{"report_id":"eaffbaea-2f54-4072-8c4d-664a1bd00eb0","version":6,"status":"done","tags":[],"date":"2026-01-02T19:26:49Z","url":{"schema":"http","addr":"hepini.io/camila-j1lb4b-b0dy-p3rf3ct","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.12.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hepini.io/camila-j1lb4b-b0dy-p3rf3ct","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"title":"CAMILA J1LB4B B0DY P3RF3CT","dom":{"size":20289,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (630)","md5":"6a186f4ed55db5522bb0a845866ed221","sha1":"c9173176ca4d5aab9bd65a83be4afae60f974b61","sha256":"26bdc343e6d43e39aac7028125438b4f2785987ba438d1d4ca679b830a4f6c58","sha512":"545ef01e4ba4108b924b1a963feae6b3c323bfba7e55971b08d22214d0f4099a0e3789325472a756093081856aabd251bd4b3f8badcdf38ecf37a55efe1eeb11","ssdeep":"384:0pO53ennE2u2F2KVf1WNUtosNLqUVUKySTI2qxqm0i:0pO53ennE2u2F2KVf1kWEC/jm/","tlshash":"8b92756648f310639087e1d46fb69b067f95d247c68f6a8436ec1bc48f93d81d82778e","dom_hash":"domhash2922f9934361d09d1ea1d5038b1b9043","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hepini.io/camila-j1lb4b-b0dy-p3rf3ct","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.12.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T19:26:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"hepini.io","ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2025-11-13T04:26:10.681635Z","last_seen":"2025-12-29T08:25:33.996052Z","alert_count":19,"request_count":19,"received_data":5267886,"sent_data":10265,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-28T22:26:34.892336Z","alert_count":0,"request_count":4,"received_data":549973,"sent_data":1933,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-12-28T22:19:30.36119Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":1,"received_data":433854,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hepini.io/camila-j1lb4b-b0dy-p3rf3ct","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ef62f9eea129ae3527cf97b79951c6d","sha1":"3950c14b9d1826be3580a37971c2a3ef04b85d42","sha256":"e077189589067adef010c7e7af494195927bb811ec5feb48bf3a84b9083fa191","sha512":"838c56e356af5b089ab07b18b4f36ca32eeabbd8b56522e3509c21e371141e94ce58a8bf2201c7f0ae4b7924ad5cc927f93887d60a84668277d7e4213d0908ae","ssdeep":"","tlshash":"86c02bcd210a0c71c1f73700cf3fb600b602321898d06a31480a63844d30e03db44810","size":153,"data":"","first_seen":"2025-11-13T04:26:18.813428Z","last_seen":"2026-03-28T07:33:26.143054Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80421,"data":"","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-04T03:22:35.098669Z","times_seen":13765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T03:45:49.849196Z","times_seen":330097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/camila-j1lb4b-b0dy-p3rf3ct","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cd003065ba246f56d3d0346baee79c3","sha1":"3d485139cdb13505ac3da248af47cfc13ad06801","sha256":"da57e694d424f3de4469f8b564345a5c9c736096cbe5309c8b0ad5465c8b6eab","sha512":"5d6dc1eadc9a1368a5cd5d923931c9ea52acfea1b98b634df1e52596dc002d480d4562b28ae82506015600f6d76eb78f06bac4c774ce63bfa71b0bc630a55187","ssdeep":"","tlshash":"1d31b96f66e208210affb3aaa70e6700312540571542ed003e6dcbb45f60da75076bcb","size":1579,"data":"","first_seen":"2026-01-02T19:26:57.020569Z","last_seen":"2026-01-02T19:26:57.020569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V0LG39JYV5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf886623723db606e7c09c4e326ea44","sha1":"2d86b2853a93976d13992dcff5b9666df12e8853","sha256":"9fb9a32fa9257c4a96e53333e69fc764325c39cfc3dadc01ba485ca155d47e47","sha512":"381877a92f8bcf8c5a9de773dd75f8c61c9d8b7dde2494ef173f03e196e6ba01130e322c7dc4a129fa41b2b3b3e58600a42bb4405916fe4bd5bfb18bd154cdd9","ssdeep":"6144:11Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:gC8bu7/1mbrnsy39WbMpb","tlshash":"13941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":433250,"data":"","first_seen":"2026-01-02T19:26:57.013616Z","last_seen":"2026-01-02T19:26:57.013616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/thumb_68fb49c093bdc8.73518824.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/thumb_68fb49c093bdc8.73518824.