{"report_id":"ec347903-4558-4ace-866d-505d2c871b7b","version":6,"status":"done","tags":[],"date":"2026-05-24T10:40:33Z","url":{"schema":"https","addr":"litl.cc","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"104.21.51.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"litl.cc/","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"title":"litl.cc - Free URL shortener with QR code generation and advanced statistics, plus no registration required!","dom":{"size":16965,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"72690a3381b634f70548b4a00a57dbd7","sha1":"e36ae0ca7bd59e62208e80b0c62932102af91f64","sha256":"8cfabf653d9a24d6bf88e3bf7218708739e8a871eaf7c8fdb1217269b28f1b4d","sha512":"33f504109f9610667ab5fba0eae11f94b54f441acf595ccf8a28c7def8a9b8b375e2f239b793a96209a1d844dd038de85103acac04f91441732c71fc4cd2247e","ssdeep":"384:YjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/S:YFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+Z","tlshash":"a9720e50041744009b835ce223ce7f34fe4e92117242d0b1abfd9b6beedbda6926939d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"litl.cc","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"104.21.51.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-28T10:40:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"o-oo.ooo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"data963.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-05-17T22:52:40.606529Z","alert_count":0,"request_count":7,"received_data":3681938,"sent_data":3330,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.paypal.com","ip":{"addr":"104.18.7.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1999-07-15","domain_rank":1502,"first_seen":"2012-05-21T13:22:43Z","last_seen":"2026-05-18T18:50:11.44115Z","alert_count":0,"request_count":1,"received_data":1496,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"data684.click","ip":{"addr":"134.122.81.220","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2025-07-14","domain_rank":0,"first_seen":"2025-08-24T19:35:21.993212Z","last_seen":"2026-05-24T10:38:41.523983Z","alert_count":0,"request_count":1,"received_data":4492,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.paypalobjects.com","ip":{"addr":"104.19.184.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-05-12","domain_rank":19317,"first_seen":"2012-05-30T06:40:21Z","last_seen":"2026-05-21T15:13:59.736613Z","alert_count":0,"request_count":2,"received_data":3084,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-17T22:48:39.617247Z","alert_count":0,"request_count":1,"received_data":33601,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"a1.awin1.com","ip":{"addr":"52.84.50.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2000-05-19","domain_rank":497548,"first_seen":"2015-08-04T21:25:04Z","last_seen":"2026-05-23T05:50:19.176056Z","alert_count":0,"request_count":2,"received_data":176842,"sent_data":971,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"o-oo.ooo","ip":{"addr":"185.66.201.42","port":443,"asn":201702,"as":"skHosting.eu s.r.o.","country":"Slovakia","country_code":"SK"},"domain_registered":"2015-10-06","domain_rank":1629902,"first_seen":"2017-02-01T17:22:18Z","last_seen":"2026-05-24T10:38:42.270753Z","alert_count":2,"request_count":2,"received_data":212216,"sent_data":818,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-17T22:41:47.231515Z","alert_count":0,"request_count":4,"received_data":76033,"sent_data":2486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":1,"received_data":40962,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"data963.click","ip":{"addr":"134.122.81.220","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2025-05-01","domain_rank":265815,"first_seen":"2025-06-13T08:53:14.732737Z","last_seen":"2026-05-24T10:38:41.410818Z","alert_count":1,"request_count":1,"received_data":4485,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.awin1.com","ip":{"addr":"23.49.29.238","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-19","domain_rank":164043,"first_seen":"2012-07-02T19:46:12Z","last_seen":"2026-05-24T05:49:11.972384Z","alert_count":0,"request_count":3,"received_data":177019,"sent_data":1384,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"litl.cc","ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-12","domain_rank":0,"first_seen":"2021-06-28T12:10:58Z","last_seen":"2026-05-24T10:38:41.28182Z","alert_count":56,"request_count":28,"received_data":357876,"sent_data":14145,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Tablesorter","description":"Flexible client-side table sorting.","website":"https://mottie.github.io/tablesorter/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"litl.cc/js/jquery-3.tablesorter.min.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f3722d1800e24867ea0360d893dff42","sha1":"0e51d2483e517a1af246c2ab263ef97f2c19d955","sha256":"b82d49316e5ed54e43dbcfa65c5c734f3e1248c0b2c2a871408a1da8b1029df5","sha512":"ea1460c7382943db9bb1d3dfd0123b8fa9f1d631e9d12a9a99db93da8cfc5335d6d6db1547464455ec4a435b094c3ee1b74f426662b651e240788f885a7a4e51","ssdeep":"768:TUenkKWJFcTYSQlP0Sc1Ngqzvh+HPB/gr8HthZ2vHYCRv9T2FpgvBr/7c0RTZfF7:T9H9A0uqzvYq0h0vXRJ2FSn7fF+X6f","tlshash":"da13094937d8386302ef60fc88ae2455b4319e25884c55e0fd39e4665cb5ace83bbf6d","size":44371,"data":"","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-31T14:18:07.490219Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/clipboard.min.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b42944934de0a9c5c18706911874c1b2","sha1":"77ba921a768a5e3da6a25e389cfed21d966aa131","sha256":"d60ac05828175a69d3ad94b4714f1292948082cdcfbceca74c1da11955e5de5d","sha512":"047bf9ab606354508a2884238839523b2fcb2cfc6a025dcae318b7d3c8722b21ca9a01f588695f39fa039cbc03fed9477ad8b271c77735a88a6d50a8df76b454","ssdeep":"192:kvR/hkAisAHf4Lys153p17zoWsBqwuLJLHg4LyTByIMOTorA:kvR/vhp3MWsBq9LJFgByVrA","tlshash":"2b22a759b380b5b156e770ad112f424bf372906960aac0d4b639d8f2bdb8ecd1467f38","size":10452,"data":"","first_seen":"2023-04-09T07:13:39Z","last_seen":"2026-06-07T15:19:34.246882Z","times_seen":3467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o-oo.ooo/js/AfPopV3.js?ver=26","fqdn":"o-oo.ooo","domain":"o-oo.ooo","tld":"ooo"},"ip":{"addr":"185.66.201.42","port":443,"asn":201702,"as":"skHosting.eu s.r.o.","country":"Slovakia","country_code":"SK"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b0d4087611b356a0a14bc37543aa5e","sha1":"5e959a76299c94b9d6bbcea08a83068ea3378f09","sha256":"82ac7853c111dde43313fb661e8461ac68ca4f6d639b08ace5fb62ccaf3734a3","sha512":"5ccc1d028e0e401af2bd127676d2a82a1fc76f5c402d7ceba10dbd374604d1f2de55674e6e54dd0e2c9895a7b2e320a67c7cf489c7d54d20fecc3fc03827a5cd","ssdeep":"1536:1RY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCioU6:g8Ovaclc1Hl8Z0mn5pg4oGRZXU6","tlshash":"cca35561710350d630e1d26e166ab3c12d795402f4298da6fc21fb9fcaaed93419faf3","size":105823,"data":"","first_seen":"2025-07-22T04:26:03.713313Z","last_seen":"2026-05-24T10:40:41.913374Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","size":876736,"data":"","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-06T20:36:10.061882Z","times_seen":13692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","size":876736,"data":"","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-06T20:36:10.061882Z","times_seen":13692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cdbcf5e5301cc307d5cbb35300bbc65","sha1":"c6b1f715ad3ba72fa7ae294c4038e8208363dbbd","sha256":"a4353168a99cad47e801d07763311b4dda3eda2504388ff93be0960fb7c7bdc1","sha512":"b161fa0b771d36499c73ae63fde3d6f6762d92bf3ae305a95e4d9881fe0ba6e77bdc058958210b5c91ed550efb49409cb2dc52f246c3e9aeb678fab9bcf2f749","ssdeep":"","tlshash":"add023951df98d3075d803875075d799256160906711f740c1cccd2b6e10dd304b1958","size":217,"data":"","first_seen":"2026-05-24T10:40:41.945123Z","last_seen":"2026-05-24T10:40:41.945123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d1cae91db991ecafed95f3fae6221b7","sha1":"5755a8109f13edce1905045bdc99529349770701","sha256":"a45e0865ec7cf7fd3209bf7da6e180c80891cc99d094751c8cdf66fb67273dc5","sha512":"e40a289c42470e07af984c6d376aeab51c119bc250b1af64d524b31c68db65e2952f19e8f3a734f9908837867f4d6e9f9ec5d64cdec2441ec453e9951a07fdf1","ssdeep":"","tlshash":"0f11c0753b2a5534dad5418b317ee7a93d3260617b02a184c36cdc285d18e8714efcbe","size":902,"data":"","first_seen":"2026-05-24T10:40:41.946934Z","last_seen":"2026-05-24T10:40:41.946934Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-07T17:23:04.592667Z","times_seen":112629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7cdbcf5e5301cc307d5cbb35300bbc65","sha1":"c6b1f715ad3ba72fa7ae294c4038e8208363dbbd","sha256":"a4353168a99cad47e801d07763311b4dda3eda2504388ff93be0960fb7c7bdc1","sha512":"b161fa0b771d36499c73ae63fde3d6f6762d92bf3ae305a95e4d9881fe0ba6e77bdc058958210b5c91ed550efb49409cb2dc52f246c3e9aeb678fab9bcf2f749","ssdeep":"","tlshash":"add023951df98d3075d803875075d799256160906711f740c1cccd2b6e10dd304b1958","size":217,"data":"","first_seen":"2026-05-24T10:40:41.945123Z","last_seen":"2026-05-24T10:40:41.945123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ac9e31eadc983a593629bf9abdb0784","sha1":"c9e6ce4413f957fad25b5547c3bc842895558e5c","sha256":"9e6a1d3c2e03a4ae5cc9333ade3b0b16b63a084f452e508bf4c762379654276b","sha512":"5c9b49129a161620f00abd79a4dc8a878946412c9d6afaddbcbe571480f5f6c6c760e693667bfd3504fe5b880dd33a5bf4a450be764302dcbf94629824917a87","ssdeep":"","tlshash":"4c1154b31a14f0354f7209f1a2fecbb5f462702cf15849e8a505dac42e69dc7ce05595","size":976,"data":"","first_seen":"2026-05-18T02:37:45.085289Z","last_seen":"2026-05-28T11:21:24.13313Z","times_seen":3146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o-oo.ooo/js/AfPopV3.js?ver=26","fqdn":"o-oo.ooo","domain":"o-oo.ooo","tld":"ooo"},"ip":{"addr":"185.66.201.42","port":443,"asn":201702,"as":"skHosting.eu s.r.o.","country":"Slovakia","country_code":"SK"},"introduction_type":"scriptElement","is_inline":false,"md5":"73b0d4087611b356a0a14bc37543aa5e","sha1":"5e959a76299c94b9d6bbcea08a83068ea3378f09","sha256":"82ac7853c111dde43313fb661e8461ac68ca4f6d639b08ace5fb62ccaf3734a3","sha512":"5ccc1d028e0e401af2bd127676d2a82a1fc76f5c402d7ceba10dbd374604d1f2de55674e6e54dd0e2c9895a7b2e320a67c7cf489c7d54d20fecc3fc03827a5cd","ssdeep":"1536:1RY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCioU6:g8Ovaclc1Hl8Z0mn5pg4oGRZXU6","tlshash":"cca35561710350d630e1d26e166ab3c12d795402f4298da6fc21fb9fcaaed93419faf3","size":105823,"data":"","first_seen":"2025-07-22T04:26:03.713313Z","last_seen":"2026-05-24T10:40:41.913374Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/jquery.notifybar.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1a66bb296e8ba1c79f9bf5b820161ae","sha1":"db6b1a4b4b79b9070365de81da5cd3a9c4a91a30","sha256":"e387ee1319f99dd0223452d9ac7cfa7608eb0ada7082037c6b89bd4afce8c345","sha512":"f5e5b5de4393d1778a3cb54051565c8ffb57fbebb3a3c375094b11bcc788536e20c7f0c63ffdbb8f37d70b607cec63365be4bdd4376a1e4aac0eaecd76e5b7ff","ssdeep":"","tlshash":"9e51865d5663f39402327275efff63a5fa3381032848dc25bb6f82440f84662a9c56fa","size":2590,"data":"","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-06-06T11:49:31.392999Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/common.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13dc5e4786aca044408115592aa83661","sha1":"59ecd75058dcda12869e738f2e5b8258453cc446","sha256":"eae5d8f65aada11323b36e70712b0fdf25ad0aa0fc10cb4340a3341f84237a44","sha512":"f8f6557c7b76431fbaf0937625e208fdf1f8abfd70937e94112f3f8dc239c93c5f897bde9f8848c47e569e41bdc581c5b4de844ad3c47f6c2cde691a268ce34f","ssdeep":"96:HKbeAu8DYDlBRhShK2OQP08ZskP4P4lBCClf1wgCybvfSp:Hs+hSI2OQP0nkP4Pa+gCybi","tlshash":"71b1bb68b6ce679859a732b52e2e10c9b67c5632b10de824f55c16e40f10c34d2b7ef5","size":5342,"data":"","first_seen":"2026-02-08T01:23:29.290476Z","last_seen":"2026-05-30T11:39:05.045241Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/jquery.cal.