001fb06f9a0ceadc55228ccdce7b3","sha256":"d6465167999520a23127488c727ed47123218b0418295045e7fcd628039c0b31","sha512":"eefe2e0a86b14485ce7ba1ce2f135bfb0db342df99b8060ee33e16b54df58f23f12da0ebf6f1f50b770d3e8304a42ec91dd49489bab7f4b35dd62aa55b6e32d9","ssdeep":"","tlshash":"6e7000c00000cc00c0cf00c03030300030f03300c0003000c30303f3030030cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.411954Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a1c6b372448acd4925b2d6d2ec1a69fd","sha1":"93d1d5fade913b71328130aa3bf7e11621dd7620","sha256":"a47fb74d2df6ec243a96b3afb0a02569398d11e82a11d77acd303fe9c2ac83e4","sha512":"0c27a42c6ade1cd6443fba3829a36f40d366ef6cb0beb8f2002ca1726f6e81c0b1df64a0a08b5a61098b6bd3b46f888b27df00243f694a85373a4b23e381ecae","ssdeep":"","tlshash":"8f700000f000c00000ff0cc000300cc000f00303c00c000cc00033f0030000cc003f30","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.374956Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"596e6606d7c4ede34de2935f3c6c187e","sha1":"d3ea84761e98142b91559b1a922cea287a5a3011","sha256":"a6171bc58c97c84152bf23c4cd548779070196e84b8ac898f0c3f6c573bb372d","sha512":"11ee51f329da90ffee3848992b6ae5552dd9449e67ec5073fd344c7c801b1a52a4a3debec85f38b7479763fe82b0a55b6953fe98d593e7ae83dbe8787f91fc82","ssdeep":"","tlshash":"1d70000000c0cc00c0cf00c00030030000f00300c0000000f0c0c3f0030000cccc3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.380377Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a33748764d90c55aca2d7c5eea289616","sha1":"5d61e51294395a77b6738e3a7f82be2478f9d801","sha256":"d6cbf00237a8151746b2ebf6ba332d9f62d6981fc2b717b63e7dc5e70e026c2a","sha512":"070c5524dc825263f91ea4105c025736e0dac1e279b3954369f8256a7f579db9253f3bb1452adbec670d6fa938edd0f12635c36e14fc97009daeb352f0484749","ssdeep":"","tlshash":"7a700000f003c00000cf00c00030000000f00300c0000300c003c3f0030030cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.415817Z","times_seen":1158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ce67180f52a4e213b02a73de699ac9d7","sha1":"406af3ae3db036d5e0a52bced3aa8502371a4cf2","sha256":"49b4dfb6858a942ac006505cb2511424617ae6f26d173aa2363f1128e32bb503","sha512":"611665a65144ec32f67bef90ce76a29c7307da770ae065743d3002a0e03c51054f2dc9e5a5850d6679ad016cb8c6c5431fca6fc799bad36e2c24606842ddf482","ssdeep":"","tlshash":"857000030300c00000ff0cc0cc300cc000f003c3c000000cc00003f3030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.409963Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cdcc8499dec336fe655502037873ad09","sha1":"df29230c72cec47be7797309e7f4dd868b430a32","sha256":"4b74080433c7e1e2cc034124f3f5acb444b95bd320d9ef3827db207b92214e6d","sha512":"0abfeb642770f7b88623dc119940432e2e68229ad8f25b2d527d756e94d0d66b8f6c0be04a98d9e8234927e737e977d26adbaf36337e1d3eade3ee21e0cf84f3","ssdeep":"","tlshash":"c4700000000fc00000cf03c0cc30000033fc33c0c3000c00c00003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.380887Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"569cbaa5d4e07d93d0ef40f00325dd8a","sha1":"d53d3ccf37eb01c61ab82418727c25fb284eb205","sha256":"c2a331c02c1ee796f08d7178d991fbaf91961275a5cf9986035d61a484fad97e","sha512":"ad99dee313910c9ef045e36e2b4f87c7689c54813bf764627d3beff49c6c1d71b80b5933ad9138436bcae2912e2d2c43702108ebe301a76a9974f5d4cce18837","ssdeep":"","tlshash":"d57000000000cc3000cf0cc00030000003fc03c0c3000000c00303f0c30000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.38877Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f878e8bd0445ab90e42c6ff26a714cd5","sha1":"cef4addbd9946a09aa2545fea536b580e5aa75bb","sha256":"bd2a6457dcf585698134e31288339b2c83c90bc3efa0207082c16f1947d81698","sha512":"1d8724433f59637b18e6a2a1ebd24a3f63f1f2cc7a3272205d29b149225865449bde74a7b80eba897d79d273e6cbe64207878f0a7bc8cd9ed42ccaf87a75608a","ssdeep":"","tlshash":"e67000c00000c0c000cf00c0003c000000f30300c0fc00c0c00003f0030000fcc030c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.389274Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4999933195d7474661a7588a5ceea991","sha1":"a10e2435d00ff565b423650e231fc3a7ab060671","sha256":"0bd8d756a5a5967d29f7675f3cdada4a6b19f54af7e23e9b62fdb386b325d74e","sha512":"79a788a952b8bde04383a9e7d35a7fac850596b206382beb7a8fce64a7cfc1f2e6ed7723f8a83d6569d1f95fd7435b23d31df0535c1827f9f46bce6078219b8b","ssdeep":"","tlshash":"697000000000c00000cf0cc00330f0c00cf00300c3000303cc0003f003c000cc0c3030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.410979Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"647fb2e887881e7a43e38681c7fccfff","sha1":"3aafaaa41604b57786f6c68f552b18ddbcc2e3a0","sha256":"bd46d9f7163328d6cfe6f1ffe092d73d4bf31a10b7c13afbbee0819760113b4e","sha512":"2f9a6b2d96dc4b348d66061119840555c162a72b650af7f677103c3403722b8314dd35102f624cd17dac6f8c3ad138c90d168336427de405273e14599e1d20cf","ssdeep":"","tlshash":"8c7000000000cc00c0ff00c03030300330f00300c000003cc00003f0030000cc003003","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.395957Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8eaf4d081dedfc08c187aba7541c733d","sha1":"31db4de8047c65cf3f13398fa2a6370d9bf24715","sha256":"fb1e251f69d755e669e5e0207910977ba8bec923abcd0c264331da8ed4bc5de4","sha512":"e532054cbf82038f4115f8c1de3c940abc30196071e5305978cc9d35527779a65249b8f6b76bae5b69ca514615277582115e2b2fcb1ddaa186182be65ba52917","ssdeep":"","tlshash":"d47000000003c0c0c0cf00c00030030000f30300c0300300f000c3f0030000cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.378294Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6b917a41c9ce27526ca480713e81d2d5","sha1":"765c462784fa25ea41d89b454897d227b6c9c63d","sha256":"f0a7e368791613d36120e33ac4525e01c01d1c007fb79a454e761f4a95ed0d7a","sha512":"4d2c9b097d64b6ce6ddfca436adf4fa1fca59e53e6303571876bf285d597f3c64e256a9b43afaf59106a513eabacb5a8740440edafd49d8a047de1dae701a54e","ssdeep":"","tlshash":"cf700000f000c03000cf00c00030000330f00300c00c003cc00003f0030000cc003303","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.424006Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f24fb692080af454ea0130ae04dc8273","sha1":"a434de2f9c55719a8bd7eebabfad3ba9d74f0395","sha256":"e7e4e3b9731b5f668a1bf28080a2908caa3c2c2e811ef8cdbb762c7fd226296f","sha512":"79977ff67e18cae680038ef961fcc3cc928b2c37bc8e39f72494ce655eb494a671a04771f2f531fbf151d32d7fc7000bb176e79db40aeab7823fd251dd4d4cfd","ssdeep":"","tlshash":"aa700000f0c0fc0000cf00c00030030000f00300c00c0000c00003f0030c00cc3c3300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.432711Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"af42124fb23866e29287836fff6d3896","sha1":"8417cd2acf7b2fb483102d54c5238f91da85deb9","sha256":"1f0008a619fdf98128a6bd9c386f8f8b41254adcfec1a1195d46009568c67b63","sha512":"509f7c7839b5b13e88812ba21ab0ee059f9d014ea4c7a5075fc06b2a77e4879cddb1f14e9daec9ba10661962fabba400a2a6a2d43bd7d272702bf925f91daeba","ssdeep":"","tlshash":"d87000000300c00000cf0cc0cf30000003f00330c3000000cc0003f003c000cc0f300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.440041Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b463a44051f5ec20ae48196f36054e13","sha1":"5b732f6e972167e618e38cdcdf292c5a63dca9d3","sha256":"87da72b460eea48a4375dcf38b3192896a661cd64ec1465b856b81538f7e3918","sha512":"b235007cfb7764d3339ce0c489497814f37213734829dc2d287f9c56ba9134a1e9b1ab354e0c82d2d99311128207d05432bdb4b4ac36c9271bbb9b69f8eafb44","ssdeep":"","tlshash":"f97000030000c00000ff0cc00330003300fc3300c3c00000cc0003f003c300cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.442035Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"53c240fa6885652da29ddaf4dbf8c505","sha1":"ed8d6bbc962db63b8e7c34225a0f0698ba2119d1","sha256":"35567e82ee7df5a7386f8ca0a1e6b1e67b0a2e3522bc94ddd21829e6711a240e","sha512":"aec41e89bbecfc4f58fa42372121188892d1137c64c657ea6c108ed28f67f7f4612ec0fe15fecc1f27c8ec80c4eececf5bc66af8e7333420412c2e8cda9c023b","ssdeep":"","tlshash":"09700000000cc000c0cf0cc00330030000f00300c3000000fc00c3f003c000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.386596Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2ff07b7af9c1223cc816428b9699a077","sha1":"2f7744b74e67feb8b4d37fd68c5b341e657a5d09","sha256":"947ba6e211b46fd494a831c93774e351a2114a2068306ac8137023a29c22d717","sha512":"04a6f8e6e88c4f7f7b3cc57f919c0751dff1f5189891e1725aa6373a72bdd597926cfda9e736de4ead977c6b5ce585b42c204b5c4bfdb59f7202aa5c1358d0e4","ssdeep":"","tlshash":"f37000c00000c00000cf00c00030f0c000f00300c0003303c00303f0030030cc00303c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.410464Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"22e39ae49f7a49a8c6ac9e9a426a64fd","sha1":"73706b4bf4bb0e76c3bf8edb7852f248d4e5e91b","sha256":"08d0469b8cafe434d317480ce41859356a91804de4d8fd6243a7068d7d926524","sha512":"c1e00c5ccfb523889f974a7ef4cc3adba70540f84d64a37d31ed528ce412ae52e88f10b1928cece8fa1f1c9ca6e130894ebe23b845744b62f2f1532bef54cb0f","ssdeep":"","tlshash":"377000000003c00000cf30c0003000000cfc03c0c0000300c030c3f3030000cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.381413Z","times_seen":1136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3c1546a94da3620e4978e2a646044824","sha1":"5308f928d39eb12a2d72472adb2be17ff63165df","sha256":"a00fa4d73a796073d56091271d0bccb0259527e76ab4a4174a145c41b4bf8059","sha512":"57e8224c6b737560edc2f6e830c0abb2be83dc7bfeec6d064805e88736466e6ab35a83a1b47f7417a8c8b167015fdd27f42097dc8c53df368930ef0c11bd43cb","ssdeep":"","tlshash":"01700000000fc00000cf03c00030000000f00300c0000300c000c3f0033000cc0330c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.408415Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b85819574e5970e1d42dbe01ece588e3","sha1":"41f6388934d879255cce5ac579ad8081280437d8","sha256":"68a074bfbfb0580f9e91dc885af163fc951ece471b3e477e02d8aa4dcd869bf9","sha512":"28eab177ad1d18905a342cf1bd06b0f966b77f439d5c08aff247df832d6dea20465459f2a6996d4934c63ec4d29a819b7e0433d814e72c47ba1985e8c6927b81","ssdeep":"","tlshash":"2370000c0030c00000cf00c00030000c00f00300cc000000c030f3f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.378803Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2f5270701fdc3701859bc4c4c050d9ee","sha1":"709cb0666d8c2d6ac55bf7c6cdd5fdf10f3b08f6","sha256":"61c8f97e4290c1b6e5cad7f1dc88316ceff39ae9f8c6473c8868ea010875ff11","sha512":"c450a3f851fbcbac100d40799f38953e4aec92a33769a82b806bd5890ab6002294ea3ca9f268915fabec44a6071d30548fc83f813705734f048c6649cae874ca","ssdeep":"","tlshash":"3670000000c0fc0000cf00c00030030000f00300c0000000c000f3fc030000cc3c3000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.387691Z","times_seen":1159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f647cf4291b3514acb6dfc5903620806","sha1":"77b87aa14c8a186cbfa31490eba508307ea1b58c","sha256":"745aea14ad1731fa076e2e237af3006c8c7a0ed94379ba01dbe3abcd0947efc4","sha512":"b419afcd49f5ea3fa17054138528545eb2e18f90df61ed0332b640d1004b36616a2d1504bbbb9667ef76f3291f61e5b47bfd431db9e01c38b540b02adf27fcff","ssdeep":"","tlshash":"6e7000000000cc00c0cf0cc03330300030f00300c3000000cc0003f003c000cc0cf000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.397035Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7a2758e340ecd0b98d3fff7299fd1893","sha1":"d62c034d608bd0dff30b756d7f4bc19bab964411","sha256":"967ad897643bf218aad6f18ba7572b8f1ab6d3f577b1dcbcfa82cc9deabedd47","sha512":"96ac99de4e50242ca218de5dd6144dea587dc6ce908df609b93b98c856c931ae3259268a8bc4f1bb793f0971a60988a59ce08250a0a4f705f982f4f875e621d5","ssdeep":"","tlshash":"f4700000f000c0c000cf00c0003c00c000f00300c03c0c00c00003f0030000cc003300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.398074Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9268bb720f57b661570d77717fb1cf8f","sha1":"b9a950fd874919ed5bb11d31b42cc036b1984ae1","sha256":"e4d50938965686c89329c9f3f0f7b67f9d183ac06da98664125994353784e4ed","sha512":"7afe9117e1e394cf14a6943b3d38112391d6af85c6923f4bf4e92d990c9a6659f9694673a5655db8c2420ce0461e841fa46daa828f6cc6d004f4d7c311fba211","ssdeep":"","tlshash":"50700000030fc00000cf03c0cc30000000f03303c0000c00c00003f0030003cc0330c0","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.420822Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e517ae48d6a82cefa2de65e88b6f5693","sha1":"ca25ce518f711726cb813ee73efcddd79211e1e0","sha256":"169ebb8cf7ebcc8b8340edea912177a118a79c22c031852b1d412cffd13500a0","sha512":"3cb5a380419a0579d6422350ade0ae728ccf8cf85be361f7fc9d0ad27e695e581e712f43330792e46c144a0c7b3633313795ba7e988bbfd08208bd0880d159b5","ssdeep":"","tlshash":"de7000000030f00000cf00c0003c000c00f30300ccf000c0c03003f0030000ccc030f0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.428389Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6a0f475b9036eaf5ed81b8fbd3723157","sha1":"ca0eec508471941b33160812e50112521f27f317","sha256":"f552df46f9705f908d8c238fa31da2a9343a706c85c0d9e318b0f1ff3b82fc9f","sha512":"41735bf2674e8a77daecd6401ca8a7aa2e0dcb88d1c386965dc7952c0eabf6698f5aa87f37471338c92d3b67fb72173f43b06c09b1cb4783933b4aa016245411","ssdeep":"","tlshash":"557000000000ccc0c0cf0cc03030300030f00300c03c0000c00003f0030000cf003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.42346Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"26b2bc4dfa81b43fe5a91d2c178dd361","sha1":"fd7919b5dda72e5dc5ff29f39439ed5f6ca81871","sha256":"8adcf28e1f74b9d284b6a8e7621e79f89ff5bb458dc81d9b366fc51bcb75f28b","sha512":"292f16a9750d730b3f5d2ba2847a423aebdb805686410cf8dfbfb228343e3db1d9efbc89c2471745e412493e4c7d796a2158e4f7b4a489d1af2e97b9c89f0d4f","ssdeep":"","tlshash":"597000000000c000ccff30c0003003300cfc0300c0000000f0f0c3f0330000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.44305Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b1b8a68909e47131052789e18ed991c5","sha1":"bcd0f3c9cfceb4a62dfddb168f3547b0ff706374","sha256":"8476c02876aea613cda596f888e3e454d1aad05d221a3d45f3a60ae9393ed319","sha512":"eea08b07e99828e3dbf85705caad39517171fc08d9c1670f845ccce955d32daefba5596d4007927ba3ea2a5d4fc18bec8498da875a66c08830996bf2f84f7aa6","ssdeep":"","tlshash":"f77000c00000c0c0c0ff00c00030030000f00300c03c0000f000c3f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.377736Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"08981acc0dd5c00d58e592297ed2f12d","sha1":"6d917c2adac56ad56decf665139db8643f8713ac","sha256":"3e305db42daec26a98e6e0cf1a29a7c956a323a6ed1b0304409a505ebc7c5e1f","sha512":"8fdd6e777c8930635296eab251b9474342a23a3cb3eec69302bb16118e6dd0ce2dc2c81cf5a558c023081086dfd49cf356852fdb14124fbd442f77d7aece04f7","ssdeep":"","tlshash":"247000000030c00000cf00f00030f0cc00f00300cc000303c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.426207Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c27e5c2ed7c9bc021cf46027c8d241a2","sha1":"251315bfd44456a07441481d1c9b3fc811f4aa3a","sha256":"0870b6fdcbe4700c7e9c7c316ad592e0dd191f78b472267d3946db8a8ecc8f21","sha512":"5ff6722c22fdc3a20d9f01b1d466f99779c836e841e7f4551453434bf51ac7e251e19433e907a757a77e08c9a99f050563c9526c277447bd0f209ba84477f09a","ssdeep":"","tlshash":"29700000000fc00000cf03c00030f0c003f03300c0000f03c00003f0030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.422898Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8dc6baddfb887c207f2cfc80a440e097","sha1":"c44cdd6dd814762e2d52f58f72f09249aadf60c1","sha256":"7f97e2f5d8ac6458a314d609681f35979521288e3a0f2950cbabb8f0c0cad0c3","sha512":"f38df28f567e21ce58a2bb804f1e706b50dbf5e6448510ece60e7e2c36ecdb623dad712f564a8f9f88a490b695c952cf3968dc24e0df09f985c663daf25ebd37","ssdeep":"","tlshash":"f27000000003ccf000cf00c00030f0c300f00300c0000303c00303f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.394952Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fccb11dde8a7d3a197ba6dc22fbb231d","sha1":"c86b853f11220a14d0a667bbe08be97d18679fcc","sha256":"f37b4e527dba46d6e9ebf512a36a060780533a164c538b67a259910b79d96125","sha512":"478a1000872e5cbf4ff6b6df095d21975bbfa4994cfe50e33e24258ef57b001a8222f9352f0dbd1172b258f2d015ddef700bff73d5bcfae09a4543cfa303f464","ssdeep":"","tlshash":"897000280020c00080cb00e00020000800b02300c8000200c02083f0228000cc0030a0","size":20,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.430056Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"37964c4d9cce527dcb1ac8b7c24a3786","sha1":"5338666ec585469c5b572b68d3927bcca80fce09","sha256":"9fc0e0126edd39b42528d8f8851ffb1275b8cb9db15548041fab20c581d1b070","sha512":"b5d3858e51822eaa9c22e867c69be0833b079e1a78b1b89081fcbc4485d2f397326246dbccce5433e9257a0b3f42123652f4367176de745b94ca93619be69703","ssdeep":"","tlshash":"45700020000a880080cb02c02230200022b02300c0000802c00003f0020000cc023000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.396535Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"104eaaec377fb78d0b1478984f38f3d3","sha1":"cc4f020560b23626807ca4c76