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 24 Oct 2025 09:41:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 110062\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OklTa9cBNyE8qabutDAgTtmXyg%2B7VXyr0LvP2wzfYBL7z%2Ftqwx%2Fmq0BLoNCckM%2BSsawlKKH3mmkhHom8SbjzddboTPIRb9BA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8d4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110062,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"7a5d1aad195169de82a507e1c30eeee9","sha1":"3f7fe293a161a84d60d75c03ffb246cb69fbd1aa","sha256":"363ed9bea0bc4c657f093fbcec6c0111cfb3f0058366defdcca0b3f5c7550b47","sha512":"b9797634f43199525fc38162c2f0997681ed8b614f2b8a407d0aff58772405b225f9445565a55a1dc64331cb8d2a09cdf5c1d669a94cb5389091dce29fd6933a","ssdeep":"3072:I75OFDd9etHPjR9UE8yQbpbBzPFbujJqDQgaBc:6w3et7h8ywjzPFMcU2","tlshash":"ecb3025728705d979ae883e82f1b5b285f11a33946167eeb8322036777405a708fdbac","first_seen":"2026-01-02T19:26:56.996784Z","last_seen":"2026-01-02T19:26:56.996784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":708,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/camila-j1lb4b-b0dy-p3rf3ct","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T19:26:25.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /camila-j1lb4b-b0dy-p3rf3ct HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 19:26:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.33\r\nset-cookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=10,cfOrigin;dur=547\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2Bu37fAckjBg%2FVytcQX1hxGuD%2F59wWoVKvZqWQJ5SvwwrMyAwZ62b%2FKzm3oaYNOBCNOTRnvxWGSXKHgQ3pnsMmsLU5X59w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b7ca5e02d775693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap:5.3.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP:8.1.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20800,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"Generic INItialization configuration [Direct]","md5":"bd13b49cb19a3ea8e34fe84f6f233511","sha1":"19e661b00bd8ca17b74d80a532bd38d1b3d1c8d4","sha256":"953a7047f98bf30f746d92de8c16ff9b45003eb9432dd1c100170bb21cd510d2","sha512":"65c89ef9c21d20ce02a0aa1eb012c85d3fd1aa897e392d223e24dd018844ba9fc265551d4ea71730c7f71c086aa76f2f5f0f7d16f63932bd7202496037e36f3b","ssdeep":"384:Q4ONsEOVWms3rK2AodG6Zzhnb3p/+Py8WlG5waz:Q4ONsEOVWms3rK2xsoZ4hz","tlshash":"7192532594c220638173d2d59f759b59fe958247cb4b669436ec2bc78fb3c80d823b8e","first_seen":"2026-01-02T19:26:56.997679Z","last_seen":"2026-01-02T19:26:56.997679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":563,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/ads/bicolink-ads-ref.gif","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /ads/bicolink-ads-ref.gif HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 13 Nov 2025 09:13:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1710371\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQybhda7nEOzYzJuZzodY9HLKVhQZUWeWtZJkq%2BrRXIEMmlUs5%2FdkD%2FtrXAFrVG7WXhlwVcrPLs0GU83l0AOZ5q%2BsjhZ%2BYSb\"}]}\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:85,h2pri\r\netag: \r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b7ca5e4e8ca120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1710371,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 250","md5":"3d74bcd12271f0ff1638cfe681e7c854","sha1":"8327507cbab54a3c8d50dee8f7943ed9615354b5","sha256":"1e4cef0d42066b428904f0a32a98fff3ef94f01530ebc170d44529a31a29a407","sha512":"7b516a1fe06348992ad6247cc6a6be1893340adf0e0309771c9751a9924dfed1ab1dd8e7766932559d2cbd6c64b02c5284d8438e5c7f96b1711c019eb45e15e8","ssdeep":"24576:Lq/19o9inDUbEYmU4siaHCEY6ZppEX/usGNZC4d:+Xo9i8E/USaBpPsGK4d","tlshash":"b225236340a662c1d6287ef92eeff15118fa69a8b5f2f4205c4157c0f7f4c5e22e15ac","first_seen":"2025-12-19T08:35:58.715847Z","last_seen":"2026-02-05T23:52:35.201643Z","times_seen":7,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_691b16d9f0ffd3.83843728.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_691b16d9f0ffd3.83843728.