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38851fc575f42bd14836da70d43da8bf","sha1":"c3e9f93c98cb9b353d1ae47144e602a3bb792af8","sha256":"d82c4e9a1aa8627c5d710158c3c8db949079b9ffee2aa4461fd53c95c4a73b29","sha512":"0463118af164fd247e1fb7ee871ffcdaf83ae591721678b7578f1f39682a913011998166b41a40433a7e5eb92524652072371e764c12706f90fae5965d9db5c8","ssdeep":"192:gDY0BtbBeaSAx5QQQQQQDNqEI6yDtgSmGQ3RIBQtBijDiSQEheDSa:gxx5QQQQQQBbI6ku1qQziH8EM","tlshash":"d842e809d35c276f55363192983f26de6d3ec0bb2445d4653caed1982ea883a01bcfe3","size":12729,"data":"","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-27T02:51:25.202812Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8011d852968f98de657b4aba2cc977e0","sha1":"e0a604536e4dafd8b3c1279545b4dc9d2efa2619","sha256":"ec1961553b9a39a5e141c84647688f4bb7262270973fec4e8e05c4caabebe1b7","sha512":"a0c43eec64d40028b01346b389467eff5f68a28aebcc76299ba7cb93a6f7b69f0795d021b3ef0fc766fe0f8d72bf23b5ca04351c1708de997808eefd3c3975d1","ssdeep":"384:kgzdCEgujd51StTw3GxOw5zEmV8YnWGn74n8Rx66a5qEPX3HmF:kgdhXd51StT5s8HnJn748zO8Ef3HmF","tlshash":"f2a2a4c9bdc9787cc7a6b0ff502b20c6757ebda42809071dd625a3a0fd21708967ae5c","size":22775,"data":"","first_seen":"2026-05-24T10:40:41.892454Z","last_seen":"2026-05-24T11:10:46.54183Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","size":33228,"data":"","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-06-07T17:26:33.864535Z","times_seen":29956,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d8d82947ecf8126036cfaacee71df6d","sha1":"1d7b5fb877763c5d4035eb87efe8538f187f0f58","sha256":"93d00d106785dbe7055822904eaad09d8e83ab0e63d052ddc18c23bdc90b33f9","sha512":"55066ae2dcb5266d159ace83e3401118d2aea4f26a49b1a3b7b6d34b22ea043aacbbd54271371caeb54456e88e4aa5f1e238ec96f9ab44312585812da79b9ef5","ssdeep":"384:+YqASqWxjlHH2VysrUN2Wq3pJyAqSB3BE8L38J59wgrxGql1ekeAMQo0Ye26:+kSdlHWVyAUAyAVhLsdn7ekZMB0o6","tlshash":"4db2b7c9bdc9342c47a774ab016b70c6f5ae9c906c191b2cdb3097f0f952b09567ba8c","size":23664,"data":"","first_seen":"2026-05-24T10:34:15.231814Z","last_seen":"2026-05-24T11:13:34.69251Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/tablesorte.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a68359d01c5d4275b0bd6f575963409","sha1":"e60fb537c5070ad641b174a95058b57120b2b3e2","sha256":"18bd63b43a39c05862245b57321ef9b4328b30c540069af58ab397a5661608d7","sha512":"71a5bceec70272cc5bc345c8a9c8920b2a42b04319310d2a46c26aefdc41f28e021e9d874a174072bfbef1c2e50380bf6d998bbb2246a6cc2582d3a0aece6d0a","ssdeep":"","tlshash":"d931541df30db1270039e2b6009d5ca571b4ad8b642cb93679444990317ea5dd637f5d","size":1474,"data":"","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-27T02:51:25.173789Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50f05c34bb52da46535f5fd415446d17","sha1":"e6a98f6677f3fff54ca72fc69d4326a2bd4f5410","sha256":"2708560c0f5b244e4a2f2cf1320b5687c7262d940ca1eab558b6f8bf98595dbe","sha512":"91ddfe06d5d5f11d0b6136eedb1202362f4287669d081073860031f8602ecc39572027d2e0ced73f76d9f161911088ab46d38e5a8a7b1b9d6e16303f8f45a23c","ssdeep":"","tlshash":"0111bab2f64d6460ac262523452bc7c99a3f9118ed42ed4a6d1494646ee8cec022ef2c","size":915,"data":"","first_seen":"2025-11-03T16:27:32.109714Z","last_seen":"2026-05-24T10:40:41.948831Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","size":876736,"data":"","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-06T20:36:10.061882Z","times_seen":13692,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T17:34:42.691592Z","times_seen":363266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data963.click/3e1677022f8a3dfa70da/946fa3a25f/?placementName=default","fqdn":"data963.click","domain":"data963.click","tld":"click"},"ip":{"addr":"134.122.81.220","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"79352ea657de27dee5578192c4dcb12d","sha1":"166aa6482540d2af8a1dfe851828bebd3eac30fb","sha256":"8dc2f48a0b997e6497545dd946600659dc5553a12a5472d517057c05700c59ea","sha512":"9cea85bc09b7fede6b36e8d37b2f3c26619654cadb9cecdbcbe619faf0a67ee4c626f64fddacb731d0e99f1a3187c40bd19c7d8f91ee1fc86cd09f2016c01ca3","ssdeep":"","tlshash":"6c8133f80fd2a139e1e732959c6ea12c3571c133368994097c0c95243f60a7789aef9e","size":4036,"data":"","first_seen":"2026-05-24T10:40:41.938916Z","last_seen":"2026-05-24T10:40:41.938916Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/jquery-3.5.1.min.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-07T17:34:04.007407Z","times_seen":249464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T17:29:18.405415Z","times_seen":464007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026bft=0dAFcWeA6Q6P9ARqJ6lg6l1BxoqjGtIX1YDTM8PQp642CYGK7mCwUKkJX7werfhQTfnsocyR4fabmxjBkM5jSraglx6Jf8p3AaCA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-06-07T17:29:18.405415Z","times_seen":464007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e3b0bb5130c47c78f7beb75a4e6b814","sha1":"02b8f70a275ce0b68179cb1018a5789266ed28df","sha256":"a1274eaba200363c0e1da0e9095be1d40bb3a1c8bc06f6659dbdb4e55d73749e","sha512":"58c2a670fadb6f1e4748f2d27b95e2b77a2fe104ab46df323e746f09adf3a16891645a62c9a8646e6f191dff0475bd1aab8c287859fffc1cc043a1bfc17f9c7e","ssdeep":"768:9/dYTiMNk7Ju8a+GmCRBQq5vXpLedJWP4m3uGUNPXKOJ1yieb:9VYTiMMFCNeHWPHuGUaI1Eb","tlshash":"1af2bf4d9d2634fbdead4bd217e077cc57bd411e598a246c30ba10830b969cbb48b9ec","size":35864,"data":"","first_seen":"2026-05-24T10:40:41.951109Z","last_seen":"2026-05-24T10:40:41.951109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/insert.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a62d3b1bbdbb1f5045dacb1c7408f88","sha1":"090de3169cea1e51a656a32edc2848e16d332f16","sha256":"7fb5c8a08950848e8b47099f993858e46757354de159f5fb2a37e93e406a1f84","sha512":"83c03e066ff9a667064005d51b718122c6f929c3f92deceb86e34e57733f1629f7340a371b7df7a791af44d2fa867bdbd10e982fa55aec16b97c42b8545815d7","ssdeep":"192:AWodWZrfQ/tnkyjKbzvlzVQJALO6nHPBfvxlHNJy:HQWZrfKtnkmJ/6nNvxlHNI","tlshash":"1102b815f3aa3f695b3b24b8c97bd15ab774a40320058828fc6da4c0ef91971b11fd2b","size":8662,"data":"","first_seen":"2026-03-01T03:04:27.459017Z","last_seen":"2026-05-27T02:51:25.200832Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18d8bd7557d35a867ae17ba7f0fc62ff","sha1":"aff211bdf0e48ba64ec07670d87ca060382452ea","sha256":"5cfe7717d7acf444261f4269cf9dd431f154664a019fe10511317cc27c60895c","sha512":"b6fab81bca7891769748d7f56cda28bf489e54f2cbe9cb5f82552c6de09f34a7debad561afd7b9b57dc4795eea553cb5e7ec039e4f8498342ffb9e17d6387a3f","ssdeep":"","tlshash":"7bb0126b0c502f86158014e303497a419192202fd820d4107c4e13800f80015490c0c0","size":94,"data":"","first_seen":"2026-05-16T10:48:13.241546Z","last_seen":"2026-05-24T10:40:41.953568Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/user/plugins/aiaraldea-qr-google-charts-a27ab72/inline-qrcode.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d905ca2aa7bf5bb8c046c2a6d7dc9dc7","sha1":"4ecc0dfcb3f8a5c1bf72b23eb7613dbb00643b03","sha256":"e92a33302979cbf2a6b72dd7fd4998c4da293f972a6e1f74077ef2ada7491fb0","sha512":"2007252863d1682afb639684a0ec5cbac5bf8d22002ea4e12176bd56b9841fee00a8209b09ca215457f8bfe35b339a7bad014d6d0777fe7df8b2e0d98cf63fb2","ssdeep":"","tlshash":"f001fe14fda14d0d932b42b07d4b102d635ea02b06568e647eaca35ceb1662100afb7d","size":685,"data":"","first_seen":"2025-11-03T16:27:32.052282Z","last_seen":"2026-05-24T10:40:41.930556Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/share.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"625e1fb9d5e74ee7bf404c757921deca","sha1":"c6ea5cb22a85909eb43b869f529d2194ec44e4aa","sha256":"dc2705487d7260c4b169954babd647da21098a586337faf627f9a07a05a9e236","sha512":"6e73a54b298f1d1e5f3040dee2fb6e84e285ac9fd3a765d5fe3c5096585bcbb5a258aa34ecc0d0e7293de09c96e9bc37b753d8c0747c946c72370d88cefa6032","ssdeep":"","tlshash":"d0214419f1edf6a5e23b21a17e3f7854632d245aa89ddc04fc3d8a841fc0655642bdc8","size":1421,"data":"","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-30T11:39:05.070429Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a81831e8f462ab097f40805ad6e8c1b7","sha1":"e25ed7f09f8a23ef8948832d9785ba88a942cf8f","sha256":"7357f580ca4d36a58ada83181690574dfad7a79ee55b9eecc3cfd96082405fee","sha512":"4b40884a46ffd7e3231698ddd479913557b5f321b867943eedbc2d8c53b406c8c7ed70cf008fc4827e54fe92f5c3bb3d8a2f5875c6f4089c95288468295833ba","ssdeep":"","tlshash":"00d05b293652ae1605d3116d4c5e0f11b8ac00712788905f7c65d1d724a88a571db158","size":246,"data":"","first_seen":"2025-03-05T19:03:58.502869Z","last_seen":"2026-05-27T02:51:25.208239Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data684.click/81ece301781a879b0cc9/3c56ac5b36/?placementName=default","fqdn":"data684.click","domain":"data684.click","tld":"click"},"ip":{"addr":"134.122.81.220","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bfd0985ceaa2194ce8a5e4fd0b298ef","sha1":"4f5c26ff61628b83581b4496f2133fb452f0a1d7","sha256":"2f6d069219d69a75dea47445bf62fe46dbfbe3b3d55b8ede3eca300e833941fb","sha512":"117623a7cd14860e22c2a18f31136167bcf163975283bf8b35cb95227a2992dca4bddd2be6125a75f932cf7003116c5e85b80c65c0221228677c8ed18453b24f","ssdeep":"","tlshash":"088144f84fd2e539e1e732959c6ea12c3571c133368598097c0c85643f60a7789aef9e","size":4043,"data":"","first_seen":"2026-05-24T10:40:41.936801Z","last_seen":"2026-05-24T10:40:41.936801Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026bft=0dAFcWeA6Q6P9ARqJ6lg6l1BxoqjGtIX1YDTM8PQp642CYGK7mCwUKkJX7werfhQTfnsocyR4fabmxjBkM5jSraglx6Jf8p3AaCA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"16576426bdbb2201b41821e5cb48ae28","sha1":"c7d9c3e2ea01f82b100ff005b1192aacb0fc678c","sha256":"a357a13330fb34cefd0508941f6c8e54ed3a5b42ab30bf1c9a45fbd9f97e46d6","sha512":"5825ffd73e58772e089d409441e98ff83108d12d51afc30b70cd678d1c551726f7534d9cfbba4a4d6fc91b7d7ccf3ac0d4776dfe692b6558a56b51f2f7470226","ssdeep":"","tlshash":"add0a9a212021df20c24ac720926005a1c8a0a23a02697f07ace3e05afb0e007d00ab8","size":219,"data":"","first_seen":"2025-11-03T16:27:32.114259Z","last_seen":"2026-05-24T10:40:41.955087Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.awin1.com/cshow.php?s=4430694\u0026v=83571\u0026q=574083\u0026r=2194957","fqdn":"www.awin1.com","domain":"awin1.com","tld":"com"},"ip":{"addr":"23.49.29.238","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.awin1.com","organization":"Awin AG"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:B5:D8:B9:18:F9:16:53:C0:DB:E8:19:C4:CC:7A:C2:BD:C4:38:0B","sha256":"97:EA:AF:7C:93:A9:47:3B:CB:87:B2:C2:8D:D5:EC:14:26:FC:7A:83:D2:3E:82:14:10:4C:4C:09:2E:C0:39:83"}}},"request":{"raw":"GET /cshow.php?s=4430694\u0026v=83571\u0026q=574083\u0026r=2194957 HTTP/1.1\r\nHost: www.awin1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nContent-Length: 0\r\nLocation: https://static.shareasale.com/image/156155/Maonologojpg-150-50.jpg\r\nNode: Helix\r\nP3P: policyref=\"http://www.awin1.com/w3c/p3p.xml\", CP=\"NOI NID CURa ADMa PSAa HISa OUR IND UNI PUR COM NAV\"\r\nDate: Sun, 24 May 2026 10:40:11 GMT\r\nConnection: keep-alive\r\nSet-Cookie: AWSESS=574083:4430694;domain=.awin1.com;path=/;Secure;SameSite=None\r\nStrict-Transport-Security: max-age=86400\r\nAwin-Akamai-Rule-Set: default\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":56,"dns":36,"connect":1,"send":0,"wait":62,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/en_US/i/btn/btn_donate_SM.gif","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"104.19.184.