f343b81602c2d1c","sha256":"72e9c6362d28cbf9388242bcbf0459073706e7893281cdf07d314bcec18b69ee","sha512":"0c4330095c4cb24ace162b4c3fbda8cfc6040166cab6b168e52d93e75a73355129158311ab3a368fc9054c9decf4d98dd9a791af430cbbaa7d7368c61d4b6707","ssdeep":"","tlshash":"59700000f000c00000ff30c0003000300cfc0300c00c0000c03003f0330000cc003300","size":19,"data":"","first_seen":"2023-03-12T16:21:53Z","last_seen":"2026-06-06T02:23:39.416936Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d2708560ddddf9fe2854103ea6095b0e","sha1":"61af9e5b5b5e96580a7da75ebc27c57debb6137b","sha256":"6d013dfe3b7e6304821534f0802b91d7ecb34e69dc880ef3efecac06a14e8a78","sha512":"abf7d0253c13a28b55acf9f7ed685efaf639d70e888e7d3b4e3f26b7987f59b83bac1fbad72f217600bb8691e179f3edf910e82b9218201d9e4c2283a2813b53","ssdeep":"","tlshash":"a67000c00300c00003cf00c0cc30000000f00300c0003000c00303f0030030cc03300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.412989Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f7aae66ae2b52b128d01fd1b35e33453","sha1":"52b74544712d5ff9de4b1a5305f5a7a388ab6346","sha256":"519ac6acbff2bfb0f62eeec8219821a845f2cd063737b2aef9d4f2384fa6f733","sha512":"af43ca0a482d57d6f0ddb1f2a005cc91e25455fd7b1852986357dc5657d4fc4bb3b3a13682d8fa55b01ceac15857e8ec9f54294add4f7661b20dfcbc39f5c8ff","ssdeep":"","tlshash":"bc7000000000c00000ff30c0003c00300ffc03c0c3000000c030c3f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.392891Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0aaabba7ccc2505b6870a656b6819d3b","sha1":"5ee2b0096cb5a7a03db1452893d0f0efbd3f051c","sha256":"f32cced9669187aebe75ba41a8f0d897a27cb02bbcd5dcf0ad6dbfe31cc208a0","sha512":"793ef6b9664aae05ee972825cf2fa3b60dafbae9706788a1f4cbedee19d357fc9ddcbf7107f0beb2a7ae1c2f29794568e9cf39ef16f17ff2494ceca583f4777a","ssdeep":"","tlshash":"eb7000000000c00000cf00c00030fcc300f00300c000033fc00003f0030000cc003033","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.389778Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a9760db6ce462dc40062b65a940fb027","sha1":"7d6f111c75e4d5b4b061f8c6c81692883e80fce8","sha256":"a155a9d1fd9ba999b8a5e384a89513097831bdfcec72082c4b7d8dbc74439af1","sha512":"39043af135c03ec7de880b015885544057d9025bd8946223ff960a53f2c9542cd047a2af08893334d158dfe2be0baadd64c3203a546f7b6afb3a1bdb6f6ebaa3","ssdeep":"","tlshash":"e470000c0003cc3000cf00c0003000030cf30300c00003c0c003c3f0030000ccc030c0","size":18,"data":"","first_seen":"2023-03-12T16:21:53Z","last_seen":"2026-06-06T02:23:39.419161Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0d5998c0f8104238cd96cf17a9a2faeb","sha1":"8550a2347fba8b97c74e0b766f099c7610736be7","sha256":"89543153b3f84846def623cedf6219a84f697be7e8ba4f30d5b9b613c3f2ea4c","sha512":"31dfa548901d960e92f343439f06aac91e48c94a5028e32622d09e87a31c52adf666306df70e50bf189d133dac10b5b4cd2687a7694cef1be94307ae0828e259","ssdeep":"","tlshash":"8f7000c0f000c00000cf00c00030000003f00300c00c3000c00303f0030c30cc00330c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.420273Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"914dadef0120224114573295cd60933c","sha1":"c4811ce68cfbc54e1eca2c2ba1af8dd6fbced84e","sha256":"c5cbce3172fffe2ca10ef64d85ba4b2ff52cf3989e7ba4a04b3024f50efa5f31","sha512":"b7cb7314338437d062c4f2ef28bc9cff735642a2069400433f888087d3c7eeb713267fffb8f1775fbf3a32c101bfec2479086acb8c599a3b06071d80d4604947","ssdeep":"","tlshash":"a47000000000c00000ff0cc000300cc003fc03c3c300000cc00003f00300c0cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.393392Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d29638340b860a0169f2c6cbc8dc9e94","sha1":"2dda54c8164c7e88101cc3f8af0464102035e38b","sha256":"21049af0b39201d5e0689734e95ddfa2a20244afeabcbea8cd9fc4de8c8bfef9","sha512":"49aaf5c2aa53b18ab4ed50eb490b1eef7b1cd89b0b4fb3d016cc91bfee606e39575704cf953f9aff2ffc0154a4e9116047a82f3f09c50ba82bb732a1c636ccd7","ssdeep":"","tlshash":"a47000000000c00000cf00c000f0000303fc03c0c300003cc00003f0030000cc003003","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.373708Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"709dcd1b74993ea1d86ef30bbe75bda5","sha1":"49c6ebfdbff7a45a3af735dba2494fd9ab107b17","sha256":"4ad9deee352fba0870bc0b6f55370cf953f8a042e00c7ccbd3bceb16592f4df7","sha512":"c8dec8905a9450b9946ef6fb015313c8151828c304abfc03d00f43fa811e72c40fe57fdea7ad8d9a10488773240d88764232ede6e51e0f8150443a56ebf80ffe","ssdeep":"","tlshash":"9970000330c0cc0000cf00c30030c33000f03300c0c00000f00003f0030000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.404699Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7d5854ef579b22b85a1308a464991cbe","sha1":"bca2593c39b377d192b5be3d23f73a6acc1ba9dd","sha256":"ee855aef125f82c560259778b792cdeb143dee61b40be24ae78345ba96ab07dd","sha512":"aa5d5459522b9787974eb941675153be6a008962ff4e0bbda6c7e6844b1ce2de8058cd99607b903c9bfd509b9df5cc8e6c9c84057a673d6ed2e764fef402cfb7","ssdeep":"","tlshash":"4b7000000000800080eb08c000200a8000b00b22c2000008e00083f0020000cc00b020","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.421378Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2407ddb62e965883f20fa23c826bf328","sha1":"8870fbad82926b2a51ec8f4d96b0dea661f54d0a","sha256":"87484b3dbb15f32dfc8952ebd6b9530b83bd03c1693c2c0a870db80921c241a6","sha512":"782f1536b2910e0a2aa1400fdff8716039a5fe468b99cfbb3a1d4ac342bb07a9285cf69eac395392d330c8dd044f887b017c3fe0b5c6a818636146b6c1cca1bd","ssdeep":"","tlshash":"267000000000c000c0cf00c00030030300f00300c000003cf000c3f3030000cf003003","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.405779Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"54fa6a1a732804cb2eb71846c1c88c85","sha1":"ac48a7381ce0cea53de9797bff9ee3d827e1c50b","sha256":"28776dcbc8585ccfedc6125ab43dabb41c1733e77220bddc30365376adf9de4f","sha512":"da8a3b293933d9dc8dc0ab18576eaf6b25990ced15a13b9b5060bf8d20e27fd1a99e8046a6c42b648132688fa3dfaaa4bf821e5e4aa46f6921bd5db15f7859c6","ssdeep":"","tlshash":"227000000000c00000cf00c0003c000300f30300c0c003fcc00003f0030000ccc030c3","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.391321Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f2bafedfaadb0f2669dd99db32cfaec2","sha1":"26952b7bb4226705e8f86f7f191ff4e5a5f8ecff","sha256":"3d7208cc324b7fd6b0e4582c2b82b92314b1d40f918f7cffef7054ff38888eff","sha512":"d943867aa83336c8770bf2711bafe1343d3b2403f07ea6ad24b481e4dd5f7b39304fad4f438be998732313b552dc6f8f72270a14f65ac47c8b8e08a019fd6365","ssdeep":"","tlshash":"b07000c00000c00000cf00c00030000000f00f00c0003000c003f3f0030330cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.397563Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f5799f97dd01d1b506b6c56d11b4b3ab","sha1":"24baa553dfea4ee7eea29c33ba5b62c8da6e62bc","sha256":"be90525374346d2f86a64dd1b13c775c34e9f7ed52f78543c308590d29336f24","sha512":"e4668a162a9ceda2fe22da9d46af0df8f2cf69d5c48ac5d5b020f67c1721530e14a660595201b92563e319f1aa90e2dcd09d033cc31df9344815ef3fa0c98e3e","ssdeep":"","tlshash":"4a700003000fc00000cf03c00030003000f03300c0c00c00f00033f0033000cf033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.393906Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"57574f53b6de200174d35574df1da053","sha1":"2fb004ca614092eee28fc45611cdeca1d38ad065","sha256":"c990e04237a0fabc10c638a3340f0af26b4555ddbc373bdf453ff00910afa15f","sha512":"5ec41a4d16e518bcce4c65d4ee0a38bbb1b404239f41879331c7f9f778f874b8080190c132aad624fb58d0ce29de8d8f3aa7ffd7d03ea1ed1c9d386ac4039b60","ssdeep":"","tlshash":"a17000030000cc3000cf00c00030003000f03300c0c00000c00303f0033000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.425076Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d5d4a03bd7a18c5386526c4809b986be","sha1":"cd8ee075dd8b9b45e44a1f294a363189d12c037c","sha256":"c391d5c8f3478b12e350ffe590cc18b8b53b7c0ace33d1ebc9f6a91f227515bf","sha512":"05c21e4dc5fbdcef8539e41596a5bacb6cb8d2641673920d9dc9fd7e7a8f00e221412b7e8f07b4c486f1b14ea0d0b46898fb521df9fa586e03b0c2e9bd03fd8d","ssdeep":"","tlshash":"d6700000000fc00000cf03c0003c00000cf33300c0c00cc0c00003f0030000ccc330c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.44363Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"35411849173c3d4db532cb75586fbeda","sha1":"068c3c37cd989d0b2ac9ba507218914b98f9194f","sha256":"419a2e337ee37ad5e724a3f328d81af33322d8ccacc12c9e4ce5e4e39fa2e757","sha512":"42c0cda45a2d89162022e03a24e13c26d5b8d295c1c35695ee166112aba2afd392faf318425b42a7e7f358b3d2fbe063199a39219379e9b00575d47b77e7ffc1","ssdeep":"","tlshash":"0b7000300303c00000cf00c00c30000300f00300c000033fc000c3f003000ccc0330c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.416374Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"76329b4f309ad0211bd98453fff68ac5","sha1":"50bf5e047121af855a3d42a222c9143d86c8d091","sha256":"b02a058152f38597d83528c997017bb74bf95d4eed4d224883a406a4db4236a6","sha512":"86e58743956467fe7d04af40720fcfacfc6c455cf7d790945db1d9db3b59530291b2ded12f6c54fb86be047f31e4c88cef782d25144ddd6bb6a63e03f92c2d49","ssdeep":"","tlshash":"20700000f030c0000ccf00c0c030000c00fc0300cc0c0000c03003f3030000cc003330","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.37928Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cac42769044d0dbe5b683086ab70007f","sha1":"451bc1076e896baf8c00f8c311abbd65f85d50b7","sha256":"7559e26f738b52c0f790444412c346745de4d13ebb8fcc28884862560cc9519f","sha512":"faf3d66955fbf279d054c7dbe0dfe116540eb7aa7e936aa91256810a1575504b10cc16dd0bae43036fd258d7e45b5b95dc78c9be951d85ed953c97b05676d0f3","ssdeep":"","tlshash":"987000000000c0c000cf00c00030000003fcc3c0c33c0000c00003f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.390798Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"160edc8db45d8cf1db6b306e01b1b522","sha1":"eb3cc2404ff47a884d1b38f4e5570e992c2b28c1","sha256":"5c4db52d774d189e67be581f8cf0a1be27580d903ac882f6dc8fcdbca5d4dc89","sha512":"4966aec1d737a12b8e232a53a8076ffa14c7ac1952e029b3081cda99be00538b3ad23f6f692e7fdc7182c83e19f63150249277fc2698d00b99de29865ce9a052","ssdeep":"","tlshash":"d87000030000c0c000ff0cc000300cf000f03303c0c0c00cc00003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.414136Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"db0a49341fdf4c15231eac4c984768eb","sha1":"7f672147079f45765be2a5aa1259520ac55d5187","sha256":"a096d07cb4eb3f9b68c17cb876dbc2e067c1092e38dbe84704fc00b1112b5530","sha512":"a5398f33a60988ff68eff961ead7ec27f66bcdb464f2b27d8fecc05dd0a8f578775f2c18e3c2226d5ee87592ea086d56f30bf93f6afa306e033fb8fb4aa81589","ssdeep":"","tlshash":"a47000030000c00000cf00c00030003300f03300c3c00c3cc00003f003000ccc003003","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.427831Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f2f9eb963a5bc112561501b10eb9f688","sha1":"e7be8ffd6bdc4082a2c86b83940f291ddee8cb9e","sha256":"eb6d59fae5702df6e19944401b185d631f495acc6a1b27707bc524e4a26d3768","sha512":"20c4618e3e2878f73570ca9234390eeebcd6ff84b2c6e3041fd8d0c83cc0c65e62196eb30d97bfeca2a5cf04adaa55d389c52ba7f4dc5e4152276a58e25f6ec5","ssdeep":"","tlshash":"4a7000c00000cc30f0cf00c000300300c0f00300cc000000f303c3f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.421928Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3b7cb9e898b2368382615803a65c75d3","sha1":"60fa902993681d254fde4c6066be68db74de2ed3","sha256":"38dfdd15caf30f9899d49a6422b73018cb552f873de5dce24d1c2bd01a72c888","sha512":"025b1331e59f60815a6bf4e0ecc18ee6a3a10fab697265e9acd05509478d5006fdc8fe9bb288e58e89fe5d5f8e1a79c2b2973711d5bda0b70ac68eab41b1b324","ssdeep":"","tlshash":"e870000000c0cc000ccfc0c00330f3c000f00300c0000303c00003f0c30000cc0c3030","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.4295Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/google.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/google.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1402\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c2ZBUuUai4WNkO0fgM7I%2BJvtqB6CYaEqio5jk2MBli6ru6MrT05z3c80OD96TK35QwIv8wMq0FLfm%2BrGTk6cbrImcDeEOYVhZfVcTg9HiNiIP8fn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1cec7dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7548,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6b152699476854bb4c139fffb3519635","sha1":"8c981380a5a3c1c2ab0e87daf1cf5da1538ca1cb","sha256":"dfd32d82e39b0b720e9c9c2adf95c4b65ee95ff4f8649f6dbf96425fed89f87f","sha512":"e5ef09d46a94481991287a8cacdf8d11514789d0f21e862b40955cb72f1a8cd1a08551bac215a20d0696ba5dd598ba72b583f768f4f4bf951188137e33eca440","ssdeep":"96:cObJ8PC4vIQwMORAT3Ls6LCLlQMk619By6gBxOBurUXVIoC0AU/+xOXKK3KKk1:c08PA4bs6LCLlQ16PBy6soC3U/+xu9m","tlshash":"70f1df5aeb106009b132dbb8bbb24b45e91d04639b0785b9bb9d6340cfb156c5372fdc","first_seen":"2025-08-08T20:20:25.057934Z","last_seen":"2026-05-13T19:15:32.300065Z","times_seen":19,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33018\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 21:56:35 GMT\r\nexpires: Sun, 03 Jan 2027 21:56:35 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 269544\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-13T19:30:59.184465Z","times_seen":68897,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":333},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/images/event/common/nav_logo.png","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"2.23.13.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /images/event/common/nav_logo.png HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\ncontent-length: 75475\r\nlast-modified: Tue, 12 Nov 2024 03:02:02 GMT\r\netag: \"6732c52a-126d3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=300\r\nexpires: Wed, 07 Jan 2026 00:54:00 GMT\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nakamai-grn: 0.150d1702.1767746939.27db9526\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 761, 8-bit/color RGBA, non-interlaced","md5":"ea4355a07956e652ea65d992a52bba11","sha1":"94241d97565db205be2e94932161a1dc5c9389cb","sha256":"c3181ea96b1b9c67200064d53b7efb781b7e68a32d760810e12be0c157dfbd68","sha512":"f067e559c9edf07269c44558314473ae1288cda2e83bca28e90954a70701f7a074c2f2a8c4d7a5d083dfd96a94ac3bd850baadc2f719a2061a21b2ab5b52a40c","ssdeep":"1536:Pgm7qwqRllfviaYQ4MT0DTN5P5j8s0Q+s+JxPie3a8YfRImAfiww:TLHTb9qTXPix8Y+1nw","tlshash":"3873f187847ef89a9d63923311bf5f7b96478539a3ecdfb0e489a9fd04b5c00524e058","first_seen":"2025-08-08T20:20:25.003288Z","last_seen":"2026-01-07T05:28:10.095666Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1005,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1002,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/fonts/laza-bugatti1.woff2","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/fonts/laza-bugatti1.woff2 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzt311xhs%2FvsPRQ%2FCENFgTKwW4xl80O7a0pi1VW65E4O%2B8vQPiuefsR%2B5PoCGJoVPZH6hfSsPjhm3YOn%2BIiahdBcqpVsRDIKg4BVbOIakAF9kIu4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e79805dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/media/jeda.mp3","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/media/jeda.mp3 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:48 GMT\r\npriority: u=4,i=?0\r\ncontent-length: 8777\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncontent-range: bytes 0-8776/8777\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b65srWRLWg%2B2B2UIj9vW1DyF1LK5zt9zKDuTmo6UQcLVjPkcZlS8pxFXplCQxUhIDGKnkl7dejl%2FxUc%2Fsw1MyyE%2BrlUjNN0Uod9wdp1vzOAsLmgy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e90824dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8777,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"883fc3fc736f380c8a46b97225eea695","sha1":"e541965d3e629e356af78e061f0a9219614b0cce","sha256":"fb02ec8f03911d5b0b01fbf1c948cbaf894636bed7267c17691acaab2cef103d","sha512":"6976b2f93cc684d685e804aedbb250a7f2fe23fecb32c9ecaadfdcee76e422084cd1f6b615620fb6b52be0357e9253c69432c68d569d5edade4baf4bba8db5c7","ssdeep":"192:h6/xJ/05V2Hcx+8K7FPQrSvVHbCsRveu5A1kArv8FtTP:c/xJc+8x+d5ZNb1p4vQFh","tlshash":"04029d96df989936c01f81348031410e423efd8eb42dab284f4ea1236685374be9eced","first_seen":"2024-07-04T21:43:15Z","last_seen":"2026-01-07T05:28:10.045205Z","times_seen":16,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.give-rewards.midasbuy-page.com/","fqdn":"mail.give-rewards.midasbuy-page.com","domain":"midasbuy-page.com","tld":"com"},"ip":{"addr":"43.160.250.121","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T00:48:57.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.give-rewards.midasbuy-page.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 08:40:19 GMT","end":"Sat, 04 Apr 2026 08:40:18 GMT"},"fingerprint":{"sha1":"36:75:9F:6E:A2:1E:EE:DB:9E:11:8B:C4:FA:AC:59:15:63:60:4E:5D","sha256":"42:80:E2:26:B2:10:0E:BF:FC:85:0E:98:AD:4D:9F:07:05:09:88:B6:D7:FB:30:83:AE:EB:A6:88:A0:8D:00:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.give-rewards.midasbuy-page.