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 17 Nov 2025 12:36:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 204158\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbIB%2BCz2yvempMRKCL1Lh4elppOfTWhqjy%2BXZDmwwUp9vA6hUan%2BvMkOyTc%2FZhbKCwbLKnhcWWWG%2BMeK7DMBkPVLHjo%2FDXfD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8cc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":204158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"dc663c55a0cc7d7c7b650386371b537e","sha1":"7a82e3d45dcc9d77de322597fccfdb13688b77fe","sha256":"261b739645f414718f05be5e73ce38495f53cb841d873d0cd413591a92e365c6","sha512":"76aafd3b8fe1f5f3ca71690fcd6fb3d9c88ef7f707f0329ebbc58bc1f6b8c9f69571ff7a6964a6336b68b1e92645cf2346a00c95ede249863ee172fe09f39f86","ssdeep":"3072:zwTCSx9rmlEUGgNWF/diaGjGVv1RgVsMO6fKp5k/LOPqPjxv56tCH792Y:zwTCKsJWVVv1+GMKpEVxh6tCHwY","tlshash":"b2141222a1a3c08aae97501c7615d973c7fb5cf839aa5c78f2b4b0ed641d13b487c09b","first_seen":"2026-01-02T19:26:56.99915Z","last_seen":"2026-01-02T19:26:56.99915Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":682,"receive":376,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"13a25-1yL6mYLaiqSN+IJRuxiX8Twds7k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nage: 3573058\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80421,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"849e6db145f2905ce210f628bddd9de5","sha1":"d722fa9982da8aa48df88251bb1897f13c1db3b9","sha256":"aa53d582f97eb594c2a5cc5824574707f9ba9837bce3046bfa5f3556860f4e04","sha512":"54adb372f9ed12e7da8a673e79f3988badb654de5969c767b9f9e65fbcc88423e68e12a73a2f590ccb60d7fba0e65d7cddfd7d806d7f701b2d3cee03f0dfc89a","ssdeep":"1536:OSif7R2qTTR2t4iYniNw+inreQURwTLBAF+27wXiYE3Yjr/I2:4R2cpXLBl27wXit3Yb","tlshash":"ca73b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-04T03:22:35.098669Z","times_seen":13765,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":38,"dns":1,"connect":31,"send":0,"wait":16,"receive":7,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons/font/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons/font/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hepini.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 134044\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.13.1\r\nx-jsd-version-type: version\r\netag: W/\"20b9c-tEH8/5OeJPoJBqN7d4h4i5/du2g\"\r\naccept-ranges: bytes\r\nage: 15467\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nx-served-by: cache-fra-etou8220027-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134044,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 134044, version 1.0","md5":"84a4d15b9e4459b6229a7f1dccc6609c","sha1":"b441fcff939e24fa0906a37b7788788b9fddbb68","sha256":"6c75710364a1ca5604267716f6d28997b26319fdb078cf11e0b42ab66ff2ea61","sha512":"d767814d144b311254de5d248d4a1cd2777209016687c11b3a7791642d90ff267c11d0001fb30435e3767959a2a00d4076e1bc6fad3c7a58cfdb00e5c77c44ce","ssdeep":"3072:tDHos22Zs2P3qithtQxgI+oZzvHB2haro8yYMBX:FHo8s2P3qi1Q+K1hLrxmX","tlshash":"19d3127e338ead54c8b4d32963588c7522ef82c2962bb2235f71523386f94fce485517","first_seen":"2025-05-15T10:27:38.85456Z","last_seen":"2026-04-04T04:08:34.037128Z","times_seen":3272,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":23,"dns":1,"connect":0,"send":0,"wait":15,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/cdn-cgi/rum?","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:27.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1057\r\nOrigin: https://hepini.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu; _ga_V0LG39JYV5=GS2.1.s1767381986$o1$g0$t1767381986$j60$l0$h0; _ga=GA1.1.1058048917.1767381987\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1057,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":1188,\"startTime\":1767381985228,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"2351d1a7-539e-4d91-97d1-8ad749c13c9d\",\"location\":\"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":1132,\"domContentLoadedEventStart\":1201,\"domContentLoadedEventEnd\":1206,\"domComplete\":2454,\"loadEventStart\":2454,\"loadEventEnd\":2454,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":57,\"domainLookupStart\":58,\"domainLookupEnd\":59,\"connectStart\":59,\"connectEnd\":81,\"secureConnectionStart\":63,\"requestStart\":81,\"responseStart\":644,\"responseEnd\":645,\"transferSize\":6572,\"encodedBodySize\":5651,\"decodedBodySize\":20800,\"name\":\"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":2454},\"siteToken\":\"e2527943290f4468a0ca904708c6d92c\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://hepini.io\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FS12fydliK52uV5qy4x%2BdsqC8DHFx4WhKmCCd3m%2BySaBK6vmVmjoC2tVGZh1Szrka%2BSBikwF84afD9Yl5LwU8Pe3ueGy7Au\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 02 Jan 2026 19:26:27 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9b7ca5ef1a01120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_68d7fe6c675971.09408017.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_68d7fe6c675971.09408017.