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /en_US/i/btn/btn_donate_SM.gif HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1447\r\ncf-ray: a00bae49fe091a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 985705\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: \"cfvj6KCspLlVNqLJuGuN1TuJcSK1VnHOdKHxTvMGKADQ:5d5637bd-5a7\"\r\nlast-modified: Fri, 16 Aug 2019 04:57:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-resized: internal=ok/h q=0 n=15+0 c=0+0 v=2026.5.2 l=1447 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(782;u=4;i 1123;u=5;i=?0 1445;u=6;i=?0)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1447,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 74 x 21","md5":"d4461620aae91a1be22d8c8453b274da","sha1":"59f7c705afb5f5f8fe3a9fb29a4a3f85b51c2cc1","sha256":"b14234740394e59287bce1f6f3a594a8f221b382552b35658f1ef15d16ee662b","sha512":"9d07121d7408758b94f1635b73bdb947a15d8f65181a7f917eade31060571b07e0bbf878b67770c6d2bbaf0ffb183704f32589122ebcbfed553a09d1c153fb34","ssdeep":"","tlshash":"73310866145075cfc906d0309f200cd0ebe401fe83d8ca42bb0ed69270b107de98099d","first_seen":"2023-05-03T15:35:37Z","last_seen":"2026-06-01T15:35:14.243024Z","times_seen":78,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":11,"dns":3,"connect":1,"send":0,"wait":29,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://litl.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.5.0\"\r\nlast-modified: Thu, 07 May 2026 16:44:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a00bae4a18b5783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33228,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33228), with no line terminators","md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-06-07T17:26:33.864535Z","times_seen":29956,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":33,"dns":18,"connect":1,"send":0,"wait":19,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/jquery-3.tablesorter.min.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/jquery-3.tablesorter.min.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 21:17:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"ad53-69631eca-fb6572c88e74afa1;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13773\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 393743\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAraPtkfa%2BiYoxH8RY7cnLWGiHn108%2BDt9gcwVgpMSxwZIp18A%2FeaTyZ4KyRh97STiZ8SudIm%2FtM5UoY4S6pCE77qfP4RjA8k17VLdlEvj9jJw5FdIQ9v%2FA5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4abd725ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44371,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44303), with no line terminators","md5":"0f3722d1800e24867ea0360d893dff42","sha1":"0e51d2483e517a1af246c2ab263ef97f2c19d955","sha256":"b82d49316e5ed54e43dbcfa65c5c734f3e1248c0b2c2a871408a1da8b1029df5","sha512":"ea1460c7382943db9bb1d3dfd0123b8fa9f1d631e9d12a9a99db93da8cfc5335d6d6db1547464455ec4a435b094c3ee1b74f426662b651e240788f885a7a4e51","ssdeep":"768:TUenkKWJFcTYSQlP0Sc1Ngqzvh+HPB/gr8HthZ2vHYCRv9T2FpgvBr/7c0RTZfF7:T9H9A0uqzvYq0h0vXRJ2FSn7fF+X6f","tlshash":"da13094937d8386302ef60fc88ae2455b4319e25884c55e0fd39e4665cb5ace83bbf6d","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-31T14:18:07.490219Z","times_seen":121,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a1.awin1.com/ads/awin/100833/img1-1768362334651.png","fqdn":"a1.awin1.com","domain":"awin1.com","tld":"com"},"ip":{"addr":"52.84.50.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a1.awin1.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:13:4B:E2:CB:82:BD:3C:2B:E2:BF:82:3A:DC:0C:86:7F:09:E2:49","sha256":"71:B1:C2:98:E7:8F:6B:2E:66:86:D9:2C:88:19:EA:8C:33:C7:76:F9:E5:D4:15:63:61:93:69:4F:1E:63:22:28"}}},"request":{"raw":"GET /ads/awin/100833/img1-1768362334651.png HTTP/1.1\r\nHost: a1.awin1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://litl.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSESS=526216:4674506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 146254\r\nlast-modified: Wed, 14 Jan 2026 03:45:35 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5MqHx_8h6NDiGU5yXcPFyCAfIpTnJON0\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 24 May 2026 10:38:12 GMT\r\netag: \"d2ae21327e015c91a5c598dfc3561f34\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8I428IP0kqH80LqENdQ0-3WgO5zSg-yYGQzltTcpgAsjRyN3lSbt4w==\r\nage: 74300\r\ncache-control: max-age=43200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":146254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced","md5":"d2ae21327e015c91a5c598dfc3561f34","sha1":"d38dcdfe8f2edcdf97cf8403810ed3ce99a0c89a","sha256":"f5beb63e2676c694c06c6e20260431a33c333e8e584c227492458dcf63901f2e","sha512":"4c119222782e29311693d9ee776059120a5a1a113f3304f03507bad45a1e5f64603755650f7e3bbe203270e2f18e7b0d4091eaf113ff0720bec7a936c519eeda","ssdeep":"3072:r3sKMV5OC9LcJxkQ0ZVmPzCf39xwOEQ7IlhKSJBLZrm+b/:7szVVqkQ0PmrytAPhzJRM+j","tlshash":"3ae313d74a2302357359084307c868abcf5ddca1b3b578c366b68884be5738396b76b7","first_seen":"2026-05-16T10:48:13.202169Z","last_seen":"2026-05-24T10:40:41.890479Z","times_seen":3,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":26,"dns":39,"connect":1,"send":0,"wait":4,"receive":6,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js? HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=485OonNxJoRvKNrjuhZVpNRo6kHMKpDTztduHXtTOdE-1779619212-1.2.1.1-5l0OCNLghgWJ5W7WpLJkFwKSE9_kvgl2DLn7e4OMFiPAg9kvbCWSZWFkgnmNsBwk7XMOEYG20w0rJrMX6MO_slP5nes06Vq_xm781tfb9J0pwKLBTDtjnJh81ImGKfE3DjJ4GLqzx9YmMBuCoZTiUafVDRS_ny1O5PdkMDis1SGQL_x30SFC.Y6qektLjnfMI9v5l6IgR9yQAQqgs89XPdJdjawExulnSS7QeGYJXfqgdUfsUiySyC2ImKqDoMMcR3jTwGBvhSoOr2llbkuefHHAFPGa8NtPf92qo.28kw6W6InBjfXZU9nS8J.iAL0hThnD3iWJHQUd1jGJoFZWjg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a00bae4d4e0d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22775,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22775), with no line terminators","md5":"8011d852968f98de657b4aba2cc977e0","sha1":"e0a604536e4dafd8b3c1279545b4dc9d2efa2619","sha256":"ec1961553b9a39a5e141c84647688f4bb7262270973fec4e8e05c4caabebe1b7","sha512":"a0c43eec64d40028b01346b389467eff5f68a28aebcc76299ba7cb93a6f7b69f0795d021b3ef0fc766fe0f8d72bf23b5ca04351c1708de997808eefd3c3975d1","ssdeep":"384:kgzdCEgujd51StTw3GxOw5zEmV8YnWGn74n8Rx66a5qEPX3HmF:kgdhXd51StT5s8HnJn748zO8Ef3HmF","tlshash":"f2a2a4c9bdc9787cc7a6b0ff502b20c6757ebda42809071dd625a3a0fd21708967ae5c","first_seen":"2026-05-24T10:40:41.892454Z","last_seen":"2026-05-24T11:10:46.54183Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/common.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/common.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 30 May 2026 10:53:35 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"14de-69631eca-cfb14284f1d5612c;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2055\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 85596\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgs5B1A%2B%2BdQ%2BrU85hkd%2FIvZngTCMV2lWT11yuMC%2FMKCLgAJu8umPBj50hIlbXBYxLDHyAZNCGg%2BVKCaraW4ZOEyZtq7yaKWYBldnU6a10AMYN%2B3KcudHfHvR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4abd745ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5342,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"13dc5e4786aca044408115592aa83661","sha1":"59ecd75058dcda12869e738f2e5b8258453cc446","sha256":"eae5d8f65aada11323b36e70712b0fdf25ad0aa0fc10cb4340a3341f84237a44","sha512":"f8f6557c7b76431fbaf0937625e208fdf1f8abfd70937e94112f3f8dc239c93c5f897bde9f8848c47e569e41bdc581c5b4de844ad3c47f6c2cde691a268ce34f","ssdeep":"96:HKbeAu8DYDlBRhShK2OQP08ZskP4P4lBCClf1wgCybvfSp:Hs+hSI2OQP0nkP4Pa+gCybi","tlshash":"71b1bb68b6ce679859a732b52e2e10c9b67c5632b10de824f55c16e40f10c34d2b7ef5","first_seen":"2026-02-08T01:23:29.290476Z","last_seen":"2026-05-30T11:39:05.045241Z","times_seen":11,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/css/style.css?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /css/style.css?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 28 May 2026 02:15:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"2001-69631eca-3738d73e52c69365;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2119\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 289472\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbmx27vq6Wjb%2BQqD1g9nW5SWXZGqwq1dtRpFLTv83jwhT8J%2B4zSVZT1qcQIB0NVxiVtLZheAMIR7LA4qn49rOVmBIW%2FQVdRP7M6QsNAulTjO%2FhxCdFqLuwLt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae49bd445ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8193,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d4fcba177338c9f5400b9a20fd68158a","sha1":"8f2c2504f9315fb686299d417b1bccaaa63549bf","sha256":"dd6f87a259a830a141dbbf49580d9f5c743e584d4b83477b7f3e4b7eee940271","sha512":"15d2749a3cc45f395727e3fa4f7f8b2f308914bf9af98c73bb75d065e9b2e0a7115dd458e459d3064a4358fee232a286aa36ea72c0ea044867fc4cb2872434cd","ssdeep":"96:U4Ju8iJst+KGDJ6JJ8rJJb5xsxMEhZ0Uh5oe8S7gJuMDbe7V4w0YHC/qz/QumJlD:lJqviSHVxsxJH/vO1iV40hmb","tlshash":"d9f196a3798a298b351bc1d6fe1699c4721e905bad9e9f297efd7478df840a40133308","first_seen":"2026-02-08T01:23:29.30396Z","last_seen":"2026-05-30T11:39:05.039685Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/css/tablesorter.css?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /css/tablesorter.css?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 22:37:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"9bb-69631eca-cc96f15a0c8c5bc3;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 656\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 388976\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9S51y57DoODRprEeCmkkxyfT69jNKfvL%2B19cxxmqiISAVr2OeA89CpvbEc1yj94cCbMMGS0lMzB13kGGw%2B3fF6qzK%2Bay4cFZtOkaSpnJQuQqiD8UxoXIHBvw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae49bd455ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2491,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9f8e2d99f8a06230ea8829ecd28a85da","sha1":"d80f5f37640e924f62fd1b855f50e9944c1b0ec9","sha256":"5d160067f702bf8b53e2609429212d5a5adc351c0ffea38da77e6f47f6f41a6d","sha512":"a0759fc86adb660b82fc9412b3a1a93b95444f1ec6599adf7ac842a01a9b7455f324d9d29474a50d7992951853ee2028ad8fe0e00169539054fda8eec4cf31c0","ssdeep":"","tlshash":"f45123779391b88bb516e0b34b319ba4192e402e9a1f9f35701e2df83647c968737da0","first_seen":"2023-05-23T15:55:47Z","last_seen":"2026-05-27T02:51:25.207259Z","times_seen":57,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/images/favicon.svg","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /images/favicon.svg HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/css/style.css?v=1.10.3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 20:01:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"199e-69631eca-cf83dfd0e0b9cc46;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1948\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 398328\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAZ6uiJyWP3dgJcwltGKhsUyEmxMRO%2BQJlVGM0PDMLXO82BXKjpdBRcJDwb0MjhNYG1JVyog4YDe0tUJsFn9dVhX8ROEax6Dtu40hD9El19pVku0bBgWzhMs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4a1d605ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4c05ab7236d050bca68906e68f98ac1","sha1":"df213cf73e426ae0bbcb85d61fdccd7de5f38b01","sha256":"da81854b677df36c965d6d49e6d3a9fcc5016ece5a0f42781b9a2855bb1f8058","sha512":"4fc10cb831f78d187e1c0a0ad25bf388b05ccd49a46539f85eb7b38678d6947d865948014ff41be43c912df8506ce5646d867b21a91806453e73e3ce25b75ff2","ssdeep":"96:VkoIanLDRX79+yhYfLJoMLHV3XDwLBB0PTbBTr3EDcRv8+H9H1v8Cbma:Vk8IyuVHkLmTbeQTr","tlshash":"5ed18141a39d90fc626f4a245ce774021b1e68b33311290a7dcd6870df591e6e62beca","first_seen":"2023-05-22T11:52:16Z","last_seen":"2026-05-30T11:39:05.030151Z","times_seen":93,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/insert.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/insert.