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Sun, 04 Jan 2026 09:39:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 315\r\ndate: Wed, 07 Jan 2026 00:48:57 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":898,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5b451dcd0677856824e0f0f88c43df2c","sha1":"08a5affb540a764087185ca18288a09707c00444","sha256":"48433539423bcbbdf4c32126988aa755551422b7f21df46c37f89c98bd38a5b3","sha512":"e0cf764ab9ea9bc9eb64656cbb5b11616e5d3ee1a32b703d898040dc3e80f2cb1c81662f4d779d1b9a89b816106ad6aad7eb11f407ebacddb5e9ff1ab088610b","ssdeep":"","tlshash":"e11189976c8228184030c3746afaf09dee9744a337018671bdfd3a174f74b928897bd8","first_seen":"2026-01-05T04:44:18.328909Z","last_seen":"2026-01-07T05:28:10.109981Z","times_seen":3,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":364,"dns":1,"connect":178,"send":0,"wait":180,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18778\r\ncf-ray: 9b9f73e26dbbb50b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64cac444-495a\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1559445\r\nexpires: Mon, 28 Dec 2026 00:48:59 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wn%2BpBLeac8HMZFwXjd7PH9YswVw%2BXYmshV7gMDJWu2gHiu6WoDD8ZuiRajezO1sf%2FuzxR0%2F4%2Bul2DxbbUymoyAxTSeGmCEKP53t2T3PFmAOqabf%2FjBBVJpzGX%2BWqmajra218ulpD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-13T18:15:28.676879Z","times_seen":43642,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":1,"connect":6,"send":0,"wait":12,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 07 Jan 2026 00:48:59 GMT\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24899,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"bbb0673ff5bf4a8964b87445cad3abcc","sha1":"c6aa15eb0e0753794b8066cbf104f11dd340d52e","sha256":"2a77cc2f64f2636df24132aafae79359498c0b9d29422d88c0864cff622c16d7","sha512":"8ce126ca4337c662f7a3cf6480a50bb054ae79c7b55798a78a826397339fb5434e30daadf2195cd82f8f5b2cd55ad19ccd563e1d6af3ca3b4783607d9543c9b1","ssdeep":"768:38XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1T:MJiWt","tlshash":"e5b20ca1041b500097834ce223cebf35fe1f52507142d0b5abfdab6baddbc6652693ad","first_seen":"2025-11-23T00:37:31.222975Z","last_seen":"2026-02-19T13:19:54.484958Z","times_seen":82,"resource_available":false,"data":null}},"time_used":909,"timings":{"blocked":399,"dns":5,"connect":15,"send":0,"wait":34,"receive":0,"ssl":445},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/link4.svg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/link4.svg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:11 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1045\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=THRBMOVUTjsKpE2eiNKds%2BJwt2LBT4ijelJfX74CTTgO%2BQuyE%2FXD4EhLryDg%2BUfEAjkH4ycJ8q8vk9inU55H1W9ObV6HYVsrL4H839XcsE2fWobQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e2cf97dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1884,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"62358fe63855ee53fce1dc582a47b71b","sha1":"e6a92e6627f822c7610dc4d6a589c31d23288cce","sha256":"980ae19a7730ea781a9d0faa28f01461b70d3a8699d7c02ed1314d1d56ba23a2","sha512":"736ee3d47bf24b2c98f6951d5271347ea96a41e25f7d5405de801691b8cc7d26fa3f9cba94e376ed3c5e6bd99d10005dbc7b4b7ccacba37fb757122bacbb8c8d","ssdeep":"","tlshash":"5841c6bb21c9680896f85946723021445d174c9dd17b30f7ffd137faf159d9274e2294","first_seen":"2023-11-01T13:59:15Z","last_seen":"2026-01-07T05:28:10.042669Z","times_seen":38,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.10.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.10.2.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-16bb3\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nage: 4868321\r\nx-served-by: cache-lga13622-LGA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1, 28032\r\nx-timer: S1767746940.534133,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 32788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93107,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T17:54:33.040526Z","times_seen":15655,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":23,"receive":5,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/fonts/laza.woff2","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/fonts/laza.woff2 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 04:43:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 16:01:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22220\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 158717\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7pEcwuxtAJMDeprnKmxKxxFzyICod2dcK%2BSf0zkQqlX1Pifrlm2jkVZpV07WCHujZ0kp0uaZ7nts2I9TC63U%2BlIWubd1JMh3P65eard3bpyW8WE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e79806dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22220,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22220, version 1.0","md5":"345579e8566a3dd6dc9feb5362fbe7e1","sha1":"df075dd0c26e72fd7df19948f07904c1eaa72ded","sha256":"1d0dfcc32b3be2bf3b3dbc371e9b7c5ce205f4bc6f7c8ce0226256cc7064c3e4","sha512":"948b48b697dc39d4c921ef8765053cb414edd47d12c69856191c5e28a580a1ebdb6020d2b8d5639d7ea89fa24fbdd73c16bc5e461b86f644420fffd3fe76b397","ssdeep":"384:1dPjUYc1ZQrSCantuGbZZHmv8m7Uh8OIXXS6pL/AzxeDxw+wBhQPyX/g2g8rYFGk:fJ0qrSCasGZZH9C+lIXppzAz0SLnPgCG","tlshash":"82a2d1a9a2a202d4dafe4405bde8f8b35cc2b43adfc687394a74f54dcc845d18534d5b","first_seen":"2023-05-01T09:29:40Z","last_seen":"2026-06-12T01:02:04.51694Z","times_seen":983,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/animate.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/animate.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 09:37:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4821\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 227497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyizTwW%2BHp5CaZU9vLkqopvZoDLmTO3fyhhN1tlJB%2Bz5hDlK1wuaR%2BFFWSpLsZ6Q7pC%2BtLCSTiyR3W1N8dwce4f9daU5dFGlhVqnWbSFj7oNhbzr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1eee3dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":93714,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4223f8ba30f17977f3c627c2f156b5cf","sha1":"529906d38a913599aac24758070807845a0d80d7","sha256":"d4b4af22b9d02bb207dc709084d36dbe24950fb3b316b2dbdd855e603e94f5bd","sha512":"ce48f3ea1273e2d843e37fd6a92960748d89990d7b8e4ccb72bd3ba2486fec3b61a0ac10809cf1644fba37bdcf3f4fb3f54d2155a8b1f6ba7278fecf0d76e09d","ssdeep":"768:oNuKuWg9unuLuJu9KIZQMcLceAPSdJI0JI+q3ps:ggFKIZQMcLceAPSdjdq3ps","tlshash":"08932cae2991118452238a6d83df5e68573ce57318269cef73c2584bcf8bfac63c9147","first_seen":"2024-09-28T01:39:15Z","last_seen":"2026-01-17T01:41:20.600658Z","times_seen":12,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/laza-slide.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/js-zone/laza-slide.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37928\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Tgqey5%2FbGjAaF%2FsxIhHaj8ensn4MshH2PvegaGiGqXtVGq6%2FT5UdMJ57DButEj5h7Lqx5JdLmFIxEzSTa1Qr%2BakMQ7bxjZBH7FCSxNQ6gqNzO5e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e23f3edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":153571,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65511), with CRLF line terminators","md5":"2dac41498cb2950e303c5e78fbd10ad3","sha1":"0f48744da81ce0007cd2819b17ebffa153d253cd","sha256":"ec11f49e96a1c0bcdb253c9e6835331c2428a7a9f53e071df199540bbf805e99","sha512":"1af2359a56449af7e75e6fb1fe8d389f969facf53973f5f7dc95a9bb791f5703ac83b71e8a656d28bcd3ff066cce2e7ef1076f5e26e73a38aeeb550fdbb10078","ssdeep":"1536:jKJSQfGoh04w8NOLjuBEFUjF3j7Mt0Blx1hFYkEl+pANMtkOmC1myiBnmYlXv9I1:WJdhdNsMYkEsmZBn1v9Is2ohDvaDYU","tlshash":"a3e3e789a261b67646e3169b93e8c211b3b50540b409c8f470fd4c9f597ec9813feefa","first_seen":"2025-07-30T14:27:42.363403Z","last_seen":"2026-01-07T05:28:10.052387Z","times_seen":9,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/4.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/4.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57111\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=23Cm95X2E%2FuR%2FestZMii5or4ukuxUlbUbhn1w55q6v%2BYNylGGWI%2F8EtW8cqSG4pvRn3XJ4BEr2TaBy3jGdAfThrh1DQwQVtQ9OSFhbr%2FzyBv9WXT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e28f7bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 350 x 350, 8-bit/color RGBA, non-interlaced","md5":"830622f63f5cd64bb9b66cdb25662b2c","sha1":"ca8d8ea953f59c8745ac62d126814db133a395bc","sha256":"538c096805ebddb99ba4282f87d3347b7e7e8707d053654fe0d361d577bf1d90","sha512":"2eb92368a2a966812b9f3d435d160c1ae14535e149c5d68a0da5d1c2feb0d3fb4f7b9e425cd27440d707799a6b14eac0ef39c26b76251e5b8333fd5ea303df2f","ssdeep":"1536:fRwRdVSW9lL3UoEAgHRP6eegyGgOZVdVKvYgpMyUZyL0n:fSRdsW9xRXoRPjegynOZVlFyUZyL0n","tlshash":"7743010eb5e0c996779f18b532edd4e4b13af9267d2c178170f985678eb6ce2c48420b","first_seen":"2025-08-08T20:20:25.044935Z","last_seen":"2026-01-07T05:28:10.106742Z","times_seen":7,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza1c.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza1c.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11322\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yW5F1yjbJAFDmnLdsJ1ebCZ4SuUkPkC%2BhMOz3RobZ4Ixduc3WUhzGnW5k4sBhfo8X7O2vo8pS7llM6%2FWY0EdtbWNFTAJG56CdJE4yqZinzMHcjBL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e29f7edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x469, components 3","md5":"d9ce1407d86ce1fbe826177a152dd472","sha1":"88b787650402f1e4f2ff8b623162a2ba84cda974","sha256":"c463d998194ddb9d3b595b4a2dca4b5a462fcd4f5cac18a9d038f113ca32b9dd","sha512":"3d9140b879367394cafe59a59b7061dd5aed4fe537619c617b3f3c31391a0e2549fd262cf233c616fb5c29abd77acabd039a3f087cdf23e70c81f493501a66ce","ssdeep":"192:9wp3yydCfrsxX0euUgbtHlSj1cu4hHCs8lZTnJLfHtFLjHRGDnzO11KW5iGpUmyg:9wpFG4xX01UgbtFShcDhKltFfQzO+W5B","tlshash":"5c32afb673b21127f038cffcb2e5c79ff626749250807538626256a439d2ac90cbde56","first_seen":"2025-08-08T20:20:25.049747Z","last_seen":"2026-01-07T05:28:10.084434Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/Show-Password.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/Show-Password.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28355\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rW37o9SjBXWGD7GKulte6MvSL9IawN955j39DyPSHIa6tTzntf1NOmetoaG%2BebVON%2BbFerDXjiIb%2Bd9eAOV2NOY47ve6xTkI1nnlWnDgu2dtQn5I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf8ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced","md5":"2fd203703821d5ce5d18bee2a51b779a","sha1":"a78d7b1369ce8bc34de57909af142043cae446f0","sha256":"6b82611fa96f118128b0db9692dd982ca0fe79b1b4d8048946880600cc4f97c8","sha512":"f889c843a380cef9b5746614b9bc6ab067b483049cc03866953867e1e5ce2b5e1936c965975c88e2352a3ebd0d6a1840252edbf70f01092cdefc7e4cff1868b2","ssdeep":"384:O0uuuuuuuuuuuuuuuuuuuls7IhoG2PkCEbDk4otLQORTaxqw9YLFjKIUjuMYu3PV:D7NGasw4otBaMw9WF5UvjXP3nt","tlshash":"41d2bfe3d7b94ab7c9a53271a150924722221cb901bcb89810c0bf9e673e6cc6e76f11","first_seen":"2023-04-30T19:27:11Z","last_seen":"2026-05-13T13:04:07.256793Z","times_seen":916,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/Hide-Password.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/Hide-Password.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28029\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QCB8SVrs5FfUNVQgVweaZSAqSTjm803q5HzYtXn1zrZPfReePGEnEgh2A1D%2Bu3XRWHIDaOgMEFtn7W%2FShfHzeV9DHhxLcYHTHQhgdbR4wS%2BLxak\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf8fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 8-bit/color RGBA, non-interlaced","md5":"8d1f08b46884df302bf7300fc234832c","sha1":"5735d57b6fa211c400d439095d5ff2f5bb57e691","sha256":"e4cff1f68b85c3343554090b3479273a54e5eed2dbb3e56ceb9f86c4ebe8b0e7","sha512":"e9e6d2c2f0df932daf50f158bad52c4de66fd403a8400cf9cd25fa48fa8147f65819d722773d9aafdcac5bfa4034f5540f1fe7cfb9b37d97f2a700eb54242a89","ssdeep":"384:bYRVO2zHzAUrJJtUOqhoFiXNm3EhiPCBk5u+z+b1o98PEgkVnRsiT3oCB41+ddD+:kjAsJtUAINcEhgCBk5mI60VRcCaqdC","tlshash":"95c2ae37f3a289f37da653727a64511a14714d094abcb95ce4c9ad12fb7c2e43039b83","first_seen":"2023-04-30T19:27:11Z","last_seen":"2026-05-13T13:04:07.317976Z","times_seen":910,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/popup-close2.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/popup-close2.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 358\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bD9SpyU3m5QgzHvRv%2FpXyQdyWJPWAVpx%2FtheDHiyaVwwKKy2wFaVSfAgZbsyV8kWW4z5NxgV0zXvOWlCgbQ8yJBpGAikBR3zI%2BdMM9NSAipxQNi1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2ef9fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 31, 8-bit colormap, non-interlaced","md5":"14f983708ddeb2052c1756e3d79f7031","sha1":"56d439d66495faa3a784b161d044f6edb853f8ac","sha256":"47b6e3288d9def65b44f0ac0ea8a5e45cc77aa1b934b85aab003cd9076e1ab1c","sha512":"b5a24dd03566529fa2488801cbaa125fd3b2ad9e4806bfa60af5de0c36550d65a6e902cd444f03ea161ed8350cdfaec376e29b53d702cb8025013e8072445fc9","ssdeep":"","tlshash":"43e060818cdafdfc872dc8f2c3ba68d83808a8211708008b40c49d3ecdbd0428121f80","first_seen":"2024-03-01T19:08:45Z","last_seen":"2026-06-09T13:25:30.742902Z","times_seen":164,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.give-rewards.midasbuy-page.com/favicon.ico","fqdn":"mail.give-rewards.midasbuy-page.com","domain":"midasbuy-page.com","tld":"com"},"ip":{"addr":"43.160.250.121","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.give-rewards.midasbuy-page.com/","date":"2026-01-07T00:48:58.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcalendars.give-rewards.midasbuy-page.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 04 Jan 2026 08:40:19 GMT","end":"Sat, 04 Apr 2026 08:40:18 GMT"},"fingerprint":{"sha1":"36:75:9F:6E:A2:1E:EE:DB:9E:11:8B:C4:FA:AC:59:15:63:60:4E:5D","sha256":"42:80:E2:26:B2:10:0E:BF:FC:85:0E:98:AD:4D:9F:07:05:09:88:B6:D7:FB:30:83:AE:EB:A6:88:A0:8D:00:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mail.give-rewards.midasbuy-page.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.give-rewards.midasbuy-page.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Wed, 07 Jan 2026 00:48:57 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"mail.give-rewards.midasbuy-page.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jipang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150020\r\ncf-ray: 9b9f73e7cca10883-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-24a04\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1711038\r\nexpires: Mon, 28 Dec 2026 00:49:00 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FedrF6w6n9GprL0Gn5%2BX6GowlJdvMWnAVZn5eX7tuW2B7z7gmRmDj63few0yQIML4p5OsB5C%2B%2B%2BPGnDNBH6Q4%2Brclox9cKpkJV%2B1LvU%2FKsMxtJQZm0HUDMdIjS%2F8Hlcy7ooize46\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-13T18:15:28.64896Z","times_seen":37238,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":7,"dns":1,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/teko/v23/LYjNdG7kmE0gfaN9pQlEpVsHVQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jipang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 01 Jan 2026 11:15:14 GMT\r\nexpires: Fri, 01 Jan 2027 11:15:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 480826\r\nlast-modified: Mon, 15 Sep 2025 17:03:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15264,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15264, version 1.0","md5":"21c1966f1535b75b772cd782f4bdce05","sha1":"df8c2865d1240e3eb3183d3f8fc97a047ec1a92c","sha256":"13626adc698ca3982595b130053d69e117d004c66a1449227597a86b6ac6e446","sha512":"9c94410c1c76b8fed70f9645a696f34a1298c14a62de11b34331b82a7b519096f4cf20229439c6aed35b697e7d0f4ee6fb9e78ba2bb7cea8761c1a3bdc0168a6","ssdeep":"384:uUXHu3IYTpYgOMJLD2/me3KLlixWBUL101DUgmBfbg:3MphOs2ue3KpKJeDGBfbg","tlshash":"9a62c1258e352dc6d74ec72b81b91c61c34455b3ca2ede2eda54b7085b3f0432a3681e","first_seen":"2025-04-24T04:57:47.892353Z","last_seen":"2026-06-13T11:23:52.791875Z","times_seen":1921,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":52,"dns":1,"connect":7,"send":0,"wait":8,"receive":2,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/media/open.mp3","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/media/open.mp3 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pTWTF3PtfB20dvWEC0ftd2yLRSSwgXT%2BocZ6aY%2FI%2B5oIkehjCcxhd57M%2BCpgXoXEnWRqHo0IHxhl%2FynC%2Bfh9cTEfXT8tgT9E0OW5tCZiSMj%2FUmHA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e91827dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/2.