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Sep 2025 15:10:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 212624\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hpi5YD3pu6k8vPBL8gFwvbaul8DTTupmQcMHZGq5TK%2F%2BOx%2FLhYriQjXY1v%2Fm0ejOgfcV%2FH707LEfmwbTqKpSUmukp4Yw1TQS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e508d9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":212624,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"b11b9b133ab1a1b1e5aa27a10ff4a7b7","sha1":"901adaed11b6ab6eec305bea08a3ac1538db5088","sha256":"56e6033c72d4df3eea83cc2b7721f0d146a78e9dfa8a2c6734c981d366186b48","sha512":"9ffd0864e18e284318138c84e33a53a04ee548ab7928f3b679fa39a56645bcfbf58e4f7c997eafdf101d133acb124e17b1666dc41759587dfc958888919d04a5","ssdeep":"6144:iIsDsfX0ha7Syii6SIqmovcJfGtwiGA4Lt:zsgfkLyzcRO0A4Lt","tlshash":"98242308c617c17cafca1b1a1f71f275931356520b216ecca4dd56aef5dab2f6b34012","first_seen":"2026-01-02T19:26:57.00152Z","last_seen":"2026-01-02T19:26:57.00152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":537,"receive":701,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hepini.io\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b7ca5e549a74e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-04T03:45:49.849196Z","times_seen":330097,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":19,"dns":2,"connect":1,"send":0,"wait":16,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/favicon.png","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:27.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu; _ga_V0LG39JYV5=GS2.1.s1767381986$o1$g0$t1767381986$j60$l0$h0; _ga=GA1.1.1058048917.1767381987\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 10:43:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 09 Jan 2025 19:22:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1471\r\ndate: Fri, 02 Jan 2026 19:26:27 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31370\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FRQY4jDtqS5xbHg%2BZ%2ByJI4LJh%2BM%2FEMh9cvD95HPDa53x4N5Tse4wQYS97xgc4pya3ngLNGcDgKycq3EpyTWKeuqToK%2BSdgcm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5ee39ed120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1471,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d8e4539c65b67e9289a2e617633b3b4c","sha1":"2558e12b45ec2c7348166b10d0327a1057cb1bab","sha256":"0529a5cd8c570edf54a47a2d3d2253791f78c34eda31ff8dac7625ac4b69e66f","sha512":"f27e46d05818dc5767b157475f489ee57c1630a38e5d4849252a0fec9bf12d99734283ed5d69d71f4a3f5f66342db1073390f8e67e6c5304dbe105715c380da3","ssdeep":"","tlshash":"06311c559d119ccee5c1eebc3f0f7c8c0de1b624a151edd21451071a509974a374b702","first_seen":"2025-11-13T04:26:18.808992Z","last_seen":"2026-01-10T08:10:07.12283Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/hepini.io-logo.png","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /hepini.io-logo.png HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 10:43:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 12 Nov 2025 10:39:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6238\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 31371\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s5ZWbJW0b2exR%2FzrhIH4I5oznBGxiikVK6KEtF0zScYmpQXwgT8x%2Be1THNH4NX3caXGk%2Bq%2FE7MAiPZzSTUOgdGStBKljCH5M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4e8c7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6238,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 50, 8-bit colormap, non-interlaced","md5":"54bed7c9969a75c19ac01b462839301e","sha1":"2a59f80ef3fdaa06a85c16f671d16eccb7c118df","sha256":"aba298f6e24d4fe2359b590c798211b3941fb5911c0c162333a118b2ea4739f5","sha512":"e8c7e764831d44b272ac19144956f9a7a76951999c6dd013bb01d03277093abc5296dfbf6a1d31ccebc6023c06db82f23206b560dcd685448f87db6dc1d8fb09","ssdeep":"192:3MulDXIWI2DKS3KlsmuKUnWXasSZGNNmO:3VXIWh3KIWXPN5","tlshash":"e4d16db4947501b793ebaa85a8fe7c98c9530dc4a9007359dce2fd930fb198686d2293","first_seen":"2025-11-13T04:26:18.78546Z","last_seen":"2026-02-12T07:35:44.624675Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_69132cba8ba5d0.92849286.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_69132cba8ba5d0.92849286.