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 23:23:50 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"21d6-69631eca-5739edd84452b7b0;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2418\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 386181\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FV0uGWUCpo%2B2YUtxu0srAxcLJuMoiCY75D%2F7treWs%2BxGijDcijlB7CByNbpA%2F99ORSve35J3CCqYCmsZxAsKke9qQm2H5Hy4VIjH0L8ZSduvAVkS8b8jO9dM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4abd705ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8662,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"0a62d3b1bbdbb1f5045dacb1c7408f88","sha1":"090de3169cea1e51a656a32edc2848e16d332f16","sha256":"7fb5c8a08950848e8b47099f993858e46757354de159f5fb2a37e93e406a1f84","sha512":"83c03e066ff9a667064005d51b718122c6f929c3f92deceb86e34e57733f1629f7340a371b7df7a791af44d2fa867bdbd10e982fa55aec16b97c42b8545815d7","ssdeep":"192:AWodWZrfQ/tnkyjKbzvlzVQJALO6nHPBfvxlHNJy:HQWZrfKtnkmJ/6nNvxlHNI","tlshash":"1102b815f3aa3f695b3b24b8c97bd15ab774a40320058828fc6da4c0ef91971b11fd2b","first_seen":"2026-03-01T03:04:27.459017Z","last_seen":"2026-05-27T02:51:25.200832Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/tablesorte.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/tablesorte.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 04:01:35 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"5c2-69631eca-d5b3c78cce9a842b;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 682\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 455916\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sX0CCNkg5O6qzLOV%2BrcQr1K%2FsuWBxfI6%2BOABgJs1g7fRhLyBbxvy0vh03CaB%2B9vRXFWio%2FiZuCCvyan3f6NOWbJcifmt1fAJ9E9Kqzw7bdICrYGWFTMPBlcT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4abd715ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1474,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"3a68359d01c5d4275b0bd6f575963409","sha1":"e60fb537c5070ad641b174a95058b57120b2b3e2","sha256":"18bd63b43a39c05862245b57321ef9b4328b30c540069af58ab397a5661608d7","sha512":"71a5bceec70272cc5bc345c8a9c8920b2a42b04319310d2a46c26aefdc41f28e021e9d874a174072bfbef1c2e50380bf6d998bbb2246a6cc2582d3a0aece6d0a","ssdeep":"","tlshash":"d931541df30db1270039e2b6009d5ca571b4ad8b642cb93679444990317ea5dd637f5d","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-27T02:51:25.173789Z","times_seen":64,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a00bae4aed7d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23664,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js? HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a00bae4b6d8f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23664,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (23664), with no line terminators","md5":"7d8d82947ecf8126036cfaacee71df6d","sha1":"1d7b5fb877763c5d4035eb87efe8538f187f0f58","sha256":"93d00d106785dbe7055822904eaad09d8e83ab0e63d052ddc18c23bdc90b33f9","sha512":"55066ae2dcb5266d159ace83e3401118d2aea4f26a49b1a3b7b6d34b22ea043aacbbd54271371caeb54456e88e4aa5f1e238ec96f9ab44312585812da79b9ef5","ssdeep":"384:+YqASqWxjlHH2VysrUN2Wq3pJyAqSB3BE8L38J59wgrxGql1ekeAMQo0Ye26:+kSdlHWVyAUAyAVhLsdn7ekZMB0o6","tlshash":"4db2b7c9bdc9342c47a774ab016b70c6f5ae9c906c191b2cdb3097f0f952b09567ba8c","first_seen":"2026-05-24T10:34:15.231814Z","last_seen":"2026-05-24T11:13:34.69251Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.awin1.com/cshow.php?s=4658901\u0026v=100833\u0026q=550406\u0026r=2194957","fqdn":"www.awin1.com","domain":"awin1.com","tld":"com"},"ip":{"addr":"23.49.29.238","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.awin1.com","organization":"Awin AG"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:B5:D8:B9:18:F9:16:53:C0:DB:E8:19:C4:CC:7A:C2:BD:C4:38:0B","sha256":"97:EA:AF:7C:93:A9:47:3B:CB:87:B2:C2:8D:D5:EC:14:26:FC:7A:83:D2:3E:82:14:10:4C:4C:09:2E:C0:39:83"}}},"request":{"raw":"GET /cshow.php?s=4658901\u0026v=100833\u0026q=550406\u0026r=2194957 HTTP/1.1\r\nHost: www.awin1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nContent-Length: 0\r\nLocation: https://a1.awin1.com/ads/awin/100833/img1-1768362334651.png\r\nNode: Helix\r\nP3P: policyref=\"http://www.awin1.com/w3c/p3p.xml\", CP=\"NOI NID CURa ADMa PSAa HISa OUR IND UNI PUR COM NAV\"\r\nDate: Sun, 24 May 2026 10:40:11 GMT\r\nConnection: keep-alive\r\nSet-Cookie: AWSESS=550406:4658901;domain=.awin1.com;path=/;Secure;SameSite=None\r\nStrict-Transport-Security: max-age=86400\r\nAwin-Akamai-Rule-Set: default\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146254,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":62,"dns":35,"connect":1,"send":0,"wait":64,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/jquery.cal.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/jquery.cal.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 21:17:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"31b9-69631eca-59a65a73e54c2f56;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3602\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 393743\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYbjtCEDnzxdPhrwv8xR0ZdRQeMLUIML%2FimoEInTZKis%2FkT32CS2wP5H5DtTl30Qzod%2BvSfMnQDRyVYZ%2FaJxAX293jZvIZjbqr9dtVJVAtp1V7Qr1JUj5alZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4aad6d5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12729,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"38851fc575f42bd14836da70d43da8bf","sha1":"c3e9f93c98cb9b353d1ae47144e602a3bb792af8","sha256":"d82c4e9a1aa8627c5d710158c3c8db949079b9ffee2aa4461fd53c95c4a73b29","sha512":"0463118af164fd247e1fb7ee871ffcdaf83ae591721678b7578f1f39682a913011998166b41a40433a7e5eb92524652072371e764c12706f90fae5965d9db5c8","ssdeep":"192:gDY0BtbBeaSAx5QQQQQQDNqEI6yDtgSmGQ3RIBQtBijDiSQEheDSa:gxx5QQQQQQBbI6ku1qQziH8EM","tlshash":"d842e809d35c276f55363192983f26de6d3ec0bb2445d4653caed1982ea883a01bcfe3","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-27T02:51:25.202812Z","times_seen":76,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/jquery-3.5.1.min.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 21:17:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"15d84-69631eca-91db593eeabf3033;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30026\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 393743\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B5CRtU22hhb1oTasoPHsJjapkUHS3j%2FGXc12hRmzc9RIRlE5ZRepqYfawfxGS9jBttBEmfksqLyIarr7CvIZPB%2Fw%2FFMoNGzTmJ72caS0qu8KfNeIy%2Bs70eZP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4abd765ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-06-07T17:34:04.007407Z","times_seen":249464,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o-oo.ooo/js/AfPopV3.js?ver=26","fqdn":"o-oo.ooo","domain":"o-oo.ooo","tld":"ooo"},"ip":{"addr":"185.66.201.42","port":443,"asn":201702,"as":"skHosting.eu s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"o-oo.ooo","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 10:47:43 GMT","end":"Tue, 11 Aug 2026 10:47:42 GMT"},"fingerprint":{"sha1":"52:63:47:5B:BB:3B:0A:1E:D4:BF:0C:65:3B:DA:C4:A2:3C:62:FC:07","sha256":"DC:A3:1F:15:B7:D2:72:CD:E8:F6:4A:9A:F8:C7:63:80:E4:F4:32:1E:FB:18:47:77:F3:6F:65:DC:8F:F5:8A:F5"}}},"request":{"raw":"GET /js/AfPopV3.js?ver=26 HTTP/1.1\r\nHost: o-oo.ooo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 17 Jul 2025 18:48:59 GMT\r\netag: W/\"6879459b-19d5f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105823,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"73b0d4087611b356a0a14bc37543aa5e","sha1":"5e959a76299c94b9d6bbcea08a83068ea3378f09","sha256":"82ac7853c111dde43313fb661e8461ac68ca4f6d639b08ace5fb62ccaf3734a3","sha512":"5ccc1d028e0e401af2bd127676d2a82a1fc76f5c402d7ceba10dbd374604d1f2de55674e6e54dd0e2c9895a7b2e320a67c7cf489c7d54d20fecc3fc03827a5cd","ssdeep":"1536:1RY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCioU6:g8Ovaclc1Hl8Z0mn5pg4oGRZXU6","tlshash":"cca35561710350d630e1d26e166ab3c12d795402f4298da6fc21fb9fcaaed93419faf3","first_seen":"2025-07-22T04:26:03.713313Z","last_seen":"2026-05-24T10:40:41.913374Z","times_seen":88,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":68,"dns":1,"connect":33,"send":0,"wait":33,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"o-oo.ooo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://litl.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 373621\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 May 2026 23:47:54 GMT\r\nexpires: Tue, 18 May 2027 23:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471138\r\nlast-modified: Sun, 10 May 2026 16:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876736,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-06T20:36:10.061882Z","times_seen":13692,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":117,"dns":9,"connect":29,"send":0,"wait":34,"receive":120,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 24 May 2026 10:40:13 GMT\r\ncontent-security-policy: script-src 'nonce-nJbQLluUCMzK-1LOMQbrog' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54253,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (35858)","md5":"6ddbc6fb641b52a7337fb174232497db","sha1":"2d3b2b766d2ae12ffb6e37c57ab069aceadca880","sha256":"494f3aace5f07c0f924c64eb96e80bbb3c15f8fc407f2d6a089c2095f0edbcc3","sha512":"5b73f55842a5170d6f809445d0a21298d6787ecc474b8196d3f0dbce1bbf07aacdaf47c81e175ea99a6eaa3f15f2f0291f19433739ee79a6cc67e55104149191","ssdeep":"768:UFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/dPQyR/dYTiMNk7Ju8a+GmCRBQq5vXp4:y+k2PJRVYTiMMFCNeHWPHuGUaI1Ey","tlshash":"82336b4008171041db874de223c97f78fe5e8219624690b877fd5257aedbc97a2aa3ec","first_seen":"2026-05-24T10:40:41.915473Z","last_seen":"2026-05-24T10:40:41.915473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026bft=0dAFcWeA6Q6P9ARqJ6lg6l1BxoqjGtIX1YDTM8PQp642CYGK7mCwUKkJX7werfhQTfnsocyR4fabmxjBkM5jSraglx6Jf8p3AaCA","date":"2026-05-24T10:40:14.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 373621\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 May 2026 23:47:54 GMT\r\nexpires: Tue, 18 May 2027 23:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471140\r\nlast-modified: Sun, 10 May 2026 16:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876736,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-06T20:36:10.061882Z","times_seen":13692,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/css/cal.css?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /css/cal.css?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 29 May 2026 07:35:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"3ab-69631eca-a48fefde6a7dcbec;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 325\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 183897\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JReXD2usyIcgqQNpKIQ%2FZngH6YWYHco8ShacYXaU35AOL4%2B3tPv7MSx%2F8R0S%2BRWHxQxXSwA%2Fufh85%2BA1O3%2F5iS2LsVxlP%2FdtjlM6A7ywOfT7nq9%2BpyQmZyWw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae49bd475ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":939,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9fd5fa3c6434d812669990964e6ead1f","sha1":"0bafc216e0430150ce5a2a4fa50a8d5657cb370f","sha256":"7b42a2d6fd64a8868d9fe08bdab5033d0403da96a9960b7cb36a99d07c2f383c","sha512":"5c9eb6361297898d88a68cb9ee8c1b429fb1fffdce36c66ad64041c337af33db2d1d1152db842bb337666286400f4da50aab809e90743a1e44366fd76853ea6d","ssdeep":"","tlshash":"6611bd1f12961e0f707b65a27101ffa37d2e410ea086dd7c39b93810926c8611add3ca","first_seen":"2023-05-03T13:25:29Z","last_seen":"2026-05-27T02:51:25.175614Z","times_seen":72,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:58 GMT","end":"Thu, 30 Jul 2026 15:53:57 GMT"},"fingerprint":{"sha1":"3D:2F:68:CA:7D:7E:91:9E:9A:F6:55:25:90:92:2C:70:DF:61:E1:AA","sha256":"17:D0:A6:F1:72:DB:CB:B5:FD:37:15:CC:95:48:17:63:D5:77:2E:57:FC:4D:6A:36:5B:D9:8A:76:6B:1B:54:5E"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 24 May 2026 10:40:12 GMT\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":976,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (976), with no line terminators","md5":"5ac9e31eadc983a593629bf9abdb0784","sha1":"c9e6ce4413f957fad25b5547c3bc842895558e5c","sha256":"9e6a1d3c2e03a4ae5cc9333ade3b0b16b63a084f452e508bf4c762379654276b","sha512":"5c9b49129a161620f00abd79a4dc8a878946412c9d6afaddbcbe571480f5f6c6c760e693667bfd3504fe5b880dd33a5bf4a450be764302dcbf94629824917a87","ssdeep":"","tlshash":"4c1154b31a14f0354f7209f1a2fecbb5f462702cf15849e8a505dac42e69dc7ce05595","first_seen":"2026-05-18T02:37:45.085289Z","last_seen":"2026-05-28T11:21:24.13313Z","times_seen":3146,"resource_available":true,"data":null}},"time_used":498,"timings":{"blocked":224,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/clipboard.min.