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/2.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28845\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwpjjQsXwQ7f0I97xTs%2Bg8BYr9Kn82CW3xCPohrwIjNVRFFGZwxMo08buenAed5VlB%2FB0sBXWBH5%2B15iPlhM22QQkIWbIje5unYEd%2FMmiwINwcp2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e28f78dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":28845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 469, 8-bit colormap, non-interlaced","md5":"419e60d0caf9e2241ddbddfd3adbf94f","sha1":"f70f73f3ffec2ee3f9db67f258649ff0917f837a","sha256":"cd15982a69930f54d5c56a98f2c6d83192e696efe61226e7fa5e6f3a037b7dd6","sha512":"3c779ccc37beff5de0910e420cd65554b997ddc68c48f0de8b1e3879017758455cd071ad57bc47a5b3380ba0b870bd5da01431e570bf36f880a8a9a95d08a1af","ssdeep":"768:Pw2vVWYTR24Pq73+pOoRqtXaMn0PjNPLhZN61TwgrV:I2tWYTR24Pq73+pjkI/PjNPHk1TwgZ","tlshash":"e5d2e14d0ada8c94f60258bcdb390b8f6a3074f7f0fde48aad561446ff2520c39957a5","first_seen":"2025-08-08T20:20:24.977079Z","last_seen":"2026-01-07T05:28:10.039694Z","times_seen":6,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/8.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/8.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55235\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIv81wnWBl0nmeq6eB1XB5oEZMaPVUKPoT3O14hmle%2Fk0erainkCzRw6uDaF%2FB7k2Wfbf8EVAnosKljZbJmnsW94hyJzRemuL%2F0P3Cck2j5LUB4I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e28f79dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":55235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 469, 8-bit colormap, non-interlaced","md5":"a18e5c9e4df9dbfba7c5ee099fde33ed","sha1":"7618ea73ab9d28413ceba632494a165eef5428a5","sha256":"d9be2e537d1944116bb9f3f2f6e7a29bb1725835557d4f707f193c000d4b94e4","sha512":"8eb26695e0dedd6e61a70856e3dfb4c2a45697a2ae3baed0a1bd2918ae9c4a515484892b45f82088808dcdb1969e7e9be804ebfa561079542cc8fbb3b612075c","ssdeep":"1536:eujowwtFrPlokpqz00lNh7XWAN4tZHd7E3HDyexCcPNDqj:xMww/lxpqz0OL2tZHdczLPkj","tlshash":"b843026735e199f59fa710a56003bcc2a2f72de46abd944f140eeb2cda403de17c23a1","first_seen":"2025-08-08T20:20:24.931732Z","last_seen":"2026-01-07T05:28:10.100884Z","times_seen":7,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/validateLogin.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/js-zone/validateLogin.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 08 Aug 2025 03:04:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2545\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnmNuFhQiE6mxawS3ZH5UlfRbXAJWrdFVkHqftHkycVZ35fwVSLLoFtgGqcibKPqmvIWdVsEr04%2FpJwukEdaecwtd4Fa6QtDUueQzpZxHXHwiZoY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e30fa8dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":23625,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b880e470837853360570ec8c04c13780","sha1":"09ad03b3be7d7469ec5d71045eadd88fabccd756","sha256":"3c32d9fbbcf37c5a33196abf5bb7671d513346b299a7e2241b101880f605d145","sha512":"925efc9131f2111ac6300e686334742044f6e326451e1eaeddf5301a3f72a8dfddc82af9736cf6ff3c849cd971d991146019a6408da60ae3a2278ac6894552e2","ssdeep":"384:XYXGinAiZjQ9Ab8vMOOl5OXWpmTpKOQRIC0v8yThxbw+MKbkDlmd7xxB6oW:eXndZ7l5sbTW","tlshash":"80b29a49b2041e955932e6b661b74004ff2c591f05028f09f8bd59c82f71f9afeb6e8e","first_seen":"2025-08-08T20:20:25.020703Z","last_seen":"2026-01-07T05:28:10.049932Z","times_seen":6,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza2.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza2.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15783\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyehDMOOen4Fz8E%2BHBRIN0cqR6L4Bkoo4BXljKx8lCx7VGP%2Fxeg%2FDxe5z9XoezObAd6VKGV2v0UQWBl6CgpeJp4nua610opEHBZGV0pU72UcPZDC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2af84dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15783,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 480x469, components 3","md5":"9f96ff428fa6dbc71811e9d6f8ba5ec8","sha1":"931e86b89482abfcee235263645f02ecbb2bc74d","sha256":"c3c0d3c3aab2eebf6c535b46f1ae1ac69f7d1bdaec258a93854a4e95b7da637e","sha512":"a2ee82fa5c26df274caf0cfd074ff690fa85bb11e358a810d62bb38086ffdb29d13129f7387103d485c01aa781606bcdf702de1fb1012c4c41969078b0e9f7ea","ssdeep":"384:bHT/cy3MSxST5pExMaWzydeytQlC/AAH3L:nB8cSTn2MaWeEy+i1b","tlshash":"dc62cf62d2944503d7e2b13ca639535ac32bba6cd5dbf8c94450a6c50794b2aeef0ad0","first_seen":"2024-04-29T19:19:01Z","last_seen":"2026-01-07T05:28:10.093331Z","times_seen":17,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/footer.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/footer.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22967\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eieXnQ9jH2%2Bu1oToISnF1y1Fp6%2BWWaH7PXNAl1i%2FYeFfKIukEG75UAlo6ep%2Bk0FQRj734IrrZeNug7xh7jHYbpHcyY6GclEmxDOaSvgwUc2jLSqJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2df9adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 189, 8-bit colormap, non-interlaced","md5":"24a4294ec4b1d19957c923deab92d379","sha1":"31997553d6993eaca2abb061b3672eca222e39f8","sha256":"a2c89534ca2b73118a92b4b637f87566cc261b1a0ddd56d518344f18f6570397","sha512":"301ca33cb6e4f7306c465aa5627aba2ba5db6c0360bb881fd9fc6cabad4a02bb5e2655c30f4f11f68340d309df1c0a70875879be74fd3788b9c3b80c0ee138a4","ssdeep":"384:TI3hgMqibMNjJUDd4jjG4rxWoY5+4UhYVVrx5o9HIycX+uQ15jzZhFuUJpWn:T37ioEDdUcoz9CX95oJTBhFw","tlshash":"16a2e10064645c2bec64b0fd580f55cc7d8fbeb8b0c12537813bb127667567baa36852","first_seen":"2023-12-16T16:31:33Z","last_seen":"2026-01-07T05:28:10.122247Z","times_seen":75,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza7.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza7.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10881\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBF5wHL6wHWwGHb8QEmN7NMz%2FfBMLHCmjb%2BJ5kcC2Nul2y8HifT0XtXwBJsI%2Bx12esRJrXnv4EeufkIktJZBeQYS3E8v%2FgClbJsQyQNkJCNMgU6z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf8adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10881,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 480x480, components 3","md5":"e61c10e8a62d4b0d4898ad0d7fabe692","sha1":"d8261cab00024f8db4a66e8729710ae7e07ad83a","sha256":"1b17de9f453e46de91addf8fa40f5b5da0b9b1b20007c13086e5c6b6767f0017","sha512":"39079d3595fb544e08ed6863cbff60722273f55c4230e3bcfc035b05fcc45406e4f0904d1dbe54e2cba862e2de85ac93a2d554f1bc2a6d84d9a12abf5bd04f98","ssdeep":"192:Ee3UvyDy1dbRb+nsh3hO0hEORnNQpUXsEuUh7Mll/EZEMPj:FUaDy1dbRanSs9OBqU8LUhIP8iMr","tlshash":"c2227dc5edbc9553f0612b7c380de7bcb82eab07cc6c4c4776706464ad220b2654a8b7","first_seen":"2024-03-21T05:31:43Z","last_seen":"2026-01-07T05:28:10.116722Z","times_seen":19,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/kotak.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/kotak.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12543\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGTZ6dzGRLRnLVfSe7gj7CaVm5pIKl4GnFH00zKvysbxVd%2BYNuy10f511uOTJ6DGF1CVNQ8Or7y%2FTGuHOwYdOqZGJWrLqYZcF9j8OzTLKutWpcSO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2ffa1dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 396 x 396, 4-bit colormap, non-interlaced","md5":"96998f93318eeb1ebadbcb472410be96","sha1":"1539b22930c46c466425015b14fdac2b3b2782a2","sha256":"693719b4fc80e357b8adf14a5aa17f3cc4ae6e757ec8c2ad05cf5060eada7a07","sha512":"4d3ad974095d6a2c7e3344d34e621ce855cb1519f9326ab95e5f941d13a38f30686a4dab4729bc2472bfe045559dd0ee0aaf7a37b132dbdb1771d12b2f5cfea3","ssdeep":"384:uFls5m1PVT5RxUaC9w2ggVyX7D1atXIGMK:0s6BxUaqlnVG7D5GMK","tlshash":"6d42cf56208695bde506a3ac595598cf24c1f59db5bab0d7efcb3dc42ace318308b331","first_seen":"2024-04-29T19:19:01Z","last_seen":"2026-05-13T13:04:07.19503Z","times_seen":31,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4216\r\ncf-ray: 9b9f73e27dc7b50b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f5628a2-11846\"\r\nlast-modified: Mon, 07 Sep 2020 12:33:38 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1548823\r\nexpires: Mon, 28 Dec 2026 00:48:59 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wnUgWdGNIDuu74NXEgCup5xBJVqCvmUFZy22ZMlvRi5T1XE4alDbvJ6Z5JWXdG8OfS5ytmkCSYUkWgcwdKp4P1Lb5dgrfo1A6UvBW1RbVlHj977tqLLErlVpOjFuFy1IUcfCGFKU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71750,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-06-13T18:31:58.082472Z","times_seen":30252,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":1,"connect":6,"send":0,"wait":11,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/en/images/nav_menu.svg","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"2.23.13.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /en/images/nav_menu.svg HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 21 Mar 2022 13:24:18 GMT\r\netag: \"62387c82-374\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncontent-length: 426\r\nakamai-grn: 0.150d1702.1767746939.27db9524\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1f09c4f5c87271dbccf8cb05885ad42","sha1":"18bbacc9c372dcb6bc77c2475595e058c1ad1594","sha256":"b0d849e0e910d13bcdab1e94f5c799dda1a9429c908e18069f9dc7f7d551d58a","sha512":"bad23251371f1bb5a62aff2e768ee3df4c885e1746bedba8b16cfd5ee24e31ada4f88e125f9ecfd2d28baf2b7ad97fecdc1bbc5b4b28e76591f8483f4aea8729","ssdeep":"","tlshash":"b2112998c2e5c4b15c1e461194a06dcda027f01ac27543baea9aee57d0b87c61120f27","first_seen":"2023-04-10T07:58:16Z","last_seen":"2026-06-09T13:25:30.742298Z","times_seen":1722,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/google.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/google.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70339\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0mpb6ROwxc8IDjDz07IVVdQ2PHmIPp%2FZPcrn8JDsKvlejEl2Yf1SYZ3hgunKdkyyUR0P48lmCx2t2CQFzyH%2FpnWO00dJZ77JwZ%2F2rpeYL4JHlem\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2efa0dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":70339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 465, 8-bit/color RGBA, non-interlaced","md5":"95ee18d0114fd000ad2f4d71d7e694ce","sha1":"18864af07d81ba8ed080b3d013ab807e3e558c3a","sha256":"c5a73974a7cc2f30ba0bf1280f10994dd3d2c39b828f7c1a72c24bf9e14fe2a3","sha512":"d4aadd30d1e23e86011aa929f34d6ccef667607e9bd6ba19428f2602023bb9678efaedeb73a802fa04a26e05980fd7e671efde53914cddff403ad012537359f3","ssdeep":"1536:i8vXzmuCDICIwDQfjdXO6atYwHZwjcmuzcAW46Z27UbcG2fAO:ityJX6YgZw4mfAW46ek2Z","tlshash":"df6302adc2f7e046c5df3325ebba5bd787436bc33296d192ac06143ee811c425498f9a","first_seen":"2024-09-07T03:45:51Z","last_seen":"2026-05-31T06:09:53.735271Z","times_seen":92,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/7.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/7.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 57235\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=513kwLa4E35f7ozWWvs6jxwiWkzY%2BwtjqlSE8KlOUFVjy%2BMbDM%2B3xqEOIZlLnTfKr%2BOT8I7IexTAhsk47%2FGDmLJqsjCufwlp04SVPMeZyT1b2jf1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e28f7cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"42af591958141a843576c12f54c9aadd","sha1":"987798e12b93196c6c27a03c833e4fcf4b27b5e7","sha256":"b0b738bee77c44a9d0fe0be84ed8d87cd8a66aa0aefa5a39c4383e74a2545d0a","sha512":"e7f42077a29ee2e3770033e460af764e85992a0044233ba4ad521062507f0f5c48567c4b7545e0163adbc9b0eb4715af758296dec7f3bb381e4c01ae6cbf1f00","ssdeep":"1536:Rkj0KrHsqufxI+5Mh2DKFcgE2aXz3+yxsZoMzLg:pGEjKFc7+yxT","tlshash":"4b43f16cf162bb7bc411d93c4b908a0ef3b2297e9b490e2d8b2569d76269079d007df1","first_seen":"2025-08-08T20:20:24.972001Z","last_seen":"2026-01-07T05:28:10.055575Z","times_seen":7,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/gift-zone.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/js-zone/gift-zone.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 08 Aug 2025 03:04:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4807\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MzidW903R4jtZP8hYVqphsFyjkEKCCawQLgNiek4QYnJyU%2Fi8ylU0JUCRNDUZSEHf1snS0gJFRgND5Bwmh7d9fuzELBJTvJKm%2FojMf5xRC8gXsZm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e30fa6dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15039,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15039), with no line terminators","md5":"eea5ff01ef517ae1846c26b99688135a","sha1":"4fb74d0214b456d89d17075bba66bebd7bc3e2cc","sha256":"8d1fb3c5d89b26a6fc1a464659e14ce36cc3c17700fbe860202c96110729bee9","sha512":"2caba2d4ec36e8132581608b313ab093cf63d9bc720ec505df0c42c847cbfca49c8725e2ada2b1f9d694a91032ded8a7ca4ce788706ae927baf0b2d47adc1caf","ssdeep":"384:KhiSpB/52CZ3UTjX+uubYRA0VNFiubsiV1Ft2Rarjh70o0AGEBqCM1:KcwB/52CZ4FubY20Td1iRm17z0AGEBqB","tlshash":"4462f8e34acd34d06a2df160f73ee199875609b9289d84ebd4277a62690409e04dffb3","first_seen":"2025-08-08T20:20:24.979512Z","last_seen":"2026-01-07T05:28:10.107521Z","times_seen":7,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 07 Jan 2026 01:37:00 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUxQ6EBgU0ZUCHYCUY8qui6iT%2FH85PoTfVTPj63IhKtNa%2BO0E8EXkVT%2BsbN4gcuxHe%2FKEXvypC626TSQX%2B6YSsVCKsQQZdYG6mHYjhe3GuDTPEnJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\ncf-ray: 9b9f73e8e821dfec-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T19:33:33.1292Z","times_seen":368261,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/mat.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/mat.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:11 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31684\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMfJQcJIXWBYkWSB%2BsQQgw%2BuKNKvQvnbXhaPaLGqlLb4HaPQdOpaks8Q4lEPRGmi7tb0zO9%2BcM0Wouw1y6zvDxcS7%2BRUDNXhUmL7doLhI4xRN%2BD6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e27f74dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit colormap, non-interlaced","md5":"47e319e666f1f077cf0bc05d091e32d1","sha1":"81c4cccff9ef7f572b937181cb1ca0882d0971d8","sha256":"eafb659956d8b8d934a53ac600ebef96cd018248b72bf8c1c51aa3e966be384e","sha512":"ff962e94b463c1bf5261de6486f32ec1b3e5833d007283eeac24fdc9d00dd6e15212fa86190d7d2a27844620fcfcf6da6df2aca8465a96e4cd9c3d008af9a907","ssdeep":"768:fGNJWRw04iO7eSWOuQ1zZ2MecJ1MPMIAxBDOPj:fGNJqwDiO7efObz0EJSPyBWj","tlshash":"dee2e1e540ccc294d6e99ab4d740c4f95f086fc1a3172514554c9022acd9fbfe4bbeca","first_seen":"2024-04-29T19:19:01Z","last_seen":"2026-02-10T22:46:25.402742Z","times_seen":48,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/gift.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/gift.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9209\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YR1jU5WIKeGKczAsXmJlDNx%2Bbt89wkhQ4EvCgmq5sK9dbCOiW%2BofHChiJgxAuWo3AKSva6dHOkFoF7ERbj4j6jgoLR%2BuOgNJW%2F3j2rzOG3nKweWM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e28f7adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 130, 8-bit colormap, non-interlaced","md5":"e1218954bb8e751e529e448570eab539","sha1":"87312640669f72e592e714c69cb0d9149e159a67","sha256":"9da8e31544142b2f7bd3e89f89eddf5307e15e7f8ca4974490df0ca0ff2dac05","sha512":"e461851087cd4622c829854decede9617154b0fc8fbd0fee2fab5543bdf5933784afda5782806647514877b3fcf53fd8034b693e571d84ef1d3838a6a84c4588","ssdeep":"192:nnGc/xOFsW6wHjEhw7yBp4JPkkaxAk9PzrBF8ktEHKPD:ZOFsQEhwekF1axAkZzrB+tHKPD","tlshash":"1912ae3428113280b95ee10956ebf489047f6ef7ea3760877766f2222db18719f8e1d2","first_seen":"2024-07-04T21:43:14Z","last_seen":"2026-01-07T05:28:10.040751Z","times_seen":38,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza1b.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza1b.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 09:37:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12641\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 227497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DW0ZVRaPwuj8iBTkhx2YS5YffQkIKXZYQdl7603UUMJKP%2FaBWBu%2Bn%2B6cjO9%2BFap1OvIOfSTlQcwZY2vbaU%2FwFHsXWxd1gb9%2Fz4gn%2BGEWtgA4gzda\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e29f80dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x469, components 3","md5":"9cc781ae9215d85421d80e68643916d6","sha1":"2d3fe44fd1a6b0c794153744ead48ed063cb0217","sha256":"2a20ef5ff95fe731b74f4c0965f022da16018a7110629cc35af77eef14adf60c","sha512":"60747963ad9b9260fbd95844d59cc7f51f3ec7c391d859732b9ba726048ba0cee67421570e43d982a126497ec01ae94a80846d3429d72be4251347f7a7e3e9df","ssdeep":"192:9w/MlDmUu08L03nCnGWsIcA0p3zXlqK9NfaGKiLc8CjHRds72ZNhK8:9wopT8yCnGWhr0pD1qo6HA2/hz","tlshash":"3e42af7617774e4cf630eb30521f1a786e242cab3125f627909ad10683cb3873d7da55","first_seen":"2025-08-08T20:20:25.055086Z","last_seen":"2026-01-07T05:28:10.118349Z","times_seen":7,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/icon-twitter.