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 11 Nov 2025 12:31:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 160159\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cn28sPHq00%2BaQcoKU1AbdG7Zu5As98EvMyitoo9ltOrN6nVBktyw%2Fh6DgfSsj0xJ0yzZsDecEzW2bb2%2BqcN2%2BRVrPM7jlZg%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4e8c8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":160159,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"a798cd106596e419bd562b88a1bcc619","sha1":"fdaf884188bcf59750daee2dd89735b78eb7c0da","sha256":"67a923bb2f2618229f5a33a235f315a897f17802dd6ada022ad447f957a72e1c","sha512":"fef15e1d718a3ac9f8f25dc1060ecd1cb8d522e582be13179efe74919f133565e13ec75d813be5d8494f3d1f4c3bd4a1ff5dbae99eda2022e06987d2a04ad20c","ssdeep":"3072:c1eXo854Yo40pk7AufaTO2h/WYEfSG6R1qLIikoXYBH73cFjvebAapD/:c1eYe4RppxUYkw1qLIi/XYILYR","tlshash":"aef3127a9339a585e5b99327d00cc3cdd7575220728ef9291a6f49c0f2e2358de96f30","first_seen":"2025-11-13T04:26:18.810099Z","last_seen":"2026-02-02T22:37:47.184907Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1097,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":385,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_68c14f99b26554.12747410.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_68c14f99b26554.12747410.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 10 Sep 2025 10:14:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 188936\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEntuOZf2ceO2Qnp509387XwBa71yy1UTOvVPYQOHXI09U8dvpsoexJ072FSHv48olqtm9Of2xFGJfbs3wfJtkBvpxFvbtDS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4e8cb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":188936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"713cbbf8751f1093e942a8bc4e631e4e","sha1":"ec3df1a6ff930921a825ceebeca4a4ce12df01d7","sha256":"b1dd081042a093950bc30e8bd3c7214c108c73c6fdd2d34ca9d4fc171b8d479c","sha512":"5c5aee07d8ad36d146d4b28e60e7897b021571709d85f5fa29027be68eff68a8cd97f518c02cbc685b446ab1327e29bdd5168c328528a82c827d6402df7e6c82","ssdeep":"3072:pzjTZ55W+3V60uDSb31ngIMk7D6H0VBCBluErKlq9XCyV9alSkhmsxdyMQO8Njnh:xjT06V60fb31n6k7eUVBWGqB9aphjdyd","tlshash":"08042386550afab6fa6dc649ee7370d07c5505532b31736ee9d2f1a03a1c7810113df9","first_seen":"2026-01-02T19:26:57.005324Z","last_seen":"2026-01-02T19:26:57.005324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1056,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_6921c54765a010.06055210.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_6921c54765a010.06055210.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 22 Nov 2025 14:14:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 130792\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgM7aX8lhCGrqFRfkvP8kd2wudUGolf1G2XmsNrXvRoTpwQqvalsnqodswVRm2X%2B%2BPs8xTO7Pbd4Jky%2Bfx%2BodS%2FmJopobqau\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8cf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":130792,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"7c860b50736d2e385d260406990588ef","sha1":"354cd430c5cbd8ee99ec09e59f674ce019041783","sha256":"814eb7a1ae06e2ec1d1bcb425e0e8219b656b0ebf60f28a046fabbfd357de8d2","sha512":"46d9d05fc065b2fa9857805d03712b9f41ea06d2870204aab90dfd84abcbb12e234117746e65b014de0d69b613d1805236afcd3e8ccb437e5138f83dfe546a1d","ssdeep":"3072:WECfM/3mHQ9hsju3T+PF+mgfY5WopYwFB1jXBVaUCecHC07XlGLoppqE:ZPmOs7gfYk4YMLMeRg1HpH","tlshash":"b5d312011c1eaa4384ac4476bb175ae113f8ade49e5fbe5436a557b37fe0c03acb1a1c","first_seen":"2026-01-02T19:26:57.006131Z","last_seen":"2026-01-02T19:26:57.006131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":684,"receive":376,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/thumb_677ec027c01268.80750280.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/thumb_677ec027c01268.80750280.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Jan 2025 07:22:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 113948\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FHMmCMutdEZUM6%2Bw2xkLvMcSiOsp%2BvJ2YcSMpg0NHzJ48Wrf85btpiDiMdk7YskaGm6gz2oGR4jEV0%2Fu4SS5NlN3qALVJge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8cd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":113948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 349x638, components 3","md5":"fb7ea6295e4ceb2cac5d9dce787ac599","sha1":"5711aae817a01328528c9bbfbf723d4b94e7d8d9","sha256":"3a1b818ad991065fb0a5fa8950e6d073ab74eb72b41355d0a36f07001337568e","sha512":"821a68fdf23ba7468739815375485d1f4a954fbcbbdae78162f439caec1f36802d2421fe3636d7e17d4a1fc58d858f6e6455927bd325c0b2f2d2030f16466e69","ssdeep":"3072:3bR+XgcyuzLFn8wyNV3q+J0uAfHJ0J8PhlxODxQz:3NgxzLlbyNVRXcHJA6k1Qz","tlshash":"4cb312748777074accea50baed81b92b03b78c855133b14149b0e1928b955eedfdf3a8","first_seen":"2026-01-02T19:26:57.006936Z","last_seen":"2026-01-02T19:26:57.006936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":531,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_6852c48129aaf2.52866950.