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/clipboard.min.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 00:13:36 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"28d5-69631eca-ee6c55f2f5d8cdab;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3177\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 469595\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v7zgl4%2BAO%2BlJj%2BDZnyrlluW3iV0uZGQZydm85TjUrpkEouvx%2F7dMSaUqidamKqzeK3eBcNhf73FWVXu1VIdMuusIU0jXtAXxv8cQagvId8CT3ZTjC13AsA3y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4aad6e5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10453,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10359)","md5":"b42944934de0a9c5c18706911874c1b2","sha1":"77ba921a768a5e3da6a25e389cfed21d966aa131","sha256":"d60ac05828175a69d3ad94b4714f1292948082cdcfbceca74c1da11955e5de5d","sha512":"047bf9ab606354508a2884238839523b2fcb2cfc6a025dcae318b7d3c8722b21ca9a01f588695f39fa039cbc03fed9477ad8b271c77735a88a6d50a8df76b454","ssdeep":"192:kvR/hkAisAHf4Lys153p17zoWsBqwuLJLHg4LyTByIMOTorA:kvR/vhp3MWsBq9LJFgByVrA","tlshash":"2b22a759b380b5b156e770ad112f424bf372906960aac0d4b639d8f2bdb8ecd1467f38","first_seen":"2023-04-09T07:13:39Z","last_seen":"2026-06-07T15:19:34.246882Z","times_seen":3467,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/h/b/jsd/oneshot/1eec422858ff/0.7939710583081037:1779617334:tJ5QW2GjP6JgvgZl7SQ2M4R_Jih5QnOlYZYVfWNAG-0/a00bae46b8dab51e","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/1eec422858ff/0.7939710583081037:1779617334:tJ5QW2GjP6JgvgZl7SQ2M4R_Jih5QnOlYZYVfWNAG-0/a00bae46b8dab51e HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12121\r\nOrigin: https://litl.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12121,"data":"kB-aNXr96i1DDOBrDPO6vu414a1gKDKFUOK4h6irzKZJOFkb-1DruOIQarhODcKJQua1qKQphrmTckOEq5KlVEU5K6v+4KrXardW6UgrJiWFg$3HlXi-rbRX3qFJGhaKL+SKoaaB$Bh5Zp9KKbHq4i+--rEWmE+RprTTP6KHZ179qHcYlwBplwtKrL+WGfoTUgKwQ5qQJJtOlnfoZ79KwdUK6nK74DuKjQs5aA403zxhaI695AOMh19KwG7KKt$pWsGEvssK15CGAu89ehKrQ5Ji6O4KwP9ArP4w+OKkYEpO+W3vvw9K6Z7i197Xsw4zgz9eK8K6X3rOuePgKKhm4sWw4Z66G6wG6KI-ZK1VqiXKrOc760DH-cXKUugMIBLV+W506507-BoIOu5t+IDFw4pOZUIOsBBkKWQOK448wZye4K4d7$g77C79U1UH7V4Hj9JCxfjRnr9U3mXKqUXLKKvaGqfw44l+klGcKNNRO9H5vNnePrT8qQVbgnUZHARX0QfCCfq4Kp7-wK8+AfsXYSOKKZGdBvvfep+5mQUkqi+QlZJuH76JxlJvRlA0ad5qMf5QNVJWkykkTZGbiwP0uGcKIqz-add4Wb7jdxjjvIoTmxemlZSN4$RQpUOnUMlq6lfv8hoHKERcw5-NckAIppZLX07nxPE$R4TpJIT5UJxqIS0pxTaP7UsGTdMpKArUJo7t5S5eQchk+0KkkgZneGZ-PfdenNfF4n-JbTD3aCOEiCb-61HVqtO7Vji3L+Zb$Joevnw-4aZKK0fgL+L7g9+8O-Ug3WLOnk14kPopciKu191hMrWkrrJWe4pUDCpzriki94x94GwOCchj8QhyOcRXu$hraxkiA5twi44uIX9+U6gW$3O-Z54FnZ5qIXH$6K3QlU6OiKw$O-4$I7W9l6BiKxlOUwFa+gf46sCw7wOjUBdi9-h1VIB+IO4wzW7FlLe9Ya+rQWchOQiU+argEK5QR$7wi05g88luUwXyQrlhUg$jB1c+wAz8auVL+qd8qvKFj5l9OjYv5ujFKi3lg57jceKLQcgupNUXug7syvqcU9haMYhlq5qQNBdVo88LBnHQZiA$qrQKOqiYogsrQxNIiyLw8I9Yc9GygAqacWA$cK+Yc-Uh6Vw+gQ+4+9I-Q$p1g9U3lyqjOA+GjP0iUgcv$fQsjBTgn8gjk6w-xwHIOv$SGhOsfgr-wUx5Ys$DB7$61KUwxlEPpfwPp8qwPn$KRK6cfvOi7VA7h$5T$qCTrfI5pi-vErIGL4sWZ8hd0hQhXx$$gSFnirLM+LKfGxu5tF6xZ31KTgA$nir66q7U5$Q+OGODT79sqUfZj$CNQ7qoJt6DKsBeAVNhzK7Wz5mtZ36Oq4hjqZUI5hxZUK6eCswigGediIwoM-Zq4IUzJ1wigj16$vgSvKTFoj-Irt9-l$rIRhC9OGKh16sKpeMzJ3YnkXxjyg9-vEhgjy6DT+SaesMEw+wvbySe0by5qZbnGeXwIGAagsuterYWVs35KALNsMLyzoZD6RBQQhIt+koFti0ePWTFTNygKKjoph1jl4Kl4jSbirKE4gKLK3LKvo+yTDAAz$QiaMqI$bA-Uh7KlYr$awBNK44Fr394KFIniDqyb$0gD6CUSNUn+7VChKju9rO6pQhT+E6d6cORIK017KDjgAgU$sbPEZ+mqg44TZCRYQR3F1Yd1VwNP9O-IO5rb-BIHm-PsBLPXOwOIKaO+m+18biOwxs3EI8CwnwhU8HhzlWKWGPUpewkhX1976IUeXSwwCE5g6$8towfL6TvrO5aeKZKCKQwhNd9Khm$wOFKi7BFOsHDLyOw6Vckee3LacT4ErijfALLK$7nsL1U+4McR6J+trgDzRqD-9FpOU+QO4fhh1IbbmQy-C+91IQGk4x8GrKsha5mFx-44BLlNKlhgj+koN+kX4QgLHL98VQ-W-T55aUmQfgO-KfJGAVVp9maOBZ$Cm5bVMvxUEZU5tIhWLlqfmZLvqBinWvA7bLp$E8PIE-rO+ds+k4ZOo+0cXwyjdU8Z7K17-$E1pQUTUvUPZCFGU6r0ghJ9MlrH39e7EZaHLTexlO9ac$kRZPU7B-PsUUwPW-jAKc0P3GnPH8gvsEiYRHki-XIY6-ju61384gVLnVLklfO6ucplE4QcKwvRWUmJU8DfXGCjw7k7x-UYp43xAn$34QaFAZyeOXVIiaQIhbQpgBw8ARpQ5K+lXZNyeSid8XWckr61MrpwBF$tH3CM+YFeKhKAjLxSiKgvqIJbF6DcOSrGn+leKbfL65CPUEBFQI8icOT8Fm$cX9O8C$JmGCrmq6SUMULb9uKrz9+guQ+Nq$XDFKvcAgX1L6ciy0RncBrZ0H9-BAJaermCAtvq4pe66rQfGGLc8Yp+VKvNG3RU1CrEXh7vyA88VMyAX6VLJplDiO6YswBi46oK8rViKha1FiKJmJvkt7vPXjv4Qk$kL3sKiZZDnkv5vRh$QQ6ftX-uGCOB5gUdTAAzQjwamIvIGa7eq8qZ9xFNyYrdl3HO46pUrHluHae0tLhKpGbdzO4pz96Fd$AgAh5rguWi9g4R0oNYla1qNb6sBRxIn-6O6M0lIQvZQGvPz5IIFvDfmQ685KrwAjqfpParLR6e$Q0KCc$YeyVstQO+Kcj6nG4DNlBmc$g4WGjjJ4wsUe$cVFaygOvjlPO1CZa5DYCcLRaILYRzUdFP1hM0rObS84C4U$rhmR8rx8BL$GouGWRT6NdIj8uoc6-vr+Hrpk9vhKX5w8I-56OgxexmIaK41YrCY6VB4JbZ+9icFs0nwXf8Vj9esDA8g03gvwFwyrav61CDshgW1ds$eifKlbZ4C6wIx0GP81QMQnexN+btNUJBehGTQXcpHsrVvfmpvYnaJ$1WOW-1$K+P3m9Ue5J1NkduEPNDhO3cEsPhS1QD-4NKtqCPrq-TB$aAduN9UcUH1FXFEjqNhbONJxccuCHydk1FvefL+1p-4WkR1jOct1+z6pQbajr8c7-Hr9rSf39ECERinMQKx9wbZosBTYv7RQy53WD0f0QIoxj-$G886j4I6Jrg-s9gpgJy-Gjz1zRfJ3pXM+91wUjeC8hNI6WMeUvUaDn5g7T+G4zgHjSYZK5jCidGS77VRp5sn-4a7x8cygoVFkgJzQeic77aw1i+rvC5guisQRpw37L91lZQI7Fcg8CDJ5zGj1X73EylXLYJiq98TcAaNVSYXT-VgwN7$VgQPfzfaCLn8FtikP6xRW8+rUEK1Gy48FpUdIFxngUBX8ijIiWa858AxvW1ioFPRYzwWUT0nXYMb$MUChg6-KTvfAR$810dqt+J7etB$ilY1kfqeGNt5E8aHObKB60ReUkXF7xLu0p06B7DT9B1HSxdjfq+6U9+LhNC4$aATQbgggSgKPKXFIvONJtJL+KadGMitngDYG0E5wGnAnB4GDSPEiuKzBqLhvcZUKClct5gRb$9YGHKClePCrFvuZyQYp8dwkEtqkxQ4tUGkp5kvd7rOgErfK-4liacGPLkfDy$8D7BeaSa9iniU1fGjD34-ka1zl+dxD+cUQ8Zgcla+5fBMO3akv7dlB4i3$S$ItVce51whOc6$nB4ersrq0hPPnYZQ4vQEZCOUrPZpOe0F-S9G$6ruv-$TK-+-nxgUt0ZOZEKyKqga5q1pPEiniD6r6vg-6YtA1B6wkGw+dlt01CakL5$95Vdt1W5JbinPDUvL+qtvwp-g9BGK5Nvcn6hUP3-J+cng4$GqKQcIkut8vRnD0pPxb0l7LO9EQWbmOYvO+50EB4n8L5nF0W6NDhtL6aQN6f1GE6Kw6B+wk6GBhcXOnhtAXWdEmJQslP$8vqrnK+mkGOmkk6iYpW1M6qPo64KYOv4GwcklZ848X+0u1MlkhSaVkgcxwMZS$ZdpXoB09Fgeg3ren3ncbWttGYZGcew-Q5$5nNkvt7cc4srgd8gDd4nBGE+VQRmpPyaGKj0D1DdArPDqts-ZPI0ZmC$6D-7DkaPUEyOuKInd-OEZ0aDc+zg+DIiG$mKBLaQL1pnDcanY7oGqw-+qDIkvP6aPrTmSn1KK7vdV57rW1K5ac+D4tvnYgH$jrEKngWD4t0ZqlVcUvmm0ZIGg+mm6G7nbBrHGDXGkElr413lh6vvx985r7+H6rfrJESmy9c+Xmprl4aQqOydrKqO3w3vCDl7j5nmZKK++gadNk$+PEqrjrSaYGjOaQrQ0p0-X13p7Plkckktqrdtsl+dlZ-H37BGl+K$K1g4anxw0h95nK-0mr$c$KYwJ$wDaJ7KymXtUrSkK+xBUgUt6LqOF$UKtiem+5FHUH5D-fpXKZQfwHcix$qrAKnJuDxZ+6r7kb8E7iK4c51DSaHDa+-nYvagKfhrnBZKzBYJbPI1lLvt7Hp-lJFlcnZZqKQnCQy$Pwg+bd-fkLga80zn5lqJOPQ7O76$W$9cc5zfcZyi06bkBXdGVdn93tQJYnAi$OeLT$+DPZ+KYJpHKUi1g4+Xh6O+YD1riHUOK+nrMtgPU$L1V1niKUPmDn41KN8+CKkhClsXKNItFt8Uc5xXWvJLUfh08JkEAJc9wfJ47g1rJblQm5NKs-J+dkqwH18Xugz55cbJ-NAtcU0m0LkizBFQC9tXyaEUAKxr1K17bLjHEB49lcsgh7p10ge5ptq5p-yXZNE$8Ep1y5l61v8E5fXQ4rl48rxveUa60ZsrFnEUa0fLvmAKEfiHfGmte0iv5LNtVEwEzNL6ymQfdwB4iB$kmmUDr5Pf5GU6bLOfIi4kO4Rl3rIlDn85O9xaF$G$HK8nek6QSQFnK$56xJg9W-mUFcaZBdqbY0wBubC8SkuwMlonoU1GnaVk9KBtgwbUB4rtc7ZwHK1XT6c4NE95gPN6DLIkTUibRHhP6pX+orqrjiZrQ1PPvv+dr83bl+G$PE9kg5rXBL6aUrQU40wJabtvh$lBFZzggf+0PdK7H99rDu75dbXHzETa6$cGL5nrqXDb+DDaVasKqNL5s86Z4cCdBaxUhHCaRnb7c8bG5UGXKN6LYJakP8qHxUAgQl-aLHzN8B+tFgiuVABXZ5yDYAkvtG7b7QymGcrryda8SfH8-4kg+m+h1t1KgRlZl$WiBu9LsDv7453mfGE+X$ZQsN-OhEfGXR+NsHM-su6kQgeLrb4chAKc9$MlprB5FdCbF06KHtigMNW0Zu-XFRW69JtAUwoapLynpJrHNu8ElQ9QkgYNXNlQ-8kXN0ct1dEK1rGJUA$mptK15iAr+rl$EaS86$UlkuM8J4HiFPJ+f78ElE1HhUIi6$PXjUAmQgCr5XbGmJ0LIk+a4ihk6r$1fftnhfpXurlXF9FZsESa58xwj-TvJfw8NkFZ9QsHA6ym+dyG3BKd9X6aibaiuPN1LAv0DRlH9HBNDDsd-aguArCkm$00-J5v9UH7SPlO+EhHFReRSaQ8hP3BEQottKEZIRYG78s-XgaXUwG5G7Un8tbEr9iJatBu8aFck01llDoRBaW4M+qHB7hZQ+B18KcbAEec1KzBgXbirtLm11eHK6xvmAM$6XSHUbLHXNrHYdB4F7bdgPIzu05isdVn6Z08hfaZAVPgG$xEo8H8Aj3lE4Oz7Nct-7ZK8Oa5MNl4iBdGoancjBubTawLDcStlEHXubVXYBxnxmD7UvSR51HrDZlI1v8KG1s8sdvJAKgArZ7c$ZdvQHD5B9KUPtc74HlB3a3$T$GikgUnjznvDOcvZKKFw9z0KUc4UHc4Ik0QWuEr-ZecYGmX4kX+gLgpkjmV4K4zj-3tvIprPBYvoGR1BaH$gimdW1IjF$Q+$ZuRa7MwlBYfSmya$fhj9AkAUw6GnVAR4fVR6RjRsRGG7VX$1rmrwiNU39hf+jBw81fu+8MDetqbIPinqP3PnJUJh9$Uc0PBlE+dO0L0mOfd0QaRIbmmnJuJ7cpsmKHK1Ut73995jKB7jN6G8+t8KNfcZEUKN5p$S1lzQgkgN1gOKQN6nzvI6f6ari10ZPqJDXYgUnqVubZ6q-16zKfEsJV6UKs1K+DP6OGKlvrEKui5oiej-JW7XVuk0p3lFFRiMra9KNr6Y4JVKc3Km6rAKZsVBLonANXUOuR1ivK5Lcc5ZIr+wm+U4DxgkmQdnj5jusZKRslspJiA$K-VuKoUBUqR6R$RZ5bcBNSUuP3VxVUgQe+dxX6QjNO9gpKeVdHrBIfrGzOBm7zHH7sN8uqCVzcixCjUFZUIHRoNZbLEcEsFZPlOjtx51r+DFQ7zAk+ndeJL0e+RXkZNUVK0zUuQ3$+dbZEGwL+K+FL8s-icZbAfVFDnxvxDHZ-1t7CA6tA1G5e$S$C6+jUax-FHk0mHQVBG7FC$auN9SNxV-J7XXz5IfzCRHHRJC$7k75ZH3kFPCm$sCbLPdFrN-9VJ84w01Lsf-J5UaInAVS36jtRXezftXDpBUgSVmZuc+KHjurWRO6fA+rhad9IiGH8KCnoUb9c+YP80x5sKk9xl8IqlF$q89iK4HAdzO+bI9SSaMLhVV77VVeGRfFsrFKxfAYIGr$-$M-O+4RyPoKGAhY6QS6csFNzttrRsDj9jWgnjzB+kYZ3dOJ50Nrwauro8UnYj6QnzjI0YmZysZkqROSbcpABqfzUE+fFRlZ$A$rOf800lKQLPGwol0XpdyVrATNAKeG7YG1l4w0o-9HmZzLuzwCzFKN7f+6oUJnsPnSwSwkYbJKUnPZ6KlwCBwamIy1jZH7IHomXkYQ+jkLtq-ETJOfYp9iq$cDu7O+mXsCzjCO1SuSDqdEXufL5sMmevuAMjsFi81N+ZpQPsbjwLf6gWHjNkOzRH5A99dGwkxRBYFzUNSD8Oa++tEr0V3FBasQMQPg9aufRd75tUGk4Cvs+8W+is8$NKC3A7Uw07F51fenLUpd+hoCBN60X0+C0VsWQNEHuJxZd8vLELVb9Y+F84gJGr0tHqhuL5cn5saZyCfZcc0NgP7vmaxv-eUNPVTaLLXVKz$Q-80kwUKUK8GWKeTD$bybnFQ1Ta6EB$oLml+N5IpNJPYJHryIuvL0olkcJC4X0hV8EQf1KCjNNRh$rI4cTIHk+KanRSQYnX9$RYzzBZFv0QoC$DFLQNfsR1R3dweaJSnTVL4Jk18LXzSkpr8jPR5ZUCD+Cqxq3E7TJqUxzY4eQ+ueS$swAzZr+NO4FlkllTUnDVlMB$zuZrt6MiW74Nujtt+h7VG3X0HfKdLZ-s6bd1g+wk6n3-OkdclCr+kcaLO4rzBtYUYhPrFq88nCJuP$+DyJvgG7wrZ7Y0E9zEE+orZrVvol0zsWXSkWMddWac8uwO1qmL0beTUrW1$Px5EIwI95Gja4mSOuS$xD$fNY$OkbNJsJCJZbFCUnYJtk75gQf5YscFdP-s4YpGCFlErG$GZPDNax8cA1l7ymXAqoxozx4KPRraZCMqWnTW3GfNpPg3J1E+W1lohPo7P1GX6$xGyTjewzqRXRQfrkwTcQE38GRWbFZrjm+678BGwAW-A1vHhaQyT$6PUX1IrJNTfOpX-1UXHUhWKJ+mIOaaT41xc+Y6$GvNXrX6KMwK4O+D1KW4lHGzIpE3kB7z5xOMHXD7jpHKrRiNwbfOHsKu8S66jGOS6Vpv3sAfxa9+Cs4gkNaJZkGD7$0uZn5y-xegUnI-rhL8c3hrZW+s87tppn5SegrGIbET+HK3h4s-3fvv9kjnqKegUiIo+aKuXZaU5W-lY6XrWcCdZjkraQIC9ggNZC-XcWXm769a-fe71j4QrRGmDxaPxicXDK7l0-0LeK64Sw5860aGD6Bk6C4UF044jQT5O-OVXQQ1KLk9LjOUH4+1EKQ4fjmX1V6p1+x-3r-Cas6ap1lh94Lelb1$mL$RgQxrJU6jUjzDQ$+4DO3ljgOOZrPpwic0Q-jmDcUnm4DmjtwAKk6h4H4tKZjXhOxh9rPjQOjHOWUd60a8aAcjK1jIG1+DR4bVKTPF1G1dPLpqOsZmsOSL5a-aqAmWC11G6QjaOkrapeCOXK0qLAlPGcZYwk1H$SL9BxeG7jE1P$R7r-HLq1KC4oUv4VL37rgXmBFOqhRB9zry1M60amO-4k1f5JLa3LqQ-8rtr6OzKXgqfAO4g76j71f4n-Eu3tKi-kZ8xJLZOTlF+j0616L3eO4aQ+jT4yaPS+tUZjlO-Xi+FPHINni7XVp+KewUgq7wj1i-u354DOKu6UO++4UX9xUU6OvIc55LacFgwPs0aZ5KaVkkLvPOTfih5+D34RlqKGIDvJa5svI$6-LIn0sxufQOHJ1Kjz6Yi3xxfwHOYapdlhA-uUjCCYHQm8nxKFsiCQ6f$69abcnJ37rrOOnH$Ba9k37OQOhhM+ZaXOQsmkjdKN+hgRUOnk1I$Xe+W7NRM9m7wIGUKfhkFI-iCIY+56gKZiAjqsOvXR-3qIiZOJUwEmxgl04DgMbr1B50hMP79whjujhX5a1ad4MaK$K8Ky-Z4tceXsdpI13$z4G-Rebh1w9-pGm1wDjKfa4nnighLOvPZRIRcp+EaUGOxCb8DmApFKxDHqi$rymqPDv1X6YiSjHa5aJQe9AYWlKR$R64fT8OQWtmGBXpqh0q6ye$rm6tsgHeKNsW9mD+A$yVWfwKfUIOvjPgc54l4rgrW+vjmLTb86OKFKHqKLkeU3nrn7H$PBaFUg+YGaso1ZK71-kDB6SwIm5LsOV3U6I8XEQDBspHGjsjrro$+K3KWaUgrRwctGq+LqH3OkirvEPDUi7x1LGapi+4aZaZIKwmgsF+LgN8I7r37O1n79K3LK-jllK6IO98+X951lUbVtpqx5MjYOia+6DOfs1w0Gq8JlgfmvKRWkSUgwxKyG9K+o4nFHKNVbrGYkvevMwrgsfE$D-WihjosyK8KEQ0i9YFXbnKjgmiaiZJWv6tOBO8r8rOOW$4c4DHB7tatUK7POKZrAl5aKKwltrY4IK$hwNpM+jcyKkcYdl-Fd8hOwjcaT$6dhi5PpzL$9x4HLK97Y-or3BiFWEUq+V6RLn-ZKeclmlMDwpmQYaGXPgNfEqObaMgW3hRvBd0av4C5c6jLrV1k-Cyv4IXHnIhavywuOhHD6JhDry50O8Y5qKXLtX+$7Ae1Dj63c+9o3e48a6x4tIYZf4Ni9-jUN$rZhPphgk8xyhKFsrZ5E-QGjU-nhx4p+HhOC3d6WzLajgyKIsjUNujHlS5y8wFDhFxFCQjCe4hOW6jq8bXwPCMQOWEwbjZHe5pjiQx6O$1dmlhmLgpO$hSjhmjKoLT5OHUUwzXZK9BbVQEjHVQJf4li5OWHNHKpak-blQzFij6$g9WKEaNcUmLmpQXor3r9ajYkaVHp44TKkAi-jZIr$+aXcfgqQKtwYrAsGcAaKnrx1GlhQSPBVjc1HrkZ+-bgV3Wv6xr1HYanlgYewpEaUQMD1w6YQkUdLB9UgwKTs7ZIia71ZsqKxfUvOFmY41-+LkYAdjCrH74s-KNY93W9rirg8RDyslIqZN+JsK1ay4igInrMDHqtLgBwssmGIvugV9JBvzin4453LIOVq0Q1Mm5Jcgj9MzkIWWuEfZK1KgqHFiyX1cSvRgPU1Ck1GkfYETkC3gqX7$WOxEV4xq1zizLjKtqav13CYNPXbfx-VC73QEiXH3+9C5S7ljoseLq4KQTWkYxg6mFEJJK$DqhjzisJfr8rTGxfOTWp786qE+n5VjzNb8SfH35QHxTFNb8G+Kicv7YWTkQrmJBatL0cky+WG3foEcarOORUgrKNDctjU8NolbEImKwqMwCrSWKZ1fBwSEjyTFlgacZKDtLq4wI10GfrMfx63qTFiHseBqEeLrkkRm0G66EEQ65a6epoGPU4gd6tglkIJLDNk9AnDFFda8m9hmDnaZBj0FkGEn+KX1kY9KMhU5QqEGOStjhM+-PUpwGD-K5hdeJqhpwZqxDCzN$LXKFcs$C$9rfcJh$EwV6DZIyHOZB1MEvXsPCJ6iQ0J0-hn9tkaMZOAhgEmiWrQB8DKKNXwzXJYUSO9QeruLn9kpTB5HLiN3gh7ErZB36QaN$Eg7PJISkcelPwLSXspqFsTGy4LGh7Gl7USJsmrlvPchg1g3aQ0KnGPDJg9BKzarJBpeOkSwadz$ZNtKAnEa10LLfUO$wH759L9LdmmJLYtVUrXBMozEJ8q+fUraPDPZwQYgFDQy+5GVQQhNwV6MK3Je8edJz-hDoK$VsAeY4K+NJA16DcCeuUqG9fm3AD30$1Nf6UndxZgK8eEJ7Kl4UhwErnmEf8BlfHdIeKgZWNZQBUqyTFlrIBr6G+qqxwgS6roU98VdC$76d6XeUfDtL7a1OK+L0Jz-9UzrAwrRjNnLZZPhjH4N-eZKtqwhyfwiO1hQp59FqH$gEkceacXZD-kD7-KlCYfg7+qOzszNIalvOytL71kdOveWt4BV9qfNPwfX6Jt5$LI$RnNpeYQ$nuPjpA611FWUW5BLRBkpK3j7uxBdfBpW$hnX4mEZMhzXNpK+6TnP4Bhb$An-9$7JPAO8FgNzqkC1r-ZBDDbvIqnQuHHZTX3l4afdeLaippHI8TdGkCifIsr8ZP+4q11yKni4U7D0B3+zr80al7tj3juGG7fwvya9kTvKcKxJ1ZSDbbxMWtsH$ObbK-q0FNHeMU5aYns3gA5mslfPblAEQDFlc6xKfbe+gZZpwJCvuVbTLqdHfdGQ3hLnvAP3CCcusbu3bx8BYTe-RCjuCEztg0gqGjCk8+bP7dk7qMXQJurPO7D0xLOqCUulEu9Z0HW-5aquNKXnJ$N6WqenuwZ5UlygADNetu7gHyq+W3dgr-5Ww$8nyv4DReeJbbk8uEgA5Ts$pr3zV$y7c1TLFuwZxdw0HAMKZSuwZB6V0gYMKZJu-ki6hlHr3o--Uhkn6c9Q$d4QM8ZGs6dkHacZQYunw584bACDRQLNlwX8n$7WjBAku8wMAfme-SWQt+v6mAt$CsMgQHu1Ze65uuh3S-6Utf4hsbx-DWZnRnaOXP0g83LQzZjk9XVmCpDQCQuskUXntebLQRdJwZCXF+AqiZeVNgDYVdXrl$-Y6AR+4jhJGgMHG7AZk6A67FCdXeqUAGCjzpArdhSxUPwrjzpRK8-SxNOk1snl7$DnYsg-kJsBl0rDkClUukZaNl73qoey44dW8WLxw84SwUNZv7z0RLc7SGKeZmAt5RWlDS5AGGbVmN+H6YZzHwZxCds-v3se1UdbCChbA95jeUARZbCXsliuHebA7de7nt99MYe5vCkX8tu9ZDYCdUxp3fnajDdVY0Us-RCMv9bMqZ58PduhbXGgOowV8EKTOUgRxUCYVg3+yUK+ZHmnhir7wc-7hkP$YYnB+kqh19OnI5ILaYbl$6KjsK8KWK7G9AMfMxkYpHKDU3hvVIh6WVSdd+oULA4eIhlS0a$xayf13bxL5RBbWYYOHjD66WRL+Ds$6eYbEeD8PhearvO-OaKKrV1ITNGhra$lKcLRfqyPd69rihTBvrj5jP4WKdOVLkiO3Fi1zgIa0qapKl1H17ZDbKKKsC61aLKy-+rKnwYry+pK9E7PUwp9Uk+V-Bhd99X6xKp6b-GQspI3KGbbmv0qK0i1DKP1DVKKwOOOhKKrUTFvNDBrdOY8AgChOhI4ajVIrgKQG6NDVrXVi0A3mevuukSQ6$KzqMOqJdW18VKKSqJukY-lT0fhKWxJDbahKu4Nc0eRuMvSocPgGK1ICaKP6F$OtXxtFH-XsKj+GajqVKqIMZPjzMf$K-xwOmHKpVCKEOS4qtMn6jg08AgT4KKw58484XeghOi6K8thkx5aWeuVrgrN-Hxawv0OdrluAKtKvMChKaazr66LBKV4hUPwf$N4AUColzJi+mVz-zBaUWVmHrUaghdx3Xl$KJsbOkg$cDcvWHXKeH-EnEHpWZIu$5aYbjquhUP6kmNVTq8-6K5ArpbBzR4ZbTgqgOdrerIt4OJ$lAKP15$BtNcxWQl646xVkKLKwPwKxaKg+ahmiS1WZO9$QXPhBUxFxk-MwQXptglOnL7N-LpKWthPKhOh64kdV9KpLzaqWGd6QjWZwQTKJawdKH6bZqPkjxhNHKKrXUT0aHIbFAHYdiwITdS+bgVStWcmIRAr+XXKTObhKKNBfjaKK"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: wLJVTN+x2PLvrcJip9lLHw==$+VKN/mXu4bfC8t69eE5pGQ==\r\nset-cookie: cf_clearance=485OonNxJoRvKNrjuhZVpNRo6kHMKpDTztduHXtTOdE-1779619212-1.2.1.1-5l0OCNLghgWJ5W7WpLJkFwKSE9_kvgl2DLn7e4OMFiPAg9kvbCWSZWFkgnmNsBwk7XMOEYG20w0rJrMX6MO_slP5nes06Vq_xm781tfb9J0pwKLBTDtjnJh81ImGKfE3DjJ4GLqzx9YmMBuCoZTiUafVDRS_ny1O5PdkMDis1SGQL_x30SFC.Y6qektLjnfMI9v5l6IgR9yQAQqgs89XPdJdjawExulnSS7QeGYJXfqgdUfsUiySyC2ImKqDoMMcR3jTwGBvhSoOr2llbkuefHHAFPGa8NtPf92qo.28kw6W6InBjfXZU9nS8J.iAL0hThnD3iWJHQUd1jGJoFZWjg; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=litl.cc; Expires=Mon, 24 May 2027 10:40:12 GMT\r\ntiming-allow-origin: https://litl.cc\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a00bae4cadd95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/rum?","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 628\r\nOrigin: https://litl.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nCookie: cf_clearance=485OonNxJoRvKNrjuhZVpNRo6kHMKpDTztduHXtTOdE-1779619212-1.2.1.1-5l0OCNLghgWJ5W7WpLJkFwKSE9_kvgl2DLn7e4OMFiPAg9kvbCWSZWFkgnmNsBwk7XMOEYG20w0rJrMX6MO_slP5nes06Vq_xm781tfb9J0pwKLBTDtjnJh81ImGKfE3DjJ4GLqzx9YmMBuCoZTiUafVDRS_ny1O5PdkMDis1SGQL_x30SFC.Y6qektLjnfMI9v5l6IgR9yQAQqgs89XPdJdjawExulnSS7QeGYJXfqgdUfsUiySyC2ImKqDoMMcR3jTwGBvhSoOr2llbkuefHHAFPGa8NtPf92qo.28kw6W6InBjfXZU9nS8J.iAL0hThnD3iWJHQUd1jGJoFZWjg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":628,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":610,\"startTime\":1779619211273,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.5.0\",\"timings\":2},\"pageloadId\":\"007f44f2-ce00-4c0e-af4d-9f0e7fa60793\",\"location\":\"https://litl.cc/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":13,\"domainLookupEnd\":13,\"connectStart\":14,\"connectEnd\":36,\"requestStart\":36,\"responseStart\":388,\"responseEnd\":388,\"domInteractive\":582,\"domComplete\":994,\"loadEventStart\":994,\"loadEventEnd\":994,\"transferSize\":5878,\"decodedBodySize\":14065},\"siteToken\":\"9f22a47624f74f8bb99c6da53d74a5e1\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://litl.cc\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voRsteuiuIyG4qKgSyDMXLe%2BH43H7hkUDy4cS2HjoEw35J%2BT3gYIgZYiE7fXLwZgIIIMeGFs%2BpT5R7yJWXfLAdwZZ1cWD2VZEJ0jABdSxUcWkVA50N%2FMlJmU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a00bae4d3e055ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/h/b/jsd/oneshot/1eec422858ff/0.7939710583081037:1779617334:tJ5QW2GjP6JgvgZl7SQ2M4R_Jih5QnOlYZYVfWNAG-0/a00bae46b8dab51e","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/1eec422858ff/0.7939710583081037:1779617334:tJ5QW2GjP6JgvgZl7SQ2M4R_Jih5QnOlYZYVfWNAG-0/a00bae46b8dab51e HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12121\r\nOrigin: https://litl.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nCookie: cf_clearance=485OonNxJoRvKNrjuhZVpNRo6kHMKpDTztduHXtTOdE-1779619212-1.2.1.1-5l0OCNLghgWJ5W7WpLJkFwKSE9_kvgl2DLn7e4OMFiPAg9kvbCWSZWFkgnmNsBwk7XMOEYG20w0rJrMX6MO_slP5nes06Vq_xm781tfb9J0pwKLBTDtjnJh81ImGKfE3DjJ4GLqzx9YmMBuCoZTiUafVDRS_ny1O5PdkMDis1SGQL_x30SFC.Y6qektLjnfMI9v5l6IgR9yQAQqgs89XPdJdjawExulnSS7QeGYJXfqgdUfsUiySyC2ImKqDoMMcR3jTwGBvhSoOr2llbkuefHHAFPGa8NtPf92qo.28kw6W6InBjfXZU9nS8J.iAL0hThnD3iWJHQUd1jGJoFZWjg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12121,"data":"kB-aNXr96i1DDOBrDPO6vu414a1gKDKFUOK4h6irzKZJOFkb-1DruOIQarhODcKJQua1qKQphrmTckOEq5KlVEU5K6v+4KrXardW6UgrJiWFg$3HlXi-rbRX3qFJGhaKL+SKoaaB$Bh5Zp9KKbHq4i+--rEWmE+RprTTP6KHZ179qHcYlwBplwtKrL+WGfoTUgKwQ5qQJJtOlnfoZ79KwdUK6nK74DuKjQs5aA403zxhaI695AOMh19KwG7KKt$pWsGEvssK15CGAu89ehKrQ5Ji6O4KwP9ArP4w+OKkYEpO+W3vvw9K6Z7i197Xsw4zgz9eK8K6X3rOuePgKKhm4sWw4Z66G6wG6KI-ZK1VqiXKrOc760DH-cXKUugMIBLV+W506507-BoIOu5t+IDFw4pOZUIOsBBkKWQOK448wZye4K4d7$g77C79U1UH7V4Hj9JCxfjRnr9U3mXKqUXLKKvaGqfw44l+klGcKNNRO9H5vNnePrT8qQVbgnUZHARX0QfCCfq4Kp7-wK8+AfsXYSOKKZGdBvvfep+5mQUkqi+QlZJuH76JxlJvRlA0ad5qMf5QNVJWkykkTZGbiwP0uGcKIqz-add4Wb7jdxjjvIoTmxemlZSN4$RQpUOnUMlq6lfv8hoHKERcw5-NckAIppZLX07nxPE$R4TpJIT5UJxqIS0pxTaP7UsGTdMpKArUJo7t5S5eQchk+0KkkgZneGZ-PfdenNfF4n-JbTD3aCOEiCb-61HVqtO7Vji3L+Zb$Joevnw-4aZKK0fgL+L7g9+8O-Ug3WLOnk14kPopciKu191hMrWkrrJWe4pUDCpzriki94x94GwOCchj8QhyOcRXu$hraxkiA5twi44uIX9+U6gW$3O-Z54FnZ5qIXH$6K3QlU6OiKw$O-4$I7W9l6BiKxlOUwFa+gf46sCw7wOjUBdi9-h1VIB+IO4wzW7FlLe9Ya+rQWchOQiU+argEK5QR$7wi05g88luUwXyQrlhUg$jB1c+wAz8auVL+qd8qvKFj5l9OjYv5ujFKi3lg57jceKLQcgupNUXug7syvqcU9haMYhlq5qQNBdVo88LBnHQZiA$qrQKOqiYogsrQxNIiyLw8I9Yc9GygAqacWA$cK+Yc-Uh6Vw+gQ+4+9I-Q$p1g9U3lyqjOA+GjP0iUgcv$fQsjBTgn8gjk6w-xwHIOv$SGhOsfgr-wUx5Ys$DB7$61KUwxlEPpfwPp8qwPn$KRK6cfvOi7VA7h$5T$qCTrfI5pi-vErIGL4sWZ8hd0hQhXx$$gSFnirLM+LKfGxu5tF6xZ31KTgA$nir66q7U5$Q+OGODT79sqUfZj$CNQ7qoJt6DKsBeAVNhzK7Wz5mtZ36Oq4hjqZUI5hxZUK6eCswigGediIwoM-Zq4IUzJ1wigj16$vgSvKTFoj-Irt9-l$rIRhC9OGKh16sKpeMzJ3YnkXxjyg9-vEhgjy6DT+SaesMEw+wvbySe0by5qZbnGeXwIGAagsuterYWVs35KALNsMLyzoZD6RBQQhIt+koFti0ePWTFTNygKKjoph1jl4Kl4jSbirKE4gKLK3LKvo+yTDAAz$QiaMqI$bA-Uh7KlYr$awBNK44Fr394KFIniDqyb$0gD6CUSNUn+7VChKju9rO6pQhT+E6d6cORIK017KDjgAgU$sbPEZ+mqg44TZCRYQR3F1Yd1VwNP9O-IO5rb-BIHm-PsBLPXOwOIKaO+m+18biOwxs3EI8CwnwhU8HhzlWKWGPUpewkhX1976IUeXSwwCE5g6$8towfL6TvrO5aeKZKCKQwhNd9Khm$wOFKi7BFOsHDLyOw6Vckee3LacT4ErijfALLK$7nsL1U+4McR6J+trgDzRqD-9FpOU+QO4fhh1IbbmQy-C+91IQGk4x8GrKsha5mFx-44BLlNKlhgj+koN+kX4QgLHL98VQ-W-T55aUmQfgO-KfJGAVVp9maOBZ$Cm5bVMvxUEZU5tIhWLlqfmZLvqBinWvA7bLp$E8PIE-rO+ds+k4ZOo+0cXwyjdU8Z7K17-$E1pQUTUvUPZCFGU6r0ghJ9MlrH39e7EZaHLTexlO9ac$kRZPU7B-PsUUwPW-jAKc0P3GnPH8gvsEiYRHki-XIY6-ju61384gVLnVLklfO6ucplE4QcKwvRWUmJU8DfXGCjw7k7x-UYp43xAn$34QaFAZyeOXVIiaQIhbQpgBw8ARpQ5K+lXZNyeSid8XWckr61MrpwBF$tH3CM+YFeKhKAjLxSiKgvqIJbF6DcOSrGn+leKbfL65CPUEBFQI8icOT8Fm$cX9O8C$JmGCrmq6SUMULb9uKrz9+guQ+Nq$XDFKvcAgX1L6ciy0RncBrZ0H9-BAJaermCAtvq4pe66rQfGGLc8Yp+VKvNG3RU1CrEXh7vyA88VMyAX6VLJplDiO6YswBi46oK8rViKha1FiKJmJvkt7vPXjv4Qk$kL3sKiZZDnkv5vRh$QQ6ftX-uGCOB5gUdTAAzQjwamIvIGa7eq8qZ9xFNyYrdl3HO46pUrHluHae0tLhKpGbdzO4pz96Fd$AgAh5rguWi9g4R0oNYla1qNb6sBRxIn-6O6M0lIQvZQGvPz5IIFvDfmQ685KrwAjqfpParLR6e$Q0KCc$YeyVstQO+Kcj6nG4DNlBmc$g4WGjjJ4wsUe$cVFaygOvjlPO1CZa5DYCcLRaILYRzUdFP1hM0rObS84C4U$rhmR8rx8BL$GouGWRT6NdIj8uoc6-vr+Hrpk9vhKX5w8I-56OgxexmIaK41YrCY6VB4JbZ+9icFs0nwXf8Vj9esDA8g03gvwFwyrav61CDshgW1ds$eifKlbZ4C6wIx0GP81QMQnexN+btNUJBehGTQXcpHsrVvfmpvYnaJ$1WOW-1$K+P3m9Ue5J1NkduEPNDhO3cEsPhS1QD-4NKtqCPrq-TB$aAduN9UcUH1FXFEjqNhbONJxccuCHydk1FvefL+1p-4WkR1jOct1+z6pQbajr8c7-Hr9rSf39ECERinMQKx9wbZosBTYv7RQy53WD0f0QIoxj-$G886j4I6Jrg-s9gpgJy-Gjz1zRfJ3pXM+91wUjeC8hNI6WMeUvUaDn5g7T+G4zgHjSYZK5jCidGS77VRp5sn-4a7x8cygoVFkgJzQeic77aw1i+rvC5guisQRpw37L91lZQI7Fcg8CDJ5zGj1X73EylXLYJiq98TcAaNVSYXT-VgwN7$VgQPfzfaCLn8FtikP6xRW8+rUEK1Gy48FpUdIFxngUBX8ijIiWa858AxvW1ioFPRYzwWUT0nXYMb$MUChg6-KTvfAR$810dqt+J7etB$ilY1kfqeGNt5E8aHObKB60ReUkXF7xLu0p06B7DT9B1HSxdjfq+6U9+LhNC4$aATQbgggSgKPKXFIvONJtJL+KadGMitngDYG0E5wGnAnB4GDSPEiuKzBqLhvcZUKClct5gRb$9YGHKClePCrFvuZyQYp8dwkEtqkxQ4tUGkp5kvd7rOgErfK-4liacGPLkfDy$8D7BeaSa9iniU1fGjD34-ka1zl+dxD+cUQ8Zgcla+5fBMO3akv7dlB4i3$S$ItVce51whOc6$nB4ersrq0hPPnYZQ4vQEZCOUrPZpOe0F-S9G$6ruv-$TK-+-nxgUt0ZOZEKyKqga5q1pPEiniD6r6vg-6YtA1B6wkGw+dlt01CakL5$95Vdt1W5JbinPDUvL+qtvwp-g9BGK5Nvcn6hUP3-J+cng4$GqKQcIkut8vRnD0pPxb0l7LO9EQWbmOYvO+50EB4n8L5nF0W6NDhtL6aQN6f1GE6Kw6B+wk6GBhcXOnhtAXWdEmJQslP$8vqrnK+mkGOmkk6iYpW1M6qPo64KYOv4GwcklZ848X+0u1MlkhSaVkgcxwMZS$ZdpXoB09Fgeg3ren3ncbWttGYZGcew-Q5$5nNkvt7cc4srgd8gDd4nBGE+VQRmpPyaGKj0D1DdArPDqts-ZPI0ZmC$6D-7DkaPUEyOuKInd-OEZ0aDc+zg+DIiG$mKBLaQL1pnDcanY7oGqw-+qDIkvP6aPrTmSn1KK7vdV57rW1K5ac+D4tvnYgH$jrEKngWD4t0ZqlVcUvmm0ZIGg+mm6G7nbBrHGDXGkElr413lh6vvx985r7+H6rfrJESmy9c+Xmprl4aQqOydrKqO3w3vCDl7j5nmZKK++gadNk$+PEqrjrSaYGjOaQrQ0p0-X13p7Plkckktqrdtsl+dlZ-H37BGl+K$K1g4anxw0h95nK-0mr$c$KYwJ$wDaJ7KymXtUrSkK+xBUgUt6LqOF$UKtiem+5FHUH5D-fpXKZQfwHcix$qrAKnJuDxZ+6r7kb8E7iK4c51DSaHDa+-nYvagKfhrnBZKzBYJbPI1lLvt7Hp-lJFlcnZZqKQnCQy$Pwg+bd-fkLga80zn5lqJOPQ7O76$W$9cc5zfcZyi06bkBXdGVdn93tQJYnAi$OeLT$+DPZ+KYJpHKUi1g4+Xh6O+YD1riHUOK+nrMtgPU$L1V1niKUPmDn41KN8+CKkhClsXKNItFt8Uc5xXWvJLUfh08JkEAJc9wfJ47g1rJblQm5NKs-J+dkqwH18Xugz55cbJ-NAtcU0m0LkizBFQC9tXyaEUAKxr1K17bLjHEB49lcsgh7p10ge5ptq5p-yXZNE$8Ep1y5l61v8E5fXQ4rl48rxveUa60ZsrFnEUa0fLvmAKEfiHfGmte0iv5LNtVEwEzNL6ymQfdwB4iB$kmmUDr5Pf5GU6bLOfIi4kO4Rl3rIlDn85O9xaF$G$HK8nek6QSQFnK$56xJg9W-mUFcaZBdqbY0wBubC8SkuwMlonoU1GnaVk9KBtgwbUB4rtc7ZwHK1XT6c4NE95gPN6DLIkTUibRHhP6pX+orqrjiZrQ1PPvv+dr83bl+G$PE9kg5rXBL6aUrQU40wJabtvh$lBFZzggf+0PdK7H99rDu75dbXHzETa6$cGL5nrqXDb+DDaVasKqNL5s86Z4cCdBaxUhHCaRnb7c8bG5UGXKN6LYJakP8qHxUAgQl-aLHzN8B+tFgiuVABXZ5yDYAkvtG7b7QymGcrryda8SfH8-4kg+m+h1t1KgRlZl$WiBu9LsDv7453mfGE+X$ZQsN-OhEfGXR+NsHM-su6kQgeLrb4chAKc9$MlprB5FdCbF06KHtigMNW0Zu-XFRW69JtAUwoapLynpJrHNu8ElQ9QkgYNXNlQ-8kXN0ct1dEK1rGJUA$mptK15iAr+rl$EaS86$UlkuM8J4HiFPJ+f78ElE1HhUIi6$PXjUAmQgCr5XbGmJ0LIk+a4ihk6r$1fftnhfpXurlXF9FZsESa58xwj-TvJfw8NkFZ9QsHA6ym+dyG3BKd9X6aibaiuPN1LAv0DRlH9HBNDDsd-aguArCkm$00-J5v9UH7SPlO+EhHFReRSaQ8hP3BEQottKEZIRYG78s-XgaXUwG5G7Un8tbEr9iJatBu8aFck01llDoRBaW4M+qHB7hZQ+B18KcbAEec1KzBgXbirtLm11eHK6xvmAM$6XSHUbLHXNrHYdB4F7bdgPIzu05isdVn6Z08hfaZAVPgG$xEo8H8Aj3lE4Oz7Nct-7ZK8Oa5MNl4iBdGoancjBubTawLDcStlEHXubVXYBxnxmD7UvSR51HrDZlI1v8KG1s8sdvJAKgArZ7c$ZdvQHD5B9KUPtc74HlB3a3$T$GikgUnjznvDOcvZKKFw9z0KUc4UHc4Ik0QWuEr-ZecYGmX4kX+gLgpkjmV4K4zj-3tvIprPBYvoGR1BaH$gimdW1IjF$Q+$ZuRa7MwlBYfSmya$fhj9AkAUw6GnVAR4fVR6RjRsRGG7VX$1rmrwiNU39hf+jBw81fu+8MDetqbIPinqP3PnJUJh9$Uc0PBlE+dO0L0mOfd0QaRIbmmnJuJ7cpsmKHK1Ut73995jKB7jN6G8+t8KNfcZEUKN5p$S1lzQgkgN1gOKQN6nzvI6f6ari10ZPqJDXYgUnqVubZ6q-16zKfEsJV6UKs1K+DP6OGKlvrEKui5oiej-JW7XVuk0p3lFFRiMra9KNr6Y4JVKc3Km6rAKZsVBLonANXUOuR1ivK5Lcc5ZIr+wm+U4DxgkmQdnj5jusZKRslspJiA$K-VuKoUBUqR6R$RZ5bcBNSUuP3VxVUgQe+dxX6QjNO9gpKeVdHrBIfrGzOBm7zHH7sN8uqCVzcixCjUFZUIHRoNZbLEcEsFZPlOjtx51r+DFQ7zAk+ndeJL0e+RXkZNUVK0zUuQ3$+dbZEGwL+K+FL8s-icZbAfVFDnxvxDHZ-1t7CA6tA1G5e$S$C6+jUax-FHk0mHQVBG7FC$auN9SNxV-J7XXz5IfzCRHHRJC$7k75ZH3kFPCm$sCbLPdFrN-9VJ84w01Lsf-J5UaInAVS36jtRXezftXDpBUgSVmZuc+KHjurWRO6fA+rhad9IiGH8KCnoUb9c+YP80x5sKk9xl8IqlF$q89iK4HAdzO+bI9SSaMLhVV77VVeGRfFsrFKxfAYIGr$-$M-O+4RyPoKGAhY6QS6csFNzttrRsDj9jWgnjzB+kYZ3dOJ50Nrwauro8UnYj6QnzjI0YmZysZkqROSbcpABqfzUE+fFRlZ$A$rOf800lKQLPGwol0XpdyVrATNAKeG7YG1l4w0o-9HmZzLuzwCzFKN7f+6oUJnsPnSwSwkYbJKUnPZ6KlwCBwamIy1jZH7IHomXkYQ+jkLtq-ETJOfYp9iq$cDu7O+mXsCzjCO1SuSDqdEXufL5sMmevuAMjsFi81N+ZpQPsbjwLf6gWHjNkOzRH5A99dGwkxRBYFzUNSD8Oa++tEr0V3FBasQMQPg9aufRd75tUGk4Cvs+8W+is8$NKC3A7Uw07F51fenLUpd+hoCBN60X0+C0VsWQNEHuJxZd8vLELVb9Y+F84gJGr0tHqhuL5cn5saZyCfZcc0NgP7vmaxv-eUNPVTaLLXVKz$Q-80kwUKUK8GWKeTD$bybnFQ1Ta6EB$oLml+N5IpNJPYJHryIuvL0olkcJC4X0hV8EQf1KCjNNRh$rI4cTIHk+KanRSQYnX9$RYzzBZFv0QoC$DFLQNfsR1R3dweaJSnTVL4Jk18LXzSkpr8jPR5ZUCD+Cqxq3E7TJqUxzY4eQ+ueS$swAzZr+NO4FlkllTUnDVlMB$zuZrt6MiW74Nujtt+h7VG3X0HfKdLZ-s6bd1g+wk6n3-OkdclCr+kcaLO4rzBtYUYhPrFq88nCJuP$+DyJvgG7wrZ7Y0E9zEE+orZrVvol0zsWXSkWMddWac8uwO1qmL0beTUrW1$Px5EIwI95Gja4mSOuS$xD$fNY$OkbNJsJCJZbFCUnYJtk75gQf5YscFdP-s4YpGCFlErG$GZPDNax8cA1l7ymXAqoxozx4KPRraZCMqWnTW3GfNpPg3J1E+W1lohPo7P1GX6$xGyTjewzqRXRQfrkwTcQE38GRWbFZrjm+678BGwAW-A1vHhaQyT$6PUX1IrJNTfOpX-1UXHUhWKJ+mIOaaT41xc+Y6$GvNXrX6KMwK4O+D1KW4lHGzIpE3kB7z5xOMHXD7jpHKrRiNwbfOHsKu8S66jGOS6Vpv3sAfxa9+Cs4gkNaJZkGD7$0uZn5y-xegUnI-rhL8c3hrZW+s87tppn5SegrGIbET+HK3h4s-3fvv9kjnqKegUiIo+aKuXZaU5W-lY6XrWcCdZjkraQIC9ggNZC-XcWXm769a-fe71j4QrRGmDxaPxicXDK7l0-0LeK64Sw5860aGD6Bk6C4UF044jQT5O-OVXQQ1KLk9LjOUH4+1EKQ4fjmX1V6p1+x-3r-Cas6ap1lh94Lelb1$mL$RgQxrJU6jUjzDQ$+4DO3ljgOOZrPpwic0Q-jmDcUnm4DmjtwAKk6h4H4tKZjXhOxh9rPjQOjHOWUd60a8aAcjK1jIG1+DR4bVKTPF1G1dPLpqOsZmsOSL5a-aqAmWC11G6QjaOkrapeCOXK0qLAlPGcZYwk1H$SL9BxeG7jE1P$R7r-HLq1KC4oUv4VL37rgXmBFOqhRB9zry1M60amO-4k1f5JLa3LqQ-8rtr6OzKXgqfAO4g76j71f4n-Eu3tKi-kZ8xJLZOTlF+j0616L3eO4aQ+jT4yaPS+tUZjlO-Xi+FPHINni7XVp+KewUgq7wj1i-u354DOKu6UO++4UX9xUU6OvIc55LacFgwPs0aZ5KaVkkLvPOTfih5+D34RlqKGIDvJa5svI$6-LIn0sxufQOHJ1Kjz6Yi3xxfwHOYapdlhA-uUjCCYHQm8nxKFsiCQ6f$69abcnJ37rrOOnH$Ba9k37OQOhhM+ZaXOQsmkjdKN+hgRUOnk1I$Xe+W7NRM9m7wIGUKfhkFI-iCIY+56gKZiAjqsOvXR-3qIiZOJUwEmxgl04DgMbr1B50hMP79whjujhX5a1ad4MaK$K8Ky-Z4tceXsdpI13$z4G-Rebh1w9-pGm1wDjKfa4nnighLOvPZRIRcp+EaUGOxCb8DmApFKxDHqi$rymqPDv1X6YiSjHa5aJQe9AYWlKR$R64fT8OQWtmGBXpqh0q6ye$rm6tsgHeKNsW9mD+A$yVWfwKfUIOvjPgc54l4rgrW+vjmLTb86OKFKHqKLkeU3nrn7H$PBaFUg+YGaso1ZK71-kDB6SwIm5LsOV3U6I8XEQDBspHGjsjrro$+K3KWaUgrRwctGq+LqH3OkirvEPDUi7x1LGapi+4aZaZIKwmgsF+LgN8I7r37O1n79K3LK-jllK6IO98+X951lUbVtpqx5MjYOia+6DOfs1w0Gq8JlgfmvKRWkSUgwxKyG9K+o4nFHKNVbrGYkvevMwrgsfE$D-WihjosyK8KEQ0i9YFXbnKjgmiaiZJWv6tOBO8r8rOOW$4c4DHB7tatUK7POKZrAl5aKKwltrY4IK$hwNpM+jcyKkcYdl-Fd8hOwjcaT$6dhi5PpzL$9x4HLK97Y-or3BiFWEUq+V6RLn-ZKeclmlMDwpmQYaGXPgNfEqObaMgW3hRvBd0av4C5c6jLrV1k-Cyv4IXHnIhavywuOhHD6JhDry50O8Y5qKXLtX+$7Ae1Dj63c+9o3e48a6x4tIYZf4Ni9-jUN$rZhPphgk8xyhKFsrZ5E-QGjU-nhx4p+HhOC3d6WzLajgyKIsjUNujHlS5y8wFDhFxFCQjCe4hOW6jq8bXwPCMQOWEwbjZHe5pjiQx6O$1dmlhmLgpO$hSjhmjKoLT5OHUUwzXZK9BbVQEjHVQJf4li5OWHNHKpak-blQzFij6$g9WKEaNcUmLmpQXor3r9ajYkaVHp44TKkAi-jZIr$+aXcfgqQKtwYrAsGcAaKnrx1GlhQSPBVjc1HrkZ+-bgV3Wv6xr1HYanlgYewpEaUQMD1w6YQkUdLB9UgwKTs7ZIia71ZsqKxfUvOFmY41-+LkYAdjCrH74s-KNY93W9rirg8RDyslIqZN+JsK1ay4igInrMDHqtLgBwssmGIvugV9JBvzin4453LIOVq0Q1Mm5Jcgj9MzkIWWuEfZK1KgqHFiyX1cSvRgPU1Ck1GkfYETkC3gqX7$WOxEV4xq1zizLjKtqav13CYNPXbfx-VC73QEiXH3+9C5S7ljoseLq4KQTWkYxg6mFEJJK$DqhjzisJfr8rTGxfOTWp786qE+n5VjzNb8SfH35QHxTFNb8G+Kicv7YWTkQrmJBatL0cky+WG3foEcarOORUgrKNDctjU8NolbEImKwqMwCrSWKZ1fBwSEjyTFlgacZKDtLq4wI10GfrMfx63qTFiHseBqEeLrkkRm0G66EEQ65a6epoGPU4gd6tglkIJLDNk9AnDFFda8m9hmDnaZBj0FkGEn+KX1kY9KMhU5QqEGOStjhM+-PUpwGD-K5hdeJqhpwZqxDCzN$LXKFcs$C$9rfcJh$EwV6DZIyHOZB1MEvXsPCJ6iQ0J0-hn9tkaMZOAhgEmiWrQB8DKKNXwzXJYUSO9QeruLn9kpTB5HLiN3gh7ErZB36QaN$Eg7PJISkcelPwLSXspqFsTGy4LGh7Gl7USJsmrlvPchg1g3aQ0KnGPDJg9BKzarJBpeOkSwadz$ZNtKAnEa10LLfUO$wH759L9LdmmJLYtVUrXBMozEJ8q+fUraPDPZwQYgFDQy+5GVQQhNwV6MK3Je8edJz-hDoK$VsAeY4K+NJA16DcCeuUqG9fm3AD30$1Nf6UndxZgK8eEJ7Kl4UhwErnmEf8BlfHdIeKgZWNZQBUqyTFlrIBr6G+qqxwgS6roU98VdC$76d6XeUfDtL7a1OK+L0Jz-9UzrAwrRjNnLZZPhjH4N-eZKtqwhyfwiO1hQp59FqH$gEkceacXZD-kD7-KlCYfg7+qOzszNIalvOytL71kdOveWt4BV9qfNPwfX6Jt5$LI$RnNpeYQ$nuPjpA611FWUW5BLRBkpK3j7uxBdfBpW$hnX4mEZMhzXNpK+6TnP4Bhb$An-9$7JPAO8FgNzqkC1r-ZBDDbvIqnQuHHZTX3l4afdeLaippHI8TdGkCifIsr8ZP+4q11yKni4U7D0B3+zr80al7tj3juGG7fwvya9kTvKcKxJ1ZSDbbxMWtsH$ObbK-q0FNHeMU5aYns3gA5mslfPblAEQDFlc6xKfbe+gZZpwJCvuVbTLqdHfdGQ3hLnvAP3CCcusbu3bx8BYTe-RCjuCEztg0gqGjCk8+bP7dk7qMXQJurPO7D0xLOqCUulEu9Z0HW-5aquNKXnJ$N6WqenuwZ5UlygADNetu7gHyq+W3dgr-5Ww$8nyv4DReeJbbk8uEgA5Ts$pr3zV$y7c1TLFuwZxdw0HAMKZSuwZB6V0gYMKZJu-ki6hlHr3o--Uhkn6c9Q$d4QM8ZGs6dkHacZQYunw584bACDRQLNlwX8n$7WjBAku8wMAfme-SWQt+v6mAt$CsMgQHu1Ze65uuh3S-6Utf4hsbx-DWZnRnaOXP0g83LQzZjk9XVmCpDQCQuskUXntebLQRdJwZCXF+AqiZeVNgDYVdXrl$-Y6AR+4jhJGgMHG7AZk6A67FCdXeqUAGCjzpArdhSxUPwrjzpRK8-SxNOk1snl7$DnYsg-kJsBl0rDkClUukZaNl73qoey44dW8WLxw84SwUNZv7z0RLc7SGKeZmAt5RWlDS5AGGbVmN+H6YZzHwZxCds-v3se1UdbCChbA95jeUARZbCXsliuHebA7de7nt99MYe5vCkX8tu9ZDYCdUxp3fnajDdVY0Us-RCMv9bMqZ58PduhbXGgOowV8EKTOUgRxUCYVg3+yUK+ZHmnhir7wc-7hkP$YYnB+kqh19OnI5ILaYbl$6KjsK8KWK7G9AMfMxkYpHKDU3hvVIh6WVSdd+oULA4eIhlS0a$xayf13bxL5RBbWYYOHjD66WRL+Ds$6eYbEeD8PhearvO-OaKKrV1ITNGhra$lKcLRfqyPd69rihTBvrj5jP4WKdOVLkiO3Fi1zgIa0qapKl1H17ZDbKKKsC61aLKy-+rKnwYry+pK9E7PUwp9Uk+V-Bhd99X6xKp6b-GQspI3KGbbmv0qK0i1DKP1DVKKwOOOhKKrUTFvNDBrdOY8AgChOhI4ajVIrgKQG6NDVrXVi0A3mevuukSQ6$KzqMOqJdW18VKKSqJukY-lT0fhKWxJDbahKu4Nc0eRuMvSocPgGK1ICaKP6F$OtXxtFH-XsKj+GajqVKqIMZPjzMf$K-xwOmHKpVCKEOS4qtMn6jg08AgT4KKw58484XeghOi6K8thkx5aWeuVrgrN-Hxawv0OdrluAKtKvMChKaazr66LBKV4hUPwf$N4AUColzJi+mVz-zBaUWVmHrUaghdx3Xl$KJsbOkg$cDcvWHXKeH-EnEHpWZIu$5aYbjquhUP6kmNVTq8-6K5ArpbBzR4ZbTgqgOdrerIt4OJ$lAKP15$BtNcxWQl646xVkKLKwPwKxaKg+ahmiS1WZO9$QXPhBUxFxk-MwQXptglOnL7N-LpKWthPKhOh64kdV9KpLzaqWGd6QjWZwQTKJawdKH6bZqPkjxhNHKKrXUT0aHIbFAHYdiwITdS+bgVStWcmIRAr+XXKTObhKKNBfjaKK"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: c72pUF3ZnAsAzgdu+C8i6A==$CDdWM6Htd9XiIONCQRRwcQ==\r\nset-cookie: cf_clearance=R2XUgrvPNyCE4FFU85xfRPkKK4E8t1n1eWqGShuSlWw-1779619212-1.2.1.1-GyGV5xojHBKRFNbjALDelL37pa.iLGwQxClP6yQ4ovmY.DgR_orIrP0jgTglVkai_To5uvYlNfdfb_YtHVVLj6sdOdgxfOle1yowoBi_8gAC3I5D0RUtnjoD3jNOdHWIe7mBimGt.pI7KBUygjFtOhn3obbFZRLjgjUgR0MQ1xFsw.DhmXPUpaGFVystfQGKk64lo3.cr8Z...iL504tpIhMPKVMa7wY0IvcJTEK6XzB1OvQE3n1TeCmTJXrETF2BzVmCyO5nfQTWNQ1CckXtyhzRKPuBQ_RrutFKs6Xre1cxiksKYgca2FNYTZiDaY7_ucPoeSojkFKpZ9KTqZdzQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=litl.cc; Expires=Mon, 24 May 2027 10:40:12 GMT\r\ntiming-allow-origin: https://litl.cc\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a00bae4dde2a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","date":"2026-05-24T10:40:13.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sun, 24 May 2026 10:40:13 GMT\r\ndate: Sun, 24 May 2026 10:40:13 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"93dbc328221d04234ec0229a2a357751","sha1":"c098ab648ec7dd7ecaa868985ebfbd7d807ad443","sha256":"5941ef48c9cd1ccdd9ec7e3a40aca2eed79f0e5659a454e96a9cf8b9cdaf115c","sha512":"8f0a0025a3e07f8548aed4f1918785d86fd8fe48f58e0cc7d26e950977eac3e120c750e772e9f9b294c97467c50b3065d16bb025b4ed74378b73df25d4115273","ssdeep":"","tlshash":"22b012734b90d4281f80c603d93b93fce4214024d650c0f0802c8fdc21502a34415850","first_seen":"2026-05-14T17:52:43.826722Z","last_seen":"2026-06-06T20:36:10.095853Z","times_seen":10974,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026bft=0dAFcWeA6Q6P9ARqJ6lg6l1BxoqjGtIX1YDTM8PQp642CYGK7mCwUKkJX7werfhQTfnsocyR4fabmxjBkM5jSraglx6Jf8p3AaCA","date":"2026-05-24T10:40:14.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42542\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 May 2026 23:47:53 GMT\r\nexpires: Tue, 18 May 2027 23:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471141\r\nlast-modified: Sun, 10 May 2026 16:02:40 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9ed966059e97cc398412044848ddecb1","sha1":"9f5ad531fb44140a3862805cd06db144f3703730","sha256":"c5e2bf086ee64dffddc7f69c6e818b1be976a5625c4429d9d779f3b6aff45295","sha512":"a7613c19158cb83e43bff01a505625ec317ff29491d7d30c08d7a6a7a07517755ee0eeddbf13ae62fa146e462679ca6d59ebfb4420afc583201a1400eb8ccd5e","ssdeep":"1536:K7Rpgh9C9ToL9gTNfWNfK4Rx5D9ZzhXwWxd1bx7:K7ArC9ULiTYNC4R/9Xt","tlshash":"40837e7338513a1afc2b8b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223747","first_seen":"2026-05-14T17:52:43.863106Z","last_seen":"2026-06-06T20:36:10.094957Z","times_seen":11728,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 26 May 2026 10:40:11 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRVtaS%2Bh%2Beh96o0cuR2tet25SzFzCXWY8064ohIgbmcMdafDIpLd4HValkyWYpXpJNHV0k6ZrvFRU9SyqHrpDRGRS7S1lWsAsepIGKu2ubmM1SvZeGlEYvJb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\ncf-ray: a00bae49cd4b5ebd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-07T17:34:42.691592Z","times_seen":363266,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/jquery.notifybar.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/jquery.notifybar.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 27 May 2026 07:56:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"a1e-69631eca-4acda10583330649;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 835\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 355403\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B3DUlxL3KIRSSD%2BfxS50XL4bZ58hUK3LqFMUu7YC2UYUse3ydikypgEuAvNXwTMQi%2Fj2G3PzIEuykgPgF8tkCw6Gaw0g3vDmLbPzIbI1USn%2BhTCuVxEm1QZ0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4abd735ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2590,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"d1a66bb296e8ba1c79f9bf5b820161ae","sha1":"db6b1a4b4b79b9070365de81da5cd3a9c4a91a30","sha256":"e387ee1319f99dd0223452d9ac7cfa7608eb0ada7082037c6b89bd4afce8c345","sha512":"f5e5b5de4393d1778a3cb54051565c8ffb57fbebb3a3c375094b11bcc788536e20c7f0c63ffdbb8f37d70b607cec63365be4bdd4376a1e4aac0eaecd76e5b7ff","ssdeep":"","tlshash":"9e51865d5663f39402327275efff63a5fa3381032848dc25bb6f82440f84662a9c56fa","first_seen":"2023-03-07T12:33:51Z","last_seen":"2026-06-06T11:49:31.392999Z","times_seen":101,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"a1.awin1.com/ads/awin/82281/img300x250-1769737631776.jpg","fqdn":"a1.awin1.com","domain":"awin1.com","tld":"com"},"ip":{"addr":"52.84.50.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a1.awin1.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:13:4B:E2:CB:82:BD:3C:2B:E2:BF:82:3A:DC:0C:86:7F:09:E2:49","sha256":"71:B1:C2:98:E7:8F:6B:2E:66:86:D9:2C:88:19:EA:8C:33:C7:76:F9:E5:D4:15:63:61:93:69:4F:1E:63:22:28"}}},"request":{"raw":"GET /ads/awin/82281/img300x250-1769737631776.jpg HTTP/1.1\r\nHost: a1.awin1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://litl.