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/icon-twitter.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 09:37:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5997\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 227497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPrTHcGsiy0H8Q%2FJ7WRm%2FjeIjYH2pLFijbp9XAYf2%2FiQxMHWVwjK6LaMH28jRphmKBQ%2BpQ8NvpJ%2FXFxl8JQERAAHH8oQ%2FxN3M78HXzed35WcEAxu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf8edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced","md5":"3102bd5ece1855fd21122d8f0e2f6b43","sha1":"79e8a83aa0eaa45dd07914726ad40736fd0bcbcf","sha256":"4b3a0f6de375b108b3fd927b85f45660478919a1dcc7051ff227e4bf8d49d9de","sha512":"3c2cf28e956f19e6b8ff56a50f3e4a9cca00db32fefefca05679756d422905c0030f9a1ef7923eff4c7b907b600e580e064a76fd1ccd6f13353e209ce22c4c3b","ssdeep":"96:5KbjeqR6yWefSE9K4JoARywhJfepn0WS3IBPLWbqhqtf9Xb/19R5mz1FfHfpz2:wLpGGyypOn0WZGq4fLIHxK","tlshash":"c4c19e3c04bc78bd2173434781655d2c461b09a7f608cd7f7ca2c9b483a9681dfda622","first_seen":"2023-11-05T14:08:59Z","last_seen":"2026-06-09T03:21:52.040921Z","times_seen":264,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/link3.svg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/link3.svg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 837\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXuyiymZijXmZPX9J3%2BImJgm3MIsCBjPwibFRJmjO3NtRVnEfr0fV2QU%2FEn6Wbm8sQ83QTgLXv11py2fiVjbQAW%2Bam7IMsWT1HlyA32gJ6V3OcNU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e2cf96dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1624,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"be16d14727a08d8b712d88e9e2610418","sha1":"fc45486c86e5c6e77b56459fdcc3b6f3646ba2fe","sha256":"c8935da3e1cdd4f66696ee2ea04b0371dd1da080736f26e174358798d64bcb26","sha512":"42442a345e596b0876e2b0ac06c69668d51f9e96b99b44af6b8a61cf56b02e6941169b63125e608cdb8c27dfb355f28940f27ff97f1bb725413a455874bd0eee","ssdeep":"","tlshash":"e531c6390396940d8a0dad766440bc826d466cd2404390cebfd0798bc99618b9623544","first_seen":"2023-11-01T13:59:15Z","last_seen":"2026-01-07T05:28:10.057028Z","times_seen":39,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/en/images/nav_language.svg","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"2.23.13.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /en/images/nav_language.svg HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 21 Mar 2022 13:24:18 GMT\r\netag: \"62387c82-45b\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 675\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nakamai-grn: 0.150d1702.1767746939.27db9527\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1115,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8ba211bb1be1a15bf5b0143ca1b009a","sha1":"215203609a551dcaccf6e434508623f302635f86","sha256":"a441182568ad88fa9c54384de94a77f64148d3d54df66ea1beff4a11100967c6","sha512":"1f47d819caeab992aff9be00ec10c8bb65004b21cadceaa483d1ff1bf91c3033b20af6a12a03f59e143c9304453c7d52403d3218fccaca48b8d56c75ec3764fd","ssdeep":"","tlshash":"f82120b2416057e68c4a4fd768e004ed017cd02a70bd41c98363772bbc190f341f58af","first_seen":"2023-04-10T07:58:16Z","last_seen":"2026-06-09T13:25:30.736424Z","times_seen":1604,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":990,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/en/images/nav_download.svg","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"2.23.13.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /en/images/nav_download.svg HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 21 Mar 2022 13:24:17 GMT\r\netag: \"62387c81-3ef\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\ncontent-length: 485\r\nakamai-grn: 0.150d1702.1767746939.27db9523\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1007,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"41c1c00e6070b60d70177ae11625bb86","sha1":"7f01626c76ce129247860802fd2355f2878fe8dd","sha256":"0b22f25d8b7421c4c4aec15a9a4781f873545a5732ac128871da40f38c98f4cf","sha512":"13d9b3ac9cb5442e334e114b82b9dbdb5b4d4ba1396f6720e99a53f4e9f62c2986867888bda9ea788d519b2c96046591b298ab826f6ff55cf7c61bf40bcc2056","ssdeep":"","tlshash":"cd11277be257c4fad465874081e1921f5b3c960bb0bd8bacabbfa5f24e01dc32534825","first_seen":"2023-05-08T00:40:52Z","last_seen":"2026-06-01T08:50:18.292835Z","times_seen":899,"resource_available":false,"data":null}},"time_used":1224,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":1091,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:32:06 GMT","end":"Sun, 05 Apr 2026 05:31:55 GMT"},"fingerprint":{"sha1":"E4:3E:65:D3:05:EF:8F:3A:11:69:6A:52:FE:6B:BB:A4:DF:73:4E:E5","sha256":"B9:7B:F7:C7:4B:6E:66:E0:D7:DA:7A:8B:0D:2E:8F:2F:E9:28:B4:AB:91:95:86:14:DF:44:15:CB:39:DC:EA:41"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jipang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9b9f73e25e020b59-OSL\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-cachedat: 08/01/2025 14:01:18\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 8961a9193f5f8c9ed7367238249bb576\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 165880\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-13T19:26:01.464965Z","times_seen":285680,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/fonts/laza-bugatti1.woff","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/fonts/laza-bugatti1.woff HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwVxtSO0TiQv5ZpJRji1NFmMW9gaUmoCZZTnNEka5%2Figu2AabG6Ah3C18zzZPIypEXrLRW9l095AFkcN%2Bv88FkjLbm%2BvEdo4e3QckYkf5lmvF9qX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e9482edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@0.3.8/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.give-rewards.midasbuy-page.com/","date":"2026-01-07T00:48:58.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool@0.3.8/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.give-rewards.midasbuy-page.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.8\r\nx-jsd-version-type: version\r\netag: W/\"4372-cTTqYs22VcKkI7FmI2XJm6ZFwr0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 594010\r\ndate: Wed, 07 Jan 2026 00:48:58 GMT\r\nx-served-by: cache-fra-etou8220022-FRA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6459\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17266,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)","md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-06-13T06:52:26.301698Z","times_seen":1626,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":78,"dns":11,"connect":28,"send":0,"wait":28,"receive":2,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/index_files/css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/index_files/css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2F76QykMgtt90XSJiPv52SihLGSKCxxmUB6tap4MvTYCv1RYc8e88B8JSwB8Fh9lKfUojb0a0WT3VMjuuq3RvgzjpUq7kfpIM7JfPbsTuydjJjlJ\"}]}\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1aea5dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/tokens.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/tokens.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7639\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pS%2FOPjdhU0SFJsVyGCHp9AALzuAjVhuR8JG9Owg45oSCKFYn3cxz97qYJ0Oq%2FKXiJgPW0xkKe20Nzy2rLQg8jEIAkhLlJMhViXRj81RJRu5yZ7c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e29f81dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 130, 8-bit colormap, non-interlaced","md5":"8033a2820b6f2fafe93907ef42760f88","sha1":"9e7363a8858626cd29dc51d0740ff7aad7c1807a","sha256":"4ad7cd92b4863982831fbc18243ffdba8b9d0858ca0b6833aa37d7eb66056e8a","sha512":"fd667d74ad6049ca902321f4e1ebfb3d2ff118b3073dbe4668d71c4471e50a4f7bbeba00c2a642ef6cf0f398f47c5a3b019ac12999c6e8fb3a63165c736341e5","ssdeep":"96:SFxiIpPuVveLqNi3kKiAYQvvZF/JO9HNoA9Ii0NaxqldX1aM1CupJrIUyyKCZlhW:I9uUhTTFhgz0YgXh1C0P/KelhkNL","tlshash":"34f1ad7e3cd12346532a52a92440b03bf654a47eb1c980429dffe22827db89fbd0480e","first_seen":"2024-04-29T19:19:01Z","last_seen":"2026-01-07T05:28:10.085278Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/logins.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/logins.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 09:37:21 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 20 Dec 2025 15:07:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 478413\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 227497\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKMKf%2B%2BOTsZzZ%2BhfCG2LEJphFI9YTbnyDCLN2HgRc4mi42bHCj8ecrrn6lhrgwOwi8D5TGrfA9WiH4oCOXoBl9c51bYJdn6vYmom5lHzluPhtGiV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2df9cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":478413,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x575, components 3","md5":"e0233cb50e3a03461d0b53c22817843c","sha1":"3c17cc67b7eeb2d2fda2b29930cc1851dbd95a80","sha256":"bd2def2d049541421f95d127c37f10ee15dd6a63292b53ee6bbe7f86c4199241","sha512":"16cc22bb6f8429861c588779f26e3e6d9ab52be1e21d92109a01041bb642ba0f397a4e88d219df3a3128e2f03ab516a3d6231188a511da6d4dd11a8aae240b23","ssdeep":"12288:/N5H6XF6vcL+kUuvxuY5/ylBW8BdeC57CHvDa:/Nk+cKknvxu4i1dzea","tlshash":"57a42358d3203781ed191aaabe217f7d8061523f3e0823a069508f75b3dae776a0ff54","first_seen":"2026-01-05T04:44:18.361765Z","last_seen":"2026-02-14T17:07:18.822644Z","times_seen":6,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/priv_laz.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/priv_laz.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63387\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mv5ZJt%2BwqA6O2h2wwiebLCFzZvSxBlq%2B%2BjYgjQkcf%2BwKg0%2BI5F1yqi0SSAFyOUARLVDgBzabrSQsBng9iWRrhotQv%2FEFYFTC4LhbgZk7%2FeTMQnL0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2df9edfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 54, 8-bit/color RGBA, non-interlaced","md5":"9c9b804ab29f89bbaf74631f98574278","sha1":"1ade26603615d5f820880201137c48f4bfa80a60","sha256":"a7204f9c6e9885587b2d096189b97f58c5b3bdda908df5bd355066723900dfef","sha512":"1c3453711eedbb2dc0727822e8006c7e789f918b73f02cd4b2c717b868dba20e33728a72587f9a56a68fbaea60f3aff507ecc8b5af91872b305cbed183a2de80","ssdeep":"1536:Y6lOcif13wJXKI2jJ0JOFWnsetSjo1oaFuXGFIaI:3lOc61gN12CO0NBj01h","tlshash":"ff530277862f34706a3f90722b8dd2a91dd7c622611d48d9bde5357a043f288ac52fcd","first_seen":"2024-02-07T03:32:16Z","last_seen":"2026-03-17T08:18:00.572413Z","times_seen":154,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@latest","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool@latest HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6646\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nage: 497\r\nx-served-by: cache-fra-eddf8230123-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-06-13T15:52:38.645184Z","times_seen":4470,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/lazback.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/lazback.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 11:21:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45905\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rsCxo95yR7PTsw3MfLby%2BwDHVmNpLPeICVBkDx%2B3SVWs6H352BMq8U4IKk1S5GqPfimDEuqO6hIBOHeMFuE8MhJBI8SX9u7sYbKG3PSY7EtwuLFa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e78ffedfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45905,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1044, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=796], progressive, precision 8, 796x1044, components 3","md5":"dfd4ca633bd7b435d0cb4213f31eae96","sha1":"a3c95241b1d0b9c9a4308c60299d0d759c04b69b","sha256":"d57bbba6c951847581285165d0dfedb270c62a145e1a3cf9c747f0ae6aa32fb3","sha512":"f636581d1476f8f54557b632b2fa0ebc71962239218ded5f436c9d51ab4a6cc2dc9d91aac6c2f62ff12ae7ff8e6010e0633d0bb97fd830cea17bcbe3b5fc3f0a","ssdeep":"768:2XB07MXB/phYylN4+Hbhl+eucbLf0yEu5FnEu157lTJXQKbdVnCFNw:mvRPRNNT+edLzzJ57lTJA0C4","tlshash":"4923e018bed1fe70f4e8123091f6d385a3b29b70a6039996b45cf01237b16c4ed2d1ab","first_seen":"2025-08-08T20:20:24.991546Z","last_seen":"2026-01-07T05:28:10.130297Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/media/lazasepin.mp3","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/media/lazasepin.mp3 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:48 GMT\r\nage: 274\r\ncontent-length: 8359\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-8358/8359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0ZkfIOWTAtp%2FZkNgK0tdjsqjyavXezE4R1NrC%2B8M68aIOw%2FXZxowccjqWdj3WBGqvjNJTyJUfU95WAGD%2Ft%2BhN7XfKxhRS3W77FzCBsZfWYlNml7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e90823dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8359,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"9a43487f5bcebd047a3219c81643ebbd","sha1":"20405028fa83fc21aab5a713832604abe8d4933b","sha256":"309edfeb95a0ea8ce01cbce653eb1a5ab3ac6275d97022a42913b5d1348d5f62","sha512":"1928067fa064cde73755ad3ff6a738dd1ce72b6cfa8a302528669c84189c07a95f8768e2347d31206c5ec22b8338b0e1237b3be18b43b4d0cb50705fe073fc64","ssdeep":"192:O1NsLus7stNME15ilwqE/BcSFfHwtRcxt89wnOR:OHnOKNjV/e8oDcxdnO","tlshash":"f302ae630c69aba2c77d82f5e28707da717f9db09a1c90013039830a659197653bafdd","first_seen":"2024-07-04T21:43:15Z","last_seen":"2026-01-17T01:41:20.597956Z","times_seen":17,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/logo.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/logo.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 75475\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xfai6C6Ej6PCap0NHJNrCBZTlzPN0Wgnp1PJa6gFp21ri85mTlO614duGxNFw458iMXCr1swDjp6Rpoip2nKixAamolk9bEWU7IG6zpyfvPQz3Ys\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e24f40dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":75475,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 761, 8-bit/color RGBA, non-interlaced","md5":"ea4355a07956e652ea65d992a52bba11","sha1":"94241d97565db205be2e94932161a1dc5c9389cb","sha256":"c3181ea96b1b9c67200064d53b7efb781b7e68a32d760810e12be0c157dfbd68","sha512":"f067e559c9edf07269c44558314473ae1288cda2e83bca28e90954a70701f7a074c2f2a8c4d7a5d083dfd96a94ac3bd850baadc2f719a2061a21b2ab5b52a40c","ssdeep":"1536:Pgm7qwqRllfviaYQ4MT0DTN5P5j8s0Q+s+JxPie3a8YfRImAfiww:TLHTb9qTXPix8Y+1nw","tlshash":"3873f187847ef89a9d63923311bf5f7b96478539a3ecdfb0e489a9fd04b5c00524e058","first_seen":"2025-08-08T20:20:25.003288Z","last_seen":"2026-01-07T05:28:10.095666Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/images/event/common/nav_shop_vip.png","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"2.23.13.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /images/event/common/nav_shop_vip.png HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\ncontent-length: 167513\r\nlast-modified: Fri, 17 Jan 2025 06:30:03 GMT\r\netag: \"6789f8eb-28e59\"\r\naccept-ranges: bytes\r\ncache-control: max-age=300\r\nexpires: Wed, 07 Jan 2026 00:54:00 GMT\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nakamai-grn: 0.150d1702.1767746939.27db9522\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":167513,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 683, 8-bit/color RGBA, non-interlaced","md5":"bb9395a72d6c4a7ab61eb0cdd3bb0232","sha1":"b6306415e2b294d35cfb55a01593deb3022d5024","sha256":"3ad8db9539ebe932aedacf3957f17359a1d0f07f808eb75018ca30374206b0bd","sha512":"1910b9b82201faf6571162679d4f87d4810d7e5b612d5c332db3ea3d93445a997a9bc991d14a786b80d44258080bc865f3a1a573ae1f37735cfdcc0c4c4acd26","ssdeep":"3072:0iKhGePlk6FBCsh9OgP+4b8eFBjq/6o88xoq27uACHmlUjR4oqs0r:CFBCsrOgP+4b9Bjq/6Pty3R4oi","tlshash":"0ff312dd584c2ee9c708d7bf88abde40a91e51d408f56712ffb70b7c0af0261a612a56","first_seen":"2025-08-08T20:20:24.97441Z","last_seen":"2026-01-07T05:28:10.124572Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1570,"timings":{"blocked":158,"dns":33,"connect":3,"send":0,"wait":1265,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/link.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/link.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1096\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPHQxaH97iiw37SMVu6Rx96tE8%2BWvh%2BZ%2FrOkCpSNtdFOCicK6nuNWaz%2BbAvRryRsD0wZPBZobh3ZVpjQfGUHw0hVEY7l7fF%2FnboQIRUQC8LRJX%2BR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1ded5dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5834,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f729653df52768ff4cd2b89a042703bc","sha1":"e73a7bb36bcb86b2a7ca4facb9cc9476b686e928","sha256":"fb82374219a209463d1e02380164cc911bc359ed84eecaa5b55dd12dfaeb6f21","sha512":"4fde95a9819b64ad9cec6bf248fd277884f618f1c1485bff1cd810c2cb75268ae01f3dd012a925805c3081880144ccf4038d941e472c4eea2ec9a159098ca21a","ssdeep":"96:uX3dyH7T1dKOLIDsyIDpIDlISwIDxYBZlqf6J90JM0jFkJt:kNg7BrosE630CIFkJt","tlshash":"12c1e2233b511c49f006dcd9fb5abf69e70f6427964f8e67e890791ccac51b403a2a8d","first_seen":"2024-07-04T21:43:14Z","last_seen":"2026-01-07T05:28:10.097425Z","times_seen":12,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/5.