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_6852c48129aaf2.52866950.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 19 Jun 2025 00:52:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 178513\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEPeiQSMtCP9h9DGpD9cv1Mh%2BdLa8tz0Mvcu0BDBGOVjKejvURSdj8P2pJwVm7IqGu1cFROw0iFXwZq3gm5238LTjYHiJ3RG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8d1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":178513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"86939f5a5368d267bea890f70d242d34","sha1":"a21dbe74386e91f7ed87dab56425e8a2d0c3968e","sha256":"525b04f74106ea2e0c841f16754657dc204f289dc53ac38c981ecee6e3553473","sha512":"43870183a23c3939b430a4f16ce66a29cdf6d84d4ecf67bc9c867f2ead8d86ed11b62226b1875937f23db3883bef79dce532d29405eea63c47e001dc6054289b","ssdeep":"3072:i1MARuSk/59NLAVlLKJuU73f20tcgPuPr5Gfa6MKFXDkW/00GmqC/gEWDCwU76v:i17Ru7/59NLADLuuUTfFtc4uPr5V6MIU","tlshash":"da0423474aa30365cd73a8b39ef3a198b9e1b72411496b1b1c133d36eac6f4f846991c","first_seen":"2026-01-02T19:26:57.008232Z","last_seen":"2026-01-02T19:26:57.008232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/thumb_678fd4e8a64929.90330300.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/thumb_678fd4e8a64929.90330300.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 22 Jan 2025 05:10:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 111387\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XM59xhgQZL9760U98Tu9%2Bqn5O9ygP4FeHR9KGoU3HPY7CvwMZ7PnjOhZEfAa%2Fz8s1T%2B4M9eJpEutma1wypzri9%2B0LTtWsbtL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8d5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111387,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 719x1280, components 3","md5":"501d31f476802655525ca05352b37911","sha1":"64a814edbd80af1212665ed63ff5efce5b757f89","sha256":"201a4ada29ea51c1d516ff0dd9fd045f80a2b59e9d2e7e0985ddc670c1e393db","sha512":"6e1787bdfe9d4ecc23c73db0cadd9d0be2a3f8cd640a6355cc4ca994e9855ae0b213f6f34e26285f9d4261d22675434a62f2749fddc839bbad2d5e8219bc2435","ssdeep":"3072:Ec4NSaKVWSczfpwn8FaWh+r8FCgQq0PdrSQB5DvoHfkO0/:NW0VWLLqnIaWQr8aJoH2","tlshash":"e1b312a718a75f9608d60e3937a49cb5f938a5e8dd2203057bfec8089b80b57cd5c71e","first_seen":"2026-01-02T19:26:57.009185Z","last_seen":"2026-01-02T19:26:57.009185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_68d2b3a33f6912.71202089.png","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_68d2b3a33f6912.71202089.png HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Sep 2025 14:50:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 640590\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1v4k3C4hSXWaN8C1Q6kBFM3MgefQh25vJWj6UNO2AqzyAr9Id3OqnZ8ll1QNK5K2hCpgwu%2FBgIk%2FOCrU8JA9FIWFgxctcF%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e508d8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":640590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 1280, 8-bit/color RGBA, non-interlaced","md5":"aad24f59361da9bf35412d9bcefd03e9","sha1":"a82b8e5f5e5fa8305c26b2fb361896eca2244bdb","sha256":"88ad7b3723823aae1d461dd93fb0f4c16eb4f711aa4b087ddd5fc99c7c6eb6ad","sha512":"7193f4bba0125159795412428bc95d5858edd9671b29ebbd9eaf1c35b671e3f837f4c0902001bd62c64dfdd31c8cf6465d83f09bda35abb87dc50fb8d736e87e","ssdeep":"12288:bJnUjIdOra/KmyMsHjQ+Z0VFO/h43rXkq2B6bAgqDNFNLOS659Cy6Of:bujTa/Kmy90+Z0m/CbHbAgqDTNLO51N","tlshash":"fbd42332b0e04d76dff31a5b87569dafcb82825dd25bf953292b26d2830378351a8349","first_seen":"2026-01-02T19:26:57.010262Z","last_seen":"2026-01-02T19:26:57.010262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":857,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.13.1\r\nx-jsd-version-type: version\r\netag: W/\"184e4-ptHboTbR5gcHjbMAMHDqs0tR7FA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nage: 