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/5.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52077\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1E%2B1cMbWRk7XFGBUw0aPWVnEsQ0e5TD%2BveeqqRWW8VDu%2BZaWcVukGrI3qA%2Bf89li0ihTKXpniNKMiiob%2Fs9LEsK%2F1rHswDZMOpLUSi3PpyAS7pLE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e29f7fdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":52077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"cac80de214232b3921dad0bfdb991201","sha1":"f3a04f212ba854b535d278ecda30c4a5528a1369","sha256":"0e5507c01f8774d1d61762d12478f39e2d038ba31f7d4bf510d99cecd81c8adb","sha512":"0cc09c9511c558c77497ddfbce291bbde9585fe361fa9e0a4563dd4dcb9f5cda886c4a770c0b97fdf53595b7a8f8ceaaa1c5ffb5df5f31df95c35ceb9b5271eb","ssdeep":"1536:trzQplknOJaEsJlZdVjA/+uPiKUWn7LrEBA8Fcg:trUcnOb6D4CKUuLYzF7","tlshash":"3a3302f84b4d3792ce5aa899b080ce78c93536c4dd6623202e2b7f784b2847c20b7d59","first_seen":"2025-08-08T20:20:25.047236Z","last_seen":"2026-01-07T05:28:10.040241Z","times_seen":6,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/laza1.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/laza1.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1251\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9x6ekFMWyXpbk6hq7CPSmLvrdQDvrZ%2Fl7FWWfsWg39pR%2FH%2Fjcp9Htau3ELGibRPG%2Fsc9x%2BdAXC%2B8EAvRM1mJRvkZfkJSjkeBhF0XxxtGuRN6gjIv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e7e810dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/jpeg","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-13T18:35:27.754442Z","times_seen":133535,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/media/tuing.mp3","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/media/tuing.mp3 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:50 GMT\r\npriority: u=4,i=?0\r\ncontent-length: 32182\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncontent-range: bytes 0-32181/32182\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWJ58sNFFKQFRtgHRWIJ9NevrMoTckZaZ%2BZ7xcMJ%2B0E6Atq5ZKlelBzOC9OOoDhHbBHT3V96tffVjTGzv%2BdRiHIFtyxoyTyK2%2BLtdbiP6Kusakc6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e90825dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":32182,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"bc4e7e1e9eefdb87911754db4cb24037","sha1":"c9a703c1112d99240912661609d5af444e1cd876","sha256":"c18194167a6a723707a191a352ba4e59b3bb9fc57b79ace7560eeffb9f9bbcca","sha512":"59fddbb1d641a1a24846eb9d0f4ba5fb17265bc004a95f2f445505c2540ae9aa019f819587c0b9a1ee7246a4d456701459be661b6b761b97809515b373b400db","ssdeep":"768:e8jz2mlRIVa3THqQL0QcPDAq9OgUKFKswH8sJW:e8/JlRIQ3Th0QCDrQEF1wc+W","tlshash":"78e2d0b1af0d22f7c83f5671b0da8909b507ec58c06288855646ea3f39071b40be6ef5","first_seen":"2024-07-04T21:43:15Z","last_seen":"2026-01-07T05:28:10.123024Z","times_seen":16,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/media/close.mp3","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/media/close.mp3 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p36NrHGTUeX5B9XULOiLiBoweLALpoBiwFNBO9r3DeH1okJz2UCZMTHjQ6RRNShn3bb7cE97VLBmsqTVIbBAcDmmVEnbhYQtirM7%2Fx0FYJwnYI44\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e91828dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mail.give-rewards.midasbuy-page.com/","date":"2026-01-07T00:48:58.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/ HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.give-rewards.midasbuy-page.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vsoOM8fDyMVbyWd4XtOi7KfKmETzdFnSLGxWCDalIXvP2jUl9kiBxCpOhGNYX4GM3u0E8EloiqScHoYYMWQUyeTlCFNonApC7%2F3nD2jZX585Q%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 9b9f73dd5b79712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":56520,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (859), with CRLF line terminators","md5":"25758b904cd9292c2f07790ba4268ca8","sha1":"8f0dbe5bff116a9d79d34974e85c2b9d04431999","sha256":"c96fe3a76cf9bf1782f6f389d1eb940858d37e4bae900fd1dcb248b737180377","sha512":"caa3041281ad2c64130089adc59142e4132468a9688267a25f492100f55c98a97c5cf7aadab4491132160e5bedcfd3af4566fa4add8a194bf2fefa35c3c58bf8","ssdeep":"1536:iyOMIHIak+K3p4TXakiC7rpQXjRlZOZw1:2MIHIak+K3p4TXakiC7rpQXjRlZOE","tlshash":"6543607250166c374a5382f5f0aaab4ff1e48202eb0b891936fc53db7bdbd168d67604","first_seen":"2026-01-07T00:49:39.582316Z","last_seen":"2026-01-07T00:49:39.582316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":63,"dns":22,"connect":2,"send":0,"wait":618,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/lazaheader/1.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/lazaheader/1.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 157243\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtwC3F%2Bd7fVv8Y8aU3GabTzfekPD39hItY%2FHiTiSIlnoLGnxCLHgxgcMQ3FZa3uW2LJzpeMLUPjWwOEpkeqitNrVdOHmH3RpNzT2o78wk%2FUifWMa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e26f6adfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":157243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1080, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], progressive, precision 8, 1920x1212, components 3","md5":"ccfce9d49ab58b91ee8a801478cf31ba","sha1":"9cc7dfb537f158e929438837f3d4e5144fb04fc5","sha256":"003b0ee8c8e7ee2d186c5ba3ded1bc9fad47d9ba1f6c3050564efbdabdc01943","sha512":"6f2158804e5943ca01c25e27e9e1afc96f247d489f5009d059eae0095df9c8cc6a84fb1146d92dfcab9ae16cb668d2b4aa7602766bba69de328359ab4db2b056","ssdeep":"3072:/iqE+EZ8T6Dq3b6+lEeX5qESbkbWTgMWYWYfBJCOa4:/iqIGrJEeoEWkbWTgMZFBAH4","tlshash":"7ce302ad36524e91c5e98332f99bd2619111ddcdf3e3da41bc8c89a4b7f23904d1cba2","first_seen":"2025-08-08T20:20:24.983045Z","last_seen":"2026-01-07T05:28:10.051353Z","times_seen":6,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":239,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/link6.svg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/link6.svg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2864\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2FV%2Fw6i3GGvO1%2F3TIyilatfGI8B9wissaGm9oaQRd5ZfEJJi5RGNiklvCj%2FK0RUfm3J1I6ZaLxi67tI6WYHZH7oee1oKsE%2F%2FuMjmtp%2BLCBakaXlm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e2df98dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4786,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37a2c5b9fa061103f049a6acf1c04355","sha1":"1e1beb7fa17b5c6e028ebe9e1fc3ac3ae72a1cc1","sha256":"9eed3d1152ab0dc861c03021bb32b9bb4ca6e5dd75f48ca6bed9d6ab8bf63ce0","sha512":"9e273cc27d36d3d465ffeeb9b721fb20a75aff80e5c5024720f9bb56408e69a5bfa1e005a6e08dfed3dc9c277a6ec890bf0f5b8eae8d01beb313317496cad716","ssdeep":"96:+qFAEuQVWiFcAhh5ob3tBDUrFmnsCuwQWdkHKg:73uQ0CZL5Q3fUrFQrDQekHKg","tlshash":"97a14b31850f684ea2fe8807344494dbee929d4ec6bb6bebf51f700fb50c9e28c41581","first_seen":"2023-11-01T13:59:15Z","last_seen":"2026-01-07T05:28:10.062008Z","times_seen":38,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/item-off.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/item-off.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 11:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30401\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYZoq2wo7B3jeCiNdyz0MyQhe37OPVNvjv9Y8eReIFWo2%2BO7oSLJi2GAA15e9RTryZpJATnkgPDUIbZ%2BhUNh%2BoR8m12A2IB%2F9OWKYyYMN7JODAF2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e78800dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":30401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 172, 8-bit/color RGBA, non-interlaced","md5":"2c5a994235bfcba3d22dca9cf1e968ef","sha1":"4b01d99b483b57cfa55d097162fe0dc25366887f","sha256":"309f19ba4154369204627690a5f364783660b744379d380a958f76e9761cec14","sha512":"5dfe4327f4beb2bdeb75a721720e3a4f359a4d5469ef8c82c7a56eb887b418b25322af3c88a76bb7845b18b9c6d382cd7fcd2c903e543fc0db5b3e60ca454762","ssdeep":"768:Q1EOBF4IZgadUNSsdrfcFOd5yGYFN6aC48zo4oTo:QnF/ZgadmSoEFOCG+8zR","tlshash":"bbd2e0c8dcacac80494ca9a95ad299489ddb5f7fea89f1550cf1c713d0352349a78d83","first_seen":"2025-08-08T20:20:24.950818Z","last_seen":"2026-01-07T05:28:10.054147Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/twitter.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/twitter.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1081\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDz%2FRrfJPVNiPFbdj%2Bec5%2B%2ByGpgs6iz53zoRx9vVltv8ts87j7Bns00VPpbk50sSo4Y6TjrJqU7DqT6n0F%2BJfTWiLRwP6heakcOu1pI8i2IaO2wO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1ceb9dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6451,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"45e7f7f91fc9fe870757838a4b297eac","sha1":"1c3c665b1e88c2ac85979c10dbc605847fc17dc5","sha256":"d30e1b758d21598f80faf0e89a43d2340e2b7ff26b030a0c3dc169d6e65168e3","sha512":"2ecc46cf2990362a345b98eb383051e8f1338023d448371643b5896f9ae59af9c65d862f57cf86ac3e9d2c6d36b7d229d8950ff2d6551a3df958a22693c0a3b9","ssdeep":"96:/acJ6M6X4zezulFW5O8KZfkli6AOYNHA8VoIoV0:ScYrOlFqO8KZMli6AOyAWoU","tlshash":"a1d1fca79f221508f502e8f8ff66ab9a66094013534fcda7ba4c361ccfc659847b274c","first_seen":"2025-08-08T20:20:25.023305Z","last_seen":"2026-05-13T19:15:32.30572Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza4.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza4.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8604\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nXsGcKHB3kGxVeqPOe5zrOhYwl6hAa4cyQEtZqzyOg%2FezTd8ZL7xdpBoZl0ZiNceh2iYNC7xxNu3hCcA11cFgsaYhU5PF1p%2B6%2F5BvLqIOk7hQyeo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2af86dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 480x480, components 3","md5":"697557f662a2325053cbb3ffe2bcd2de","sha1":"eacf2d302fecb854d628107ea4fa9fe71ef9744e","sha256":"32f0e7c14cad9ddf791d024a8343de13b23106e756e64990c9cec2df74fdcf5a","sha512":"815f7f2eed614c82496723c8f3e8af2fe4793c35bbbe5c89b090608bddaa4ec37f707e50119415c932b4acd0615c68556fffb259e1c094f8738109e1b688f26f","ssdeep":"192:Er9gBlR++SzgE4MoRw8UhSGJNhsMKVSA9fbbbbLpPOrzvv4:sml56gE+HMJriVOfX4","tlshash":"95023b43db069880c51027fc1c57a9fa1d286e76e5a36eaa8afc5c3f344da8497c4553","first_seen":"2024-01-05T16:16:30Z","last_seen":"2026-01-07T05:28:10.126431Z","times_seen":19,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza3.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza3.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9326\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjPh9s1OXvldf%2FjXIZltSOgtOFGyNMd63%2B%2BteTrqPUs2KvGLMEim8vRIfBW2grHWv%2FeMYj51frhK8MJyP5ddwBVHoACD%2BL99vHCn%2F%2FPw33ylPrXn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2af85dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 480x480, components 3","md5":"c22f043ce2801e82541a2ae620185cf7","sha1":"e46d66626b1d6433bd0a61942661f343563598a3","sha256":"ee632ee280eb5fdef317061461474ca722376ead22eaed5b6a2f883060c28da8","sha512":"aa282b2e7ccbc70013a855f3ae668924d9aeb3f82dc17f4ce09befdb14551a946c2e38134fc5b2e1e343dfa7207a7ed7438d951ce3a35f4270ea7f7c80d01a60","ssdeep":"192:EcdecRfxw9u3FRrhnGVnJrngUAZD1jgJfolM8qvLaWxQYwWbSQ4cUb:/t0u3rr5G9JrgUQRgTVQYwPlp","tlshash":"12125b21dd229b36d505133c1c283fb816709d9bceb32aee76c9fd7a7402a1446c91e2","first_seen":"2024-03-21T05:31:43Z","last_seen":"2026-01-07T05:28:10.10169Z","times_seen":16,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/flaglink.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/flaglink.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1654\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ue2XEAfsFNMdjGbGTkhuaLfy6q1wze2xkm50EPohFwCea0O2HIvwj8pL43tm8VvRuRvAG%2Fo%2FdLssGSj5AkEX1v8vg4AYAd1hLx5LsbeYvY9KufRk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1ded8dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14690,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14690), with no line terminators","md5":"958e119c09a94281c86f41edbc55e353","sha1":"e9f9710dbc493154a5ba6f674cce2b0c951f5df6","sha256":"27b19ce922bc8af7755cbd1cc6bdd1e60d7acfaf31c27bfd1d15e9dfa5e92eff","sha512":"488179055782b84126852de985208ca8d9015a81452d9c3c35087a6c73ab9d8952119de92f0941e4c1b2b7e6877b65a934560bf20dc829c3c00a402e03881092","ssdeep":"96:IqolNwKMs4aqDKsLyXvqcGc1QV5BXNGAXp1ewSkYFNgGP7WWNBU:8wKj6DKsLyXvfzm1XNGA5IwwDxpNm","tlshash":"4b6218558bf3342afa23d56261b00e85b33ea007d43a4f3c6d19bf6963417e519e3a72","first_seen":"2024-04-05T19:37:46Z","last_seen":"2026-06-09T13:25:30.751964Z","times_seen":101,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/facebook.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/facebook.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 764\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbzzxggY522mScPVV9bRcbGD1FotWkGtf4BodIItoGnBPHwFBefpw9M%2BgLcRCw1u439UAKLFj%2BIBzZR658fFS5qv3icRBYEbD4HJD17fJnLfs7yA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1aeaedfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4105,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"79944320da11cf793b2da9f7de935ee1","sha1":"9a0e05c0557c8bcfc38af508f6701bc4f1db79c6","sha256":"39dd7801f3de58dee8645cbe039ab1d1a9bbc88b33e5f80fd75ffa08700fc5a4","sha512":"92b997ef98b21eb0233edeee510fa87fb84ec29ffbf2487a6e5778b3b92b303a6b25b4d8727791efb5ac5add01f622ad483584109cbc312ea7f1a662dae53294","ssdeep":"96:eMqVQJHFKGF5bMFjaeGSFeiFeCFIKFp6J0XKYZ:eMqVQJHFKGF5bMFjUSFeiFeCFIKFp6JQ","tlshash":"3a819a962b670648f511d8edbf952b8bb20e5823534fdc5bbec0705ccf865a886a374c","first_seen":"2023-05-13T21:12:05Z","last_seen":"2026-06-05T03:08:03.283928Z","times_seen":101,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5845\r\ncf-ray: 9b9f73e27dd8b50b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ed9-1149f\"\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1617729\r\nexpires: Mon, 28 Dec 2026 00:48:59 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fEoqXOPnUdw037KIn63DzJY2ykOJ3mTgcjgiYXU1o7ISL2Ocls7kf1Q%2B%2FOi%2FJa1AJ6%2FycDgL64GD87IG1FxxBo1TIxkZ5gB4JAmdQai3IsvGbwx%2Bjxv8KbI9gjZx5zXCxwelpzfj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70815,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9365fe85b7e4db79a87015e52c3db6c","sha1":"2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9","sha256":"dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56","sha512":"ad142d178576c2d02f5eca2ee22500b369171e2dcb8fd344ef1251efb0c4ec61ecc6063d4535b2f77773317803206f13a224530f8e55b0335d4e251a80e15e64","ssdeep":"768:/KvcqyF7I4rb84dLM+JKvcqyF7I4rb84dLM+k:B/nLMu/nLM5","tlshash":"40631be8e80900d26fb1cc03ef62b7ca1685f0a3f9d10dd8f17a998c29d16551597fab","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-06-13T18:31:29.78649Z","times_seen":10338,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":7,"connect":2,"send":0,"wait":16,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza6.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza6.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 12 Jan 2026 01:00:20 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9657\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 172118\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePD6P3T8Iht%2BFezBV0%2FP3yG52VD08guJc9wjPxT6bZdhgpMHhueZSgq8hGhINVmjdwNUszpU2Wevnn%2FOo1V3rIqoTz0HIJ9ydLfmERSFL3ut5RJn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2af89dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9657,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 480x469, components 3","md5":"f77850401aefa7acf5370e2865fc0797","sha1":"9c3585613c72ed6fce8281dea6c92f4385c3f26a","sha256":"983bbe94919e07ffdc6dec856f8993f1620ae833930b01a000b01886e29760df","sha512":"721da6c184f3c78753c2d9eddd16a7288be5bc0e07c95acebc3875ad0a922a4a51de9a829ffbe19064519b0ee683ff9fb8d00c0b12a70d61697ba678d1c69aa4","ssdeep":"192:EGFQ2GUhZXY5abpT87wb9qCFcXDuynyrA0Y1Pf6fCjb5Mlb:9FZGUhZXY54cwgCmzFQA0y6Tlb","tlshash":"0b126ea2c29f9072dda77d7c70942fd532443c80dbc926076ef19d222a1f55a94dd883","first_seen":"2024-04-29T19:19:01Z","last_seen":"2026-01-07T05:28:10.114982Z","times_seen":16,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/alert.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/alert.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3209\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nH5I4PC6%2BsStLfG3acUVRjE%2FI81Tno5i9sj%2F5PnzvhKT7yi1l%2Bbdnpk4DleIBijHa9Lxe7MdzlaqXYdrcI6lupisSqnX8ybTR%2F4WHEYUbl4CGr0k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf91dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced","md5":"647348a6c16dc7ffa7582cef63d47247","sha1":"8ef22a07be992cc94060b8b855be9ebfaed98d9c","sha256":"5717e656143df2f6d333dc7d08fe1c25727cd8a2076e5d8242e65cf256e8a1ef","sha512":"37c5015d0dacc74599d823f894c05d31a6da0d307ad02cebc3ccf28c87e383fa5e66e02895ff8e19890505778daac9cb3edf04f0880cd9b69040fda685a4a77a","ssdeep":"","tlshash":"e2615c6a90a27ec7f575322f59792884c0f989d6f433267d3c18d5b108cd7a7467051f","first_seen":"2023-11-05T14:08:59Z","last_seen":"2026-06-09T03:21:52.004732Z","times_seen":263,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/google.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/google.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5365\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEldOYKw7vHkkIeq72lASjwe79Hzz4HLnOVrUEri7E9C36smE%2Fs1idoUItEOAYAb7uad2NqH76xHglXGXZqCz3Zl%2B7ZFm8MGo%2FIKfAkHQWSfBejO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2df9bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5365,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3","md5":"d95882deabd0406faf97088f9e031d34","sha1":"e63219dbcaf53472b1be9b0b16eb21ff2462a870","sha256":"bcc49518f256626d9a73293fa07e5b535808dcc3e8ef74896927f4f203680828","sha512":"558ef8e497b0ac35c0e55e7baa9200bf690ae473023bb7005adef8e895bfb35c86aeeec62a185cb82e8978cdc3bfb82ed4a834be56374ec842c9305a598c19eb","ssdeep":"96:IElbw+iHJ/oQ8aIIyRsVqLvYENTy6Dtq3MJaJKil7mmK4GHy+7h+J:9w7T8pROqM6FJaJfXKxbh+J","tlshash":"0cb16c3c3a4f19e2d51692b81645bba76f16b9a30c223783c6d4d635c722de351b84c3","first_seen":"2025-02-11T15:42:52.594831Z","last_seen":"2026-01-07T05:28:10.094636Z","times_seen":11,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/link2.svg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/link2.svg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 264\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eScJOPRIIgve4QvccXpcArot67LFvqcRk7Em%2B%2FcnXkj5Ivf3m6V%2BKGXNxRx6Vs72UW%2FkO8ga9%2FXp0TMIFlG3B4zOyXznZ%2BG%2B9uW2O90dUgbpFs0%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e2cf94dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c9462a79f736453eac5bf7cbb756875","sha1":"cd9c6f8be71e64e10f561e2e260040238ff7f2ba","sha256":"dd46f96b6f47fcd33683b79ddfaf3daca1d4f8aeba3c0f2bde1584c69cc699d4","sha512":"ba0c8acc18c3f56f7887b3e9757f84da7c49d49ede2b56b5440650598c4d007a62f0d4589b7daf68c0f8dce98f40821104c4281c8c9fd426084e49f2978cbbc0","ssdeep":"","tlshash":"13e02363ad40c9812c0c9e62611ca0572fb761b9dbad4020c5885f2cf893ff5ed3d7aa","first_seen":"2023-08-23T14:35:05Z","last_seen":"2026-06-13T12:30:54.575864Z","times_seen":1605,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/link.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/link.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 20:31:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6526\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 188243\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLJq08xaoEKIOP5qK3O7ME5iB6AEQOS6E9jBXIq0MNbqQ4BLLEZ4jfPcFQYhDpMdOnho7khNZrIopDJ8uTFm3Ihadcr2L%2FgfsT4%2FTt%2BU4Wm3lDpK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2df9ddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 74, 8-bit/color RGBA, non-interlaced","md5":"48c050386aace34c60f16a01fdf74c3f","sha1":"53768d24571ce30d02d038a196cee350baf19d8f","sha256":"b318d6f5d2b095f2ee11e25716a02d4de816c93eb2d0ccd26459e03b65962b14","sha512":"ef29d0f8a69a353a563fcfc2f82d3aacf4a2306e16a61fd4b232365605234549eddfb59c606fc89579a0e0870aad22af993a95e123390a8ddec3bf2fd939a145","ssdeep":"192:1pfLypqJ+wO767KiTf/wpCWAKgNQw9JIn:1pDyY37/7EYSwTu","tlshash":"1cd1b0cf17cb25784d6a279c973a19f2fed310806524b39505839bfbdce0b46d4816aa","first_seen":"2024-01-05T16:39:52Z","last_seen":"2026-06-09T03:21:52.041918Z","times_seen":223,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/laza1.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/laza1.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1251\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C78E0mpm5uqGGdZ7BvRDsdrqnwVGrbfwf3fXIh8fhDopfNOGzO5QrJzpVEr%2Flv9KqOhsXqFiD1HUUE8GYchPSt5l0UOrlZ1MUIiq8EGy8%2Fb7wulV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2ffa3dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/jpeg","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-13T18:35:27.754442Z","times_seen":133535,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/laza-swiper.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/laza-swiper.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4539\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bYNttuFfNgFAeSOSKnq1n5MtwYgoaEQfaidpZolEp6TlpS%2BdA2NlOgFIlcfjUU4qQgZmJGf1VTyZNab6h84QxkzhT7FdhPuOKumogN%2Bu45Ga9DCC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e20f05dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22334,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2242)","md5":"37e65ca20ed539ed8c6c8a4635402a8c","sha1":"6fe2d91b366fd725d6b36db5240120b1233bf267","sha256":"0f4d5823e098aea653b5c3270afb10a09a509917916928c0f13315d459d87daf","sha512":"b59cccf7d869f787f7064fe29cead8e5d446b88a569781a83a7248aab7b52d3c96746e2b955b7342a897f8f371f5ccd148b7868bcddb160ba2461e777ad730c3","ssdeep":"384:VUbeqadx5glLrgyYRswCX1LdyqyySyt0G2nViCFRF9O:qbCdxOlWClLdyqyySymiCFRF9O","tlshash":"b9a2229053b21c63561b4d6a077e4738e66444c30a47cca8b2c1be48dfb69f8327fae5","first_seen":"2025-08-08T20:20:24.935605Z","last_seen":"2026-01-07T05:28:10.112507Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/line-bg.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/line-bg.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9W8MXiR79%2F09CY291RKThaBYHySSfcex1pMBefhfkeRo%2BWyaAf%2BLt1wOnJ0DBA%2F0OtK0LsbJKYWwbUEOW5uMXaB4wazsV6jr%2FqCGOJkASVL5XCQ\"}]}\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e78fffdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/media/lazasepin.mp3","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/media/lazasepin.mp3 HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:48 GMT\r\npriority: u=4,i=?0\r\ncontent-length: 8359\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncontent-range: bytes 0-8358/8359\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sqqqVNTHiXb2ysJVRrOlroei4OAuqPxe%2FT4mRop6HGGwNrgHHSy4h102UEw%2Bnt9bnb8R7zdTCnkaoXEDWykr2TDNpqQKp9SHh7jwqQmGlh1s%2B9s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e90826dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8359,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"9a43487f5bcebd047a3219c81643ebbd","sha1":"20405028fa83fc21aab5a713832604abe8d4933b","sha256":"309edfeb95a0ea8ce01cbce653eb1a5ab3ac6275d97022a42913b5d1348d5f62","sha512":"1928067fa064cde73755ad3ff6a738dd1ce72b6cfa8a302528669c84189c07a95f8768e2347d31206c5ec22b8338b0e1237b3be18b43b4d0cb50705fe073fc64","ssdeep":"192:O1NsLus7stNME15ilwqE/BcSFfHwtRcxt89wnOR:OHnOKNjV/e8oDcxdnO","tlshash":"f302ae630c69aba2c77d82f5e28707da717f9db09a1c90013039830a659197653bafdd","first_seen":"2024-07-04T21:43:15Z","last_seen":"2026-01-17T01:41:20.597956Z","times_seen":17,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/link1.svg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/link1.svg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 663\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F6H2D4t5P4PBMBnC2mNiXXvjwHm72mzxUitIfygrqpEnoaS04zgC1gl22ow8fG5BZ4BzCSXr0fwDtKqcvM1UvqbwooPe7u%2ByA%2FA0IocUMZKY1Gd1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e2cf93dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1196,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e61ae70b90e66d828c414bdb551b4f48","sha1":"27f628f75d188d312d03a2910face62b7d75c916","sha256":"222a2dea28e985a995d8c50cf2ebae779fa8ef1f6230b59253dd0c5d38499321","sha512":"8873a8fb8bf19cee6e111d51ad062bd6e3f3066bcbe70b85970b4d0a67ef56079643bd91b8d13824728e81f4db734ce502798f5905aae325958fe9b7bc20bd5f","ssdeep":"","tlshash":"6821b77851ca5c08e2da9f12d074f2445c59944ec1ed44e6fec031a7e0084926df76ec","first_seen":"2023-11-01T13:59:15Z","last_seen":"2026-01-07T05:28:10.121427Z","times_seen":39,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/load.gif","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/load.gif HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 23 Feb 2024 10:49:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6518\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mw3GaT40uiKCAiWLluJkZJVxGxW793wiv94xvcHQkXzx4rnfi6cRtK9z%2B%2FhSG9OHwuKN%2FB891fY77Q2q%2B%2BQLV7lD4GzZ9ZrnQfiBcBvt9ISj8GJY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2ffa2dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6518,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 164 x 38","md5":"144bb7d6f1e1cb408835fcd849acaf41","sha1":"8bc47b81f5b2231fe6ef713f70dfff07961c6720","sha256":"9a8c5f0bc8f65663a4bd8afee1623cfecb94f3c327e86705685f46a622ff6b66","sha512":"d90bd8fd31eb60cb6f64ce6c7ea06ef6814e15982fba76c283496f798d15474c0f230a93bba250b219ec9912aed16b5d3686072a348c3d6e7481b1b7cf9f1442","ssdeep":"96:62OdLI7ETbpPx/7LI7EkJTLI7EWLGzlLI7EULI7EbLI7EdLI7EhQGv:kIQTl1IQEIQMGhIQyIQvIQFIQhQGv","tlshash":"83d1b63ce3c1be14e4446a7a94af7f3d461459346b58166f306adb20ba123fc9e4c3d6","first_seen":"2023-10-28T01:32:47Z","last_seen":"2026-06-09T03:21:52.016904Z","times_seen":282,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/lazcode.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/js-zone/lazcode.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 08 Aug 2025 03:04:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1285\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fR4ZsOdpC7xoUiN6DDiaUnW9ZPfEz500kgJYLHErbgbsSeKJ1HuRQWFkiQ3R4RwhGC39JG%2BvdofxIA4Pq1MqSXSe5uyCElkiIvwCyKRA2v3VXQ9f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e30fa5dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5260,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d7f8827d2fd837c9c2459976bb5afe69","sha1":"70d28336f0ee3f630e01a3a63b08708f5934cd5a","sha256":"fcfe0b657446e22a58de4c5d512f25bb9eca825c219dcae53e15e9688baf618a","sha512":"f54d882a01dbef351621b86b5dd1fb395765a8209f09bbaef0c19c734609fef5eb19f38e2d5de8eab61bc65aa0b323a161bdd8cc4aa2c26985e636c7f22e32d4","ssdeep":"96:mh/HIIJuZPmumfuJblun1Q3/JiVn3+6i9QBUHi7TF1b8MBA8:mC4EqcD6i9dHinF1oMf","tlshash":"d1b13184b1486a1a967767ba827a7104fffc100be2454f08f8fd48c52f744053eb798d","first_seen":"2025-08-08T20:20:25.078743Z","last_seen":"2026-01-07T05:28:10.111733Z","times_seen":7,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza1a.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza1a.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13415\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNij1lm%2FIkvl994AjarXRl%2B5Nhjk5hsehZ7xjKZv59WVcQI4Wtvlne1cPyac2NyMvZkRC1GMPyId8iUe9GB8FxlspLSl6Blnku5qU6t29UDTfKXZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e29f82dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x469, components 3","md5":"39a3cbbc7d653fe5ca6f21157e857624","sha1":"1d64f47224158156db2a1f41d7efd2f1fdd3a93e","sha256":"61f0d7da05737e9c303ca6a0df19e808ccfff2e51f6fae206c973af2dbe05877","sha512":"3257fb5286340501bd2590655507f55a177fac4e6c6a63a77afaf5080aab0f6f5e0b8a48e133817147db27e6c8b3ba388850695856c8579b228923f30f570e5a","ssdeep":"384:9wh0NrygFyKiWPyF3xl22WNnVvG4ECGbLfUO:CUFytSbNVvBmLcO","tlshash":"f252be378f588f21c2201cf116e7963aa536696913d18bd61cf402bd2e87dd0991eccf","first_seen":"2024-11-12T14:49:21.111944Z","last_seen":"2026-01-07T05:28:10.037016Z","times_seen":9,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza1.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza1.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12429\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ysZTuGZyGnwI2vALOV%2Bj7GgYxfORhCyEeZaRl85hiR4O3Im0Nup98AG%2FZjCwEwDhxssoKxp7Ewg%2Ff7F%2Bz4CxwmXJ6DbxuIm5JMZEyFwfrMhzWrlx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e29f83dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12429,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x469, components 3","md5":"376e5fe3e102b3106b22775ab5154d7d","sha1":"6e0b3b6c5b70490444e6a755573daec4c6cf08e4","sha256":"c1fbe1957188939452772d6f64276bd74876b391369ebeac4ce25df635de2ac6","sha512":"7d1da2d7f3b30fc3142e770790f9fc542677fdce2dfd9670e761eeced5841bfcf57c63e683673695d7f97a0aef1651a53c51740b7f2ac57088d50f8b0d8ce14e","ssdeep":"192:9wjoZ7odQpbzhXT33yZ0bmVxy3n+P9LjtqlXrNThttdDhPSWlKWxz7w:9wjYYQrD3vexokZqlXr1htfhF0WxXw","tlshash":"dd42bf0f5a55c4b6d0d5afb02982e304d391ae3366ceac34adc4050854f79cb8456fee","first_seen":"2024-07-26T13:46:35Z","last_seen":"2026-01-07T05:28:10.113272Z","times_seen":15,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/icon_2.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/icon_2.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110218\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oaE03X1wUduMyhEpjDLpju0synUA5NVIjw%2BQZ%2FJFCetDIneRgBgbfbtF6zv9%2BPXiOY9VoK%2BZ2QbV51SHvFnvGNlzR2wPh2eRG72kSGevEMtHPs2q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf8cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110218,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"761d633406dcc5ba986e5f1a5fb22938","sha1":"2ed366e7ff960b31b20835d6e16005d9b5e443b6","sha256":"e47b17bdeeb10c9b90bbbbd9bc7a51424e7ccb6ebc7ad7b278fcf23b81e3a3b8","sha512":"2c20ed43b7e5036e84495da295b872b1b99d48e158dd34faaa107bc2d58c3c9f0a4171941e8b69824927944e6c2c61053365d83860390f3093c8afa0cb0c4b8f","ssdeep":"1536:rVdcCffOFJVnv/FOymE1+KMZZM6EGLFlFdG0lPeWGrdVPjT93svn3i4wRhF79R/7:rIgUp3FOoHVKhdHlPBCVHl4S/hl7VP1","tlshash":"6fb3127cbebcdc0fe72c0f61a526a549535b0909c4fba1f6d0e4196d2583eb407b862e","first_seen":"2025-02-11T15:42:52.605698Z","last_seen":"2026-05-02T14:51:08.58174Z","times_seen":28,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":202,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/css-zone/style-zone.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/css-zone/style-zone.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11367\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvG3XGMNPOlcek41ySPzAIlqeh%2FAxsibOxbsquM%2B4lA7BTJV3ifx3pSibUbr2vKtuGFpIrDsOmRUubONpbTRrXuufGKBVtX%2FvLav5259xzonQccP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e1feeddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52075,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7259), with CRLF line terminators","md5":"341e8f04d3a167c37427978ef710506c","sha1":"ffa6d017619f6d56abf7b1b16a2edc1b89eadc12","sha256":"93830c00d8bd135ecf06b8100448213477dc4b7b11fac9d5a54f16bf5a318796","sha512":"e7468bd98b54a9f7151d77de545d118b1d3ed7e41f578446b3ad52d02dd8aa71a44941824b8c619fe8a7221711e41420b8b52a65757dd55e9bd8a73a2904605f","ssdeep":"768:cUC2bi7VJTtDalZtdT52c3HoWVDuQMtZqTlLKbUZ1jG3iNUGEB77V2ahVr1CKqMi:EVFVr1HJ3wrXJjJQru","tlshash":"d23385396a97608db34769b4bff11f659e180422674f44bbf0f0b858d2c653c3aa39c9","first_seen":"2025-08-08T20:20:25.066789Z","last_seen":"2026-01-07T05:28:10.069041Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/line.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/line.