26392\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13832\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99556,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1f041c852155e417017372c978871d14","sha1":"a6d1dba136d1e607078db3003070eab34b51ec50","sha256":"004322721c8557331759bc6ddaacbb689b0f0715d688aec82bd056d2d5b5cc3b","sha512":"bd61eca743ee4f1c1130bb464e76d2ecf0cdb48ef21669a216adb886372aa6ea7f28aee2c7159d5f04667ab1bd82eee979a491215c6915c7c1495ac6cd6705e3","ssdeep":"768:vqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMZ:mOocm4FJwZ5ijINRDlIiw","tlshash":"6aa3efba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2025-05-11T00:31:32.601303Z","last_seen":"2026-04-04T02:47:48.183617Z","times_seen":1181,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":64,"dns":21,"connect":29,"send":0,"wait":14,"receive":3,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0\r\nx-jsd-version-type: version\r\netag: W/\"38dd2-sjFlHg/Wi72HWBifvTZCxGLTT6Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nage: 2997355\r\nx-served-by: cache-fra-etou8220062-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232914,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"fe7fdfec700d100dc745dc64d3600cb2","sha1":"b231651e0fd68bbd8758189fbd3642c462d34fa6","sha256":"7f1d37f0d90b6385354c2ac10e2bb91563c46bd7a266ed351222ebcac8496c2a","sha512":"b7819649564ed5e0bc04cdf7f5777b529870e6cd7b6bcead219223f2a4718672ae6fa5a8ca19ebc5e08831e02a04f81d646942706d8fad98cc73e5abefcfb95e","ssdeep":"1536:VYutjsbf98fOdBfvO5wlP7Qy9A374298wsY/ElV6V6pz600I41r:ntj898fo298uI6V6pz600I41r","tlshash":"383481d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2023-06-08T14:47:00Z","last_seen":"2026-04-04T03:37:52.47972Z","times_seen":19709,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":68,"dns":0,"connect":30,"send":0,"wait":22,"receive":8,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V0LG39JYV5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-V0LG39JYV5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nexpires: Fri, 02 Jan 2026 19:26:26 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143215\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433250,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"fcf886623723db606e7c09c4e326ea44","sha1":"2d86b2853a93976d13992dcff5b9666df12e8853","sha256":"9fb9a32fa9257c4a96e53333e69fc764325c39cfc3dadc01ba485ca155d47e47","sha512":"381877a92f8bcf8c5a9de773dd75f8c61c9d8b7dde2494ef173f03e196e6ba01130e322c7dc4a129fa41b2b3b3e58600a42bb4405916fe4bd5bfb18bd154cdd9","ssdeep":"6144:11Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:gC8bu7/1mbrnsy39WbMpb","tlshash":"13941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2026-01-02T19:26:57.013616Z","last_seen":"2026-01-02T19:26:57.013616Z","times_seen":1,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":164,"dns":1,"connect":10,"send":0,"wait":30,"receive":25,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/bicolink-ads.gif","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /bicolink-ads.gif HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Jan 2026 10:28:09 GMT\r\ncontent-type: image/gif\r\nlast-modified: Wed, 12 Nov 2025 10:52:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 66617\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMcfLGlVYqiD8rusGo20hBFDnTJLfRTgkSnlMZBm6HR0iTqvSqWMT7B2wPCeyFv41Vk5Ew8c2spno5ju9rYzA5vNQRKx%2BN48\"}]}\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: webp_bigger\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 205096\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9b7ca5e4e8c9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66617,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 100","md5":"da20a42ea79780b0af81c6e950122a6c","sha1":"d0f04d80e4746c30815df1eb062ecd6acd170f73","sha256":"b8c7e40520c67590fe9c6c274bc787a68e1749a16a58e094b0ae7b41197cf0cf","sha512":"810033ea6407fda9f4787944f56a15ceca075f428b5e23a2b09b700e46b21174be1bb4bb139c3f74fcf6e5b78df968a6ac555e893bbd5abc45f3c89db0459cfa","ssdeep":"1536:IEDZLTt5yWPMqdwLWI1OBzB5wtH7K9ZAbpBdEOBzB52:NDZLTeWPMqd+WIEdsb913d2","tlshash":"9c53d01f671208a9e6e242fbef236cab423b5232046415db234ed753f94da0d5fd3619","first_seen":"2025-11-13T04:26:18.787399Z","last_seen":"2026-02-05T23:52:35.208269Z","times_seen":8,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/thumb_677ec478237374.37593344.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/thumb_677ec478237374.37593344.