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33139\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lj8zMNJqeVFLBiS%2Bv%2F7kiBFZ23TwEHxHs7An2ek0h579pHbsPjZDw1ux8dNe4sOKlockZVa50pRGVfOqKd6tmjuWIO7A27pCGRhHV6scwZaX5C2H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e27f6cdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":33139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 82, 8-bit colormap, non-interlaced","md5":"24fc66db4bdfdd222ab8ad9c52d4b4dc","sha1":"a2be00b2199e4f469d9732580276544dff897547","sha256":"efe446abcc90ebb60caf287e75d69950b1d17ce92e766650da619b786425b3e5","sha512":"f845476adea1af6bbade0e43c85c900f9cbba041f0b2be64057bbe79662a94cdd5eda4de7a8b0c04c7796cf82b810e2ff1d7f06bf30cd8aba9665016feaa2b5c","ssdeep":"768:dZdapMPpEc04o0d/XajpTZzyEZgWj/D2aA0qyjUP:f4pMmc0FjlJysR/q2UP","tlshash":"f1e2f2cd04e6b821679fd2e036969a6b8f9c04dd81022db950cac8d1417e435beef7b4","first_seen":"2025-08-08T20:20:25.052273Z","last_seen":"2026-01-07T05:28:10.089354Z","times_seen":6,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/link5.svg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/link5.svg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 867\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbIiTwpZfpcsChqH8%2B35sokhPPL7meM64d5o8gBRnxgh4fF0UDNfUEjJ1uZ2FN9gU7Y5xpDpDu3QaZHqaJ6YYHr9%2BPVqqJLWHFVJngkl80rU8O9r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e2df99dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04740b4a7d0fddf1dad654523672fc6e","sha1":"f25d543ecd9b59d9834f470f6b5acb97088dd366","sha256":"4594bd2e68b8017e7869437256c8f8505639e5906a2e1dd4a2a1176cad0cdf8b","sha512":"525f5a99a37e3591dfcbf060b5ea741e1d025b4c54f84e5ee7a84adc64e243f3fe2d6f6d0ff78cc8f832bd69c0508db1ccfac07d57f3234c7967823c5a6420e2","ssdeep":"","tlshash":"7731aa691cd65ccc13c80d8e2512f40a6cec7c05c1f535d6efd13a6f5ac9ec225661d0","first_seen":"2023-11-01T13:59:15Z","last_seen":"2026-01-07T05:28:10.086103Z","times_seen":39,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/main.css","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/main.css HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Dec 2025 15:08:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9016\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYy9DwiFg7qZDmG%2BcDKhxrTDPdIH7PLyjVenXcD02i4o3fcPkYDgsSoB7plbxAXQ6H7Ki8L6zoy%2BZrsJlrFgcKyO%2BEUD17T0YJ7NxodP9xbvO7nN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e20f06dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":63123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (514), with CRLF line terminators","md5":"a3826aeb74e428f9d12416d1566a10b0","sha1":"f49b8d15123421bdf448ebbeefe3646eaeb31ad1","sha256":"267ad21aab2e609e43eba1386b847ea600fda42dcf8f0f098565310a798debdb","sha512":"7d4e64c684c261cf7a3a162a4b660a4606a332b5393e03fa483abe0743180126ad22b4fb6f4e7e6d65c0237a3c81321fcbf72af33228a43025ebe3198e4f066a","ssdeep":"768:LsCFSALX0w0rIV0fsaPyaBY4aWfzcJFBcBK37i3FsdT1pIntjZQG4T+d1d7x9/Q6:LsSzaPyaBSahiMbY/6ISsedoq","tlshash":"35535264da122049f637a4f8bbf02b6aee181403974f45fab5e07458ebe157c27736c8","first_seen":"2026-01-05T04:44:18.300255Z","last_seen":"2026-01-07T05:28:10.041932Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29671\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:41:44 GMT\r\nexpires: Sun, 03 Jan 2027 10:41:44 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 310035\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84245,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:37:50.195817Z","times_seen":58573,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":4,"connect":30,"send":0,"wait":8,"receive":2,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/flaglink.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/js-zone/flaglink.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 08 Aug 2025 03:04:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38443\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yME%2FlHuOjY5A3PHzO4IlptFo0zq1rZWISFMGQ1OBpbxxRgJmRi1YJfjl0%2Bt9xqaroE0oESgmz54xShLzJm76DSssjSXK4hN7rm5HqZRvtDPHEdO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e30fa7dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":212386,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"71265f03b29f12786fa4875dd0fcd969","sha1":"dfe93bb771002f96dbba3741677b6127dbac7c68","sha256":"93591bc5651c6e9b71c21693b9cfa0f7b893ca11b479d47b8fb5d2f50341d2b4","sha512":"21f4998d8329e4bb98006930e6310b7d5d4eea14ea5cf601c59f7a82d28b7a6f6a3bb5805df1f9292a93d626b7e834029011758c1b486f948858dd432634dd51","ssdeep":"1536:vAeva+GGnn5tjvy6h5arX2C8dA+pnOQlddbv7ZXyuVr4Vrv6kHg84g+ELXJOpja6:xvHGGnnLjDkzEnJdVr4VryJEZ5/Cb","tlshash":"b02458a3e635ab3a36d136349a0f73ea4d8c7ddac68c44c82ac36dcfd7745e26518184","first_seen":"2024-02-25T12:54:42Z","last_seen":"2026-02-18T03:17:17.908198Z","times_seen":44,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/en/images/footer_link_bg.png","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"2.23.13.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /en/images/footer_link_bg.png HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/png\r\ncontent-length: 1630\r\nlast-modified: Mon, 21 Mar 2022 13:24:17 GMT\r\netag: \"62387c81-65e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=300\r\nexpires: Wed, 07 Jan 2026 00:54:01 GMT\r\ndate: Wed, 07 Jan 2026 00:49:01 GMT\r\nakamai-grn: 0.150d1702.1767746940.27db959d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 127, 8-bit/color RGBA, non-interlaced","md5":"92ae645b6114492e8c1c5464d949466a","sha1":"1d27f2644c0f5e899e9478c78136a9bc94131150","sha256":"f1bd509f6032d31635a91d57de9428b83929221b854768c38c8f1643877a9417","sha512":"50e20821f6fb80af8b7256620931e24afe830e2cb1b5f18043625dd9f8aef2706e3bcf5fb6cf2edaa229857601532d64acd4db7efa0628eda75c9a829c6dfea7","ssdeep":"","tlshash":"93310dceedb00d8156bac44905ebf86e781106c04ef182739a4ed08f266716af564eeb","first_seen":"2023-04-30T18:55:26Z","last_seen":"2026-05-31T06:09:53.766746Z","times_seen":593,"resource_available":false,"data":null}},"time_used":943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":942,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/fonts/laza-bugatti1.ttf","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/fonts/laza-bugatti1.ttf HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 11 Jan 2026 15:41:35 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Sun, 16 Mar 2025 13:01:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14650\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 205644\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lB098gZ1pbno0NjJBvmYPjB40mCkK8YEIViy1ROyjrZIYQDGdjjwhg8BAaw5IiAqCpEI2N62E38jruS0FSN2ic%2BR3FYfIXrCTSZqdfQlTHk1Hm64\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73ea9866dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35652,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 18 tables, 1st \"GPOS\", 35 names, Macintosh, Copyright (c) 1995-2009 by Phanlop Thongsuk. All rights reserved.PSL Samson Pro (�������)Regular","md5":"8f28571d69c5dd5f9a42ba91c092dfb2","sha1":"b40939af2808fd5bdc012f1bfedf626de8f37295","sha256":"37867249c181de17b6af859c59a95131a719ba276501337d6551cc8445be8fb0","sha512":"801ef4b21a3a4309a6bffd16aa12afc1d1ca4892af64f8f5938a2b7ca901e1d6cc1b30d57ab2eecd5345fe1cd8c3e5409b96661bbe29e543a2503dfdf68bac73","ssdeep":"384:ZcWXnixv8/wEUsmI3VIU62akc4w+lRZPROfGJfjqF7gJ+2MfusEs5XQB96zw6s:Z13iGdUkikEuQofu7yFMztXja","tlshash":"e8f2a511efff5607fb2a4bf88ee1839497b67803de35a7056d11a092ce8b1444a1778a","first_seen":"2025-08-08T20:20:24.929392Z","last_seen":"2026-01-07T05:28:10.115937Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/tit.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/tit.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52744\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZt6%2B3ZFo5di9k4Hq9KKmnwmvTJ%2F31rmgMNrePjlmaJ52T5bdjLO6MjrMNWYHYWbNV1t7MqLkMI7DOixzQsbwZRCf910o4WqXE%2FERQHA2edBOuah\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e26f6bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 613 x 105, 8-bit/color RGBA, non-interlaced","md5":"b54eb72ad675d1b9fed42a63c3de735f","sha1":"7c7b338e59fa17351dba3dacd79739d8458c8372","sha256":"3157637d99a7ecce47c4393837dbaa5b55df02310786c6b3c5e28f047dc7f82d","sha512":"9f0cd573d6375fdc273123c36a096c9224eb972a3aee6fdaf19aea754de45b247d4812d1f00cc56d1287b663a8631e3f0f4edf7a4b57e8a7b892dc6fe781d2cf","ssdeep":"1536:rigMzCwrpWqx2GwVrP/8gu85OlyiaW0oycL0a:rrehrpWiah8UcUa","tlshash":"51330282840d9913a51bb8e4fdaae0deb47881839f9b00530cc1ed6fdef4c4b26074b9","first_seen":"2025-08-08T20:20:25.029148Z","last_seen":"2026-01-07T05:28:10.125378Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/facebook-text.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/facebook-text.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12239\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KMaD5fLMEgnIRZQApurFXltZfUWxirH5RwyVQpahDVHXka3wBvQjQL3eoT4teLmzfr%2F5Cd7IZgbs0zuocf0RnyRoUFqlWfrW36X2AYjX1%2Bk%2FfShN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf8bdfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 604 x 158, 8-bit colormap, non-interlaced","md5":"c8469979cfb24192fc638efb7784a921","sha1":"ff2f9c8fdb233dc3bfabd2ecaf11cbb70791dfa3","sha256":"0cb512d932e3ad625dfb6c1ae0d47e1dfafecdf31c9c7fd9c9677c95bf31efb5","sha512":"c8c113d704a89783dde9f471022b0e31ff28d91a3c7215721888ca88f99bec20453dea73027fbdc19e5c71f822e85578fd79430db3605532d7ce2588d1a52e30","ssdeep":"192:xNjCISJry4NhSGkOLeNxXl8qhM4r+ilUdfXSjvi01Irb/mxLRxjqFli1nZ9END:xNjCISJry4hSG1eND8qBSi6dfXSjvpIb","tlshash":"c242c04a86a4132bd1ed19cd61b7102e211ebdc62837133297fcb06acd42a4fe23590b","first_seen":"2023-11-23T03:47:17Z","last_seen":"2026-06-09T13:25:30.735046Z","times_seen":200,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29707\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 02 Jan 2026 21:53:49 GMT\r\nexpires: Sat, 02 Jan 2027 21:53:49 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 356110\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84320,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32180)","md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T16:57:41.25068Z","times_seen":15308,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":9,"receive":8,"ssl":354},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/notifgift.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/notifgift.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 11:20:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28638\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJXvgFXnErR11doKdYu%2Bn%2B45s7Xmz3j5%2B0DcmbRxdRktt9fVj4xI3TjWW%2BsDi3vW28WaVTnTAmWmHahEgHogT0B7obSKoi43kCbFlbExvYQUwGmu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e78802dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 451 x 60, 8-bit/color RGBA, non-interlaced","md5":"5381ebbef0908e45aedf71399ee38226","sha1":"367483493590aca7dec6a35e31fae4f6511f27f1","sha256":"87317165e81ba0412d9d5236727325821a254670999e7f62e252f11bbe0f287b","sha512":"346abf4cf012e5eed63e9529e7e2cee10be15843a995ec64c6c089e0f37f02cf015c6efa0e34c8df4da75b0097cf8a0c149580f79e2217c3dce764f570f4c91c","ssdeep":"768:2/magnBLT6MteOkxthEy0MMow0k403tmk:2/magnleOkxthEf5J0k8k","tlshash":"f9d2e19b78f600cc5256a9b372ece15c5ef7819f8c828847527c1ea2f3111d2ee8e795","first_seen":"2025-08-08T20:20:24.907646Z","last_seen":"2026-01-07T05:28:10.131184Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/reward/withBg/laza5.jpg","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/reward/withBg/laza5.jpg HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:11 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Aug 2025 03:04:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33456\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hka9xBwIoOdyJR2ae%2FY0tCjVm%2FqMdj9GiE46ROyaMKqN%2Bl205Hv0q3E99OOBBSZRFiX4Em1kFd9UQxyq4y8eCn5MNE8SOHUgyOudiTYxJMZn3KZT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2af88dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=469, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=480], progressive, precision 8, 480x469, components 3","md5":"782065cf59cc8e3ecf8ede625f9edd15","sha1":"cc93d881cddbbe86f8568a452764de95794a3c50","sha256":"39632a21ed288a1ad49b024931dcef37cc5695afc95908746daede558593a4c2","sha512":"8d977c903b4a4c13f3a5bd80740b578caa2f2fc1411a1b16fbffee956139d0331bc650902dbea6a6e3d178c7172801e0ce03da879f1cd19fc5f201dad70c3030","ssdeep":"384:X54bRnZ9TZ1Hz50A7i3Q4bRnZ9TZ1Hz50Cn4HYpqfDsC9Q3IKTOB2Ic:KnZ5rHd0A7MNnZ5rHd0C4HU3IFBc","tlshash":"f2e24a1957607d01fac8b7774da8f152ed324329a12f1a257cac1b08fb65b31e8ce8d1","first_seen":"2024-07-26T13:46:35Z","last_seen":"2026-01-07T05:28:10.091602Z","times_seen":12,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/js-zone/slide-zone.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/js-zone/slide-zone.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 08 Aug 2025 03:04:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 285\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYGJ1Kh58kBqWJHw9zB5iTT5uI0ufvFHw3w2VqdtG6YiXdUqOUQQ5XnaRxm1cz0JOEAP657IvKfkcfBqezKg2Q0jENqKZB%2FPPKTg%2BgQXpnohQGfX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b9f73e30fa9dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":940,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"51fa3cd57f3290182f63a907434997b1","sha1":"6cdf7e765b8bf86a9b09f9f21550bfb98d3a638c","sha256":"c4e61e17585e4c2766ab32ba010c88bec63fb51e605ba374099f1b2516f906d6","sha512":"a40c6ecff7d049fcbddc32d53e8a578b31061372cf090a9dabff5255c239d936ef3f8f4fa701c8277c968063c2f634d39ce5422750936214e2013689a0556b04","ssdeep":"","tlshash":"a711c606d0182d5c99b5653caf6ddd12d8fa08128d09da80fce8905f5ff0e1572deaf9","first_seen":"2025-08-08T20:20:24.943105Z","last_seen":"2026-01-07T05:28:10.086928Z","times_seen":7,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/spin.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/spin.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 11:20:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38932\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381168\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQqCGVX3tolEzVMLcBh%2FdyMyBKvCPlKYpipnnmG1tNEa1IjEDN3%2BaP45Z8Be6SMTLq3aaZxh87r50%2F6%2Bdhxs5YG870zp4F4%2BcCE1LB6QggP%2BGjmx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e78801dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":38932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 172, 8-bit/color RGBA, non-interlaced","md5":"3ce4f59cbc4487f491f701d2d462d353","sha1":"934238f9408861b6fc14037026d2e62448dd118d","sha256":"d3512e420b07a3179226a48bcb413c5a2a354e2bcfd4ffb4507beedc1ef2919e","sha512":"33bf6a6cc6301952de21d00fa45f88f347f60da8f342a6275c41a8ed8908aae5ca534d200109c5d7d4be084cb84bd624a2e135b895c609f2b267f37b24c288cc","ssdeep":"768:QP3jl1QM3onntFcGK1MY7JQJ8TNC3Gy7ehKrlveDfIS20++:Qv34nhK1MwJQyZC2oecrlmDf7P","tlshash":"6d03f1ecf4a7a492190c7e8968f5b72729566c2528d1130dc3fc492385b93a83edf0db","first_seen":"2025-08-08T20:20:25.070303Z","last_seen":"2026-01-07T05:28:10.102542Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 07 Jan 2026 01:36:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kyad4Jxhb9TlbLhzgX3sI%2FzHVRlUq3Lg%2BBsYlpEwMp900PFlaE67X3HJJNwLH0TwLZoPBbLs2D1SXMLVs1dDmpp2rTPgWKMRrbb%2F154w5ey4m%2BM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\ncf-ray: 9b9f73e2ffa4dfec-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-13T19:33:33.1292Z","times_seen":368261,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/slog-bg.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:49:00.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/slog-bg.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDTPgWPFjxC3cOo9NFO56EV9GTJGcnE0JUIBcWloItLGc1pmhuOB55aCGbdC425gfX%2FikUR6LMcSIrRdElkqxUWH9yrg%2FjlvHVKVNjIxIraaKZcM\"}]}\r\ndate: Wed, 07 Jan 2026 00:49:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e78ffddfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T18:37:15.822921Z","times_seen":46884,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jipang.fortoday.asia/scrip/img/style-img/icon_fb.png","fqdn":"jipang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"104.21.7.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jipang.fortoday.asia/scrip/","date":"2026-01-07T00:48:59.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Mon, 24 Nov 2025 01:11:44 GMT","end":"Sun, 22 Feb 2026 01:20:17 GMT"},"fingerprint":{"sha1":"9A:F8:78:77:E6:33:EF:66:72:6D:D1:9A:3B:8E:42:F1:DA:F7:6B:9A","sha256":"86:0A:3A:CC:1F:D0:78:4C:00:CD:A2:16:0D:C7:C2:61:E1:75:8F:C1:EA:85:B1:88:12:90:8F:56:BF:0C:6A:E3"}}},"request":{"raw":"GET /scrip/img/style-img/icon_fb.png HTTP/1.1\r\nHost: jipang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jipang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 14:56:10 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 08 Aug 2025 03:04:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4538\r\ndate: Wed, 07 Jan 2026 00:48:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 381167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HB%2B5wkQMTvCry%2BJyDyxb4KSIoXcDFw9aTI6M906B40JqsBft%2BSCRS7MHGUkElv8piLONgZji05pIUWIVnYfZALXj3zE46fiZNGw8tr0c201znG9%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b9f73e2bf92dfec-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"8552ac3c41b10ae9e7f13d95e845a35d","sha1":"86715d70cf7fada24e9d5e6647135f8678e923cf","sha256":"3963edc509012e07abe8e5e3955a1793a21cadbc706859f1a299779b4289115a","sha512":"5952b45539325f0588a781e1da4b524c08f276b8ba49539906ccd5830538ac80300fc6a5802b298780b0aa840c921ff58d2aa907d67087e10866588c77468585","ssdeep":"96:d/5DiI4ol5U4Lm/kAqGSIh3TcLa7taEbpiuSymf84Jz33iGGS1Mm:d/RJrSkAq8hjc4rbEuX4V3GSym","tlshash":"ab914b716dd81eefd71816f4267ee75ae5e09ef0e226c00ec157b66221712069f83704","first_seen":"2023-12-16T16:31:33Z","last_seen":"2026-06-05T03:08:03.276275Z","times_seen":200,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"jipang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"jipang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}