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 09 Jan 2025 07:22:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 137033\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btcYIU9Vv6HmLr%2FoJDeaPA7w%2BGeTKRWpNObC7MbVjWwihyqetBA0xAa76RKudVKMaHTEP8bCE%2BLZ8a2LF1pi03I%2F8uXxDugP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8d0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137033,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x1280, components 3","md5":"8faa78c8bc173bbc06acdbc7e6853a01","sha1":"50bdb4d191035562f8c3261b95ca809267f6208f","sha256":"c5191347ad1cf41f546ccbcd682c8dbe0b6d83ff7de97d19839e09631f779f6d","sha512":"7c1b92b15651633d96d8069cbf6af38572aa9133b42e200af63a3646757068f5cb06564fb6b1e868a04eb8f4804ee6fef7c806da6d08b273dcf73a3266e685a8","ssdeep":"3072:i+rAnB+Qn8ZHY9ZmpEk18T+h176rNbnjSkcFp:i+O+3Z47eEkY+h176V7cFp","tlshash":"85d312da8b3b047d22351cf4176e5742a74e4a99b489becf30d013afb5d0dad8e962c0","first_seen":"2026-01-02T19:26:57.015439Z","last_seen":"2026-01-02T19:26:57.015439Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":681,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_68ee1d7c77a337.29409340.jpg","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_68ee1d7c77a337.29409340.jpg HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 14 Oct 2025 09:53:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 279698\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HOIcXWYO3Dcc33FtR1YPygxhw4FLPMVU2XivTcJUErVIAKU7Y1EOLKpkof5IIUDDQaVH7YzE257squPQ%2FaM6XxfpT0YK4MiS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8ce120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":279698,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 720x1280, components 3","md5":"2f9048be2a3087b2f0b36aee6272e36b","sha1":"4ac0de16b742c890c6a7c9a160d858a7e812d3b0","sha256":"a5b084a386fdac05e696187a172687e4091d71eb5931afc6583d80f4fb43314a","sha512":"af9d1b890947056226ed72081458ae7f510e07a8328c371c987d2bfd4ecd15ff9096c3a3718b91c3230b1c28f5ee4b7ecba4add7da4b581efae5f36e4c4feb41","ssdeep":"6144:UqT1n9I3yIuU/gWursZ5FCkLkriiu8wiodMqaCyN7g6EM7uJ0T5O:bT1nq3yrevOq5wkQriT80MqGcGuJq5O","tlshash":"c85423815173e2849e1fcdb3d762cc37050b2ca993d972abe235ee8ad44e292cdd7251","first_seen":"2025-12-19T08:35:58.708724Z","last_seen":"2026-01-02T19:26:57.016707Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":673,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hepini.io/uploads/thumbnails/hepini_68c154549b5432.09805844.png","fqdn":"hepini.io","domain":"hepini.io","tld":"io"},"ip":{"addr":"104.26.13.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct","date":"2026-01-02T19:26:26.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hepini.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 07:33:28 GMT","end":"Tue, 10 Feb 2026 08:33:15 GMT"},"fingerprint":{"sha1":"DB:B1:A3:7C:24:21:BA:8D:01:9C:D0:1B:80:FB:62:13:28:15:5A:6D","sha256":"2F:E6:FB:AF:95:B5:07:AA:F3:A2:D5:EE:C6:E9:7C:8A:36:04:C8:D3:09:2B:EB:80:58:B6:A0:53:24:34:3C:DA"}}},"request":{"raw":"GET /uploads/thumbnails/hepini_68c154549b5432.09805844.png HTTP/1.1\r\nHost: hepini.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hepini.io/camila-j1lb4b-b0dy-p3rf3ct\r\nCookie: PHPSESSID=7m70olmj7q3pa8vd4vv3slb6bu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 09 Jan 2026 19:26:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 10:35:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 979452\r\ndate: Fri, 02 Jan 2026 19:26:26 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KcgbOvUTwT75RJ%2FKZdon3Uni%2F9SRufNU63QZjoQT0sv7Zp1KQz0y5slfuRs%2FchFyHVfz3EHy9zZBf3JlwQBD%2B2bwPBnAUw06\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 9b7ca5e4f8d3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":979452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 1280, 8-bit/color RGBA, non-interlaced","md5":"6468b1cf64aea28a725c3c9866f7534b","sha1":"9712b1e520bf845b5ca3334007829b2e09a529bc","sha256":"3ea622621b8141161a77af19f8b525b7311b0005981028dd3b53ffeb2769a6bb","sha512":"0e794c6f236780a0fe82fc0cf67ba185d6508493d69f043674f60fdc0227bebe6d4f9b7a1b561cf9f189b30f028d7bcd6b1bd763c2127f3d9aec5e022d335066","ssdeep":"24576:KOn/MZGou2y6QkvalPIQznVg/w0eHaIBR7U5DZH2vwDAi:HML5y6Jv9gV+eHZBUxZWIDAi","tlshash":"062533797ac9213e7b42692246895ef3faf40750c7b2ea83c99bdc9339945cc92d4dc0","first_seen":"2026-01-02T19:26:57.017962Z","last_seen":"2026-01-02T19:26:57.017962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":710,"receive":893,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"hepini.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}