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: AWSESS=526216:4674506\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 29370\r\nlast-modified: Fri, 30 Jan 2026 01:47:12 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1RxfPpTfLT6cOjU8gVdeIx8A_zyveiBI\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 24 May 2026 10:38:12 GMT\r\netag: \"1339568d2719403ad4760c1358f9b31a\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 5f042aad530968241af9b660cec6b106.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: eXk-xqhOI-DaWYubyP2fw2b3FCDeJLv8nKCUOroL0TWR559GBzZWKA==\r\nage: 34586\r\ncache-control: max-age=43200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29370,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 300x250, components 3","md5":"1339568d2719403ad4760c1358f9b31a","sha1":"4bff7b3e6bad182e015718a426750b531bc19915","sha256":"2c4b322267ec9ecfc7370ccc727fc683d0c8c0b3855da9074b8c06e6ac7b8042","sha512":"3d30891236387e35ae5a005f28055bd5554e7a843884cfd6f55b55386ef51b357da23e7185830fbd6e6901280b409ae5319a51e4cc9322bdb25ecfdc86dd3410","ssdeep":"768:QYyKGKjbCmj5k0I4fi5nCChEU+pDQ4ZY4DKn9ifQPL:Q0HCWBIJRCUEUyQ4ZYB9GQPL","tlshash":"27d2d02cef6f3f2be7d6c6781162dfc093caa160b723936254908214798b158de68e56","first_seen":"2026-05-16T10:48:13.23568Z","last_seen":"2026-05-24T10:40:41.925927Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":20,"dns":7,"connect":4,"send":0,"wait":10,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026bft=0dAFcWeA6Q6P9ARqJ6lg6l1BxoqjGtIX1YDTM8PQp642CYGK7mCwUKkJX7werfhQTfnsocyR4fabmxjBkM5jSraglx6Jf8p3AaCA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.155.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:14.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"22:23:AA:C0:3B:78:20:8C:E2:B9:B3:D2:68:3A:EA:1F:61:C4:08:DF","sha256":"16:A1:EB:63:D1:FC:CC:47:80:09:5E:C3:61:20:56:39:EC:CA:BA:D6:D2:EF:7A:A6:D6:F6:D1:75:BC:EB:9A:2C"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026bft=0dAFcWeA6Q6P9ARqJ6lg6l1BxoqjGtIX1YDTM8PQp642CYGK7mCwUKkJX7werfhQTfnsocyR4fabmxjBkM5jSraglx6Jf8p3AaCA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 24 May 2026 10:40:14 GMT\r\ncontent-security-policy: script-src 'nonce-wC4oi5lZbBqDmtF7MvL5-Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17035,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"45a66d3d70f286ef73664a8664faddd1","sha1":"72c69bfd334f8a15f3314be162624c438a722693","sha256":"d10b722f243ed115b13eaba07df8b217e172eb37f2fff6fccccc94a0e44e853a","sha512":"2fc81c56558d7db83908010f6bc8ea77d8b637bf88405b680a3e77d083937a3142ca0ebc41f5a7d508c860dab1fa0762cecb5b4fbd6f60c8bee66738f56d82a9","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/b:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+a","tlshash":"30720f50041744009b839ce223ce7f34fe4e92517142d0b1abfd9b6beedbda6926939d","first_seen":"2026-05-24T10:40:41.926895Z","last_seen":"2026-05-24T10:40:41.926895Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.paypal.com/en_US/i/scr/pixel.gif","fqdn":"www.paypal.com","domain":"paypal.com","tld":"com"},"ip":{"addr":"104.18.7.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypal.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Wed, 01 Apr 2026 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C0:36:59:EF:1C:27:C5:6C:E5:5D:B3:36:5D:F0:54:22:2A:0D:37:55","sha256":"7F:40:B0:F5:9D:88:F9:2E:CD:35:1A:57:81:B0:C0:87:CE:61:4B:93:8B:C6:84:EA:4A:29:C1:33:94:FB:81:66"}}},"request":{"raw":"GET /en_US/i/scr/pixel.gif HTTP/1.1\r\nHost: www.paypal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-length: 0\r\nlocation: https://www.paypalobjects.com/en_US/i/scr/pixel.gif\r\nset-cookie: ts=vreXpYrS%3D1811155211%26vteXpYrS%3D1779621011%26vr%3D59922a9a19e647e0913ff384fe7ab4f5%26vt%3D59922a9a19e647e0913ff384fe7ab4f4%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Mon, 24 May 2027 10:40:11 GMT; HttpOnly; Secure\nts_c=vr%3D59922a9a19e647e0913ff384fe7ab4f5%26vt%3D59922a9a19e647e0913ff384fe7ab4f4; Path=/; Domain=paypal.com; Expires=Mon, 24 May 2027 10:40:11 GMT; Secure\n_cfuvid=mrvv0zLjxZb_Un9c5vmokA9F_R456vqDnnRkP.Q84Ik-1779619211.8222873-1.0.1.1-E68zJIPJ.1q74aAwwSCqYLylQgMK77AVRXxN9gJYH4E; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.paypal.com\r\ncf-ray: a00bae49ebaf8be6-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=0, no-cache, no-store, must-revalidate\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\naccept-ch: Sec-CH-UA-Full\r\ndc: ccg11-origin-www-1.paypal.com\r\norigin-trial: AmF3SS0NWoXo3HaojgmIVVXavukRnZH597u+xZNXRCiKWzSKzfNPHw9NC32GmblY12+HXpkCEYeYGyvRBNkkJg0AAABbeyJvcmlnaW4iOiJodHRwczovL3BheXBhbC5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ==\r\npaypal-debug-id: ca00bae49ebaf\r\nserver-timing: content-encoding;desc=\"\",x-cdn;desc=\"cloudflare\"\r\ntiming-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":7,"dns":1,"connect":1,"send":0,"wait":199,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Tue, 26 May 2026 10:40:11 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6zRWC9GLy5xFVOqJYe84%2BuH1LDqSRw0YCNfjKY%2F3TS4GKLwipZz0Sw6gyCaDPFWNi9TzMQXjcGlah51PMQL8Ba%2Fkxzc2yN2RfZIhje8huqbv7P%2B7a%2F19prIA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\ncf-ray: a00bae49cd4c5ebd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-07T17:23:04.592667Z","times_seen":112629,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/user/plugins/aiaraldea-qr-google-charts-a27ab72/inline-qrcode.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /user/plugins/aiaraldea-qr-google-charts-a27ab72/inline-qrcode.js HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 02:11:48 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sat, 27 Apr 2024 04:18:01 GMT\r\netag: \"2ad-662c7c79-9336e7ee0af836dd;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 305\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 462503\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38xeF21OIW6Dt662BH58ybXsVDBW5xmoL80hXuvN8VnXjvq73G8qd4ygLDeaQSbI0Onef26qQeFh6x5qil7t7r%2FezXEZUXR1UeYs5qu%2BsEqkVSjVf5V55Zxk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4aad6c5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":685,"size_decoded":0,"mime_type":"application/x-javascript","magic":"HTML document, ASCII text","md5":"d905ca2aa7bf5bb8c046c2a6d7dc9dc7","sha1":"4ecc0dfcb3f8a5c1bf72b23eb7613dbb00643b03","sha256":"e92a33302979cbf2a6b72dd7fd4998c4da293f972a6e1f74077ef2ada7491fb0","sha512":"2007252863d1682afb639684a0ec5cbac5bf8d22002ea4e12176bd56b9841fee00a8209b09ca215457f8bfe35b339a7bad014d6d0777fe7df8b2e0d98cf63fb2","ssdeep":"","tlshash":"f001fe14fda14d0d932b42b07d4b102d635ea02b06568e647eaca35ceb1662100afb7d","first_seen":"2025-11-03T16:27:32.052282Z","last_seen":"2026-05-24T10:40:41.930556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","date":"2026-05-24T10:40:13.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 373621\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 May 2026 23:47:54 GMT\r\nexpires: Tue, 18 May 2027 23:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471139\r\nlast-modified: Sun, 10 May 2026 16:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876736,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-06T20:36:10.061882Z","times_seen":13692,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","date":"2026-05-24T10:40:13.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42542\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 May 2026 23:47:53 GMT\r\nexpires: Tue, 18 May 2027 23:47:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471140\r\nlast-modified: Sun, 10 May 2026 16:02:40 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9ed966059e97cc398412044848ddecb1","sha1":"9f5ad531fb44140a3862805cd06db144f3703730","sha256":"c5e2bf086ee64dffddc7f69c6e818b1be976a5625c4429d9d779f3b6aff45295","sha512":"a7613c19158cb83e43bff01a505625ec317ff29491d7d30c08d7a6a7a07517755ee0eeddbf13ae62fa146e462679ca6d59ebfb4420afc583201a1400eb8ccd5e","ssdeep":"1536:K7Rpgh9C9ToL9gTNfWNfK4Rx5D9ZzhXwWxd1bx7:K7ArC9ULiTYNC4R/9Xt","tlshash":"40837e7338513a1afc2b8b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223747","first_seen":"2026-05-14T17:52:43.863106Z","last_seen":"2026-06-06T20:36:10.094957Z","times_seen":11728,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/js/share.js?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /js/share.js?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 28 May 2026 23:35:51 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"58d-69631eca-d6e72e05104c5af5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 560\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\nage: 212660\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBpZ%2FP7cPRQqSR24PPzuyP8dch1fj1b4MLrrSVDENfDrIVRTiDid07%2FFW9sgeo%2BiNstyGJD4GIacdbd81wHpWp6cKzE3e2u6gOw41ReUvK%2BcjzE8t6sKWHRm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4abd6f5ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1421,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"625e1fb9d5e74ee7bf404c757921deca","sha1":"c6ea5cb22a85909eb43b869f529d2194ec44e4aa","sha256":"dc2705487d7260c4b169954babd647da21098a586337faf627f9a07a05a9e236","sha512":"6e73a54b298f1d1e5f3040dee2fb6e84e285ac9fd3a765d5fe3c5096585bcbb5a258aa34ecc0d0e7293de09c96e9bc37b753d8c0747c946c72370d88cefa6032","ssdeep":"","tlshash":"d0214419f1edf6a5e23b21a17e3f7854632d245aa89ddc04fc3d8a841fc0655642bdc8","first_seen":"2023-03-07T13:55:33Z","last_seen":"2026-05-30T11:39:05.070429Z","times_seen":61,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"o-oo.ooo/js/AfPopV3.js?ver=26","fqdn":"o-oo.ooo","domain":"o-oo.ooo","tld":"ooo"},"ip":{"addr":"185.66.201.42","port":443,"asn":201702,"as":"skHosting.eu s.r.o.","country":"Slovakia","country_code":"SK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"o-oo.ooo","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 10:47:43 GMT","end":"Tue, 11 Aug 2026 10:47:42 GMT"},"fingerprint":{"sha1":"52:63:47:5B:BB:3B:0A:1E:D4:BF:0C:65:3B:DA:C4:A2:3C:62:FC:07","sha256":"DC:A3:1F:15:B7:D2:72:CD:E8:F6:4A:9A:F8:C7:63:80:E4:F4:32:1E:FB:18:47:77:F3:6F:65:DC:8F:F5:8A:F5"}}},"request":{"raw":"GET /js/AfPopV3.js?ver=26 HTTP/1.1\r\nHost: o-oo.ooo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 17 Jul 2025 18:48:59 GMT\r\netag: W/\"6879459b-19d5f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105823,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"73b0d4087611b356a0a14bc37543aa5e","sha1":"5e959a76299c94b9d6bbcea08a83068ea3378f09","sha256":"82ac7853c111dde43313fb661e8461ac68ca4f6d639b08ace5fb62ccaf3734a3","sha512":"5ccc1d028e0e401af2bd127676d2a82a1fc76f5c402d7ceba10dbd374604d1f2de55674e6e54dd0e2c9895a7b2e320a67c7cf489c7d54d20fecc3fc03827a5cd","ssdeep":"1536:1RY8OvlYcEKvheTo+JxL86OXyvHikoHpu1u+EZ7F50mn5pg4i86F8xnZUCioU6:g8Ovaclc1Hl8Z0mn5pg4oGRZXU6","tlshash":"cca35561710350d630e1d26e166ab3c12d795402f4298da6fc21fb9fcaaed93419faf3","first_seen":"2025-07-22T04:26:03.713313Z","last_seen":"2026-05-24T10:40:41.913374Z","times_seen":88,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":69,"dns":0,"connect":35,"send":0,"wait":96,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"o-oo.ooo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","date":"2026-05-24T10:40:13.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 20:57:18 GMT\r\nexpires: Sun, 23 May 2027 20:57:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 49375\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-07T08:20:47.127655Z","times_seen":872407,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":64,"dns":1,"connect":7,"send":0,"wait":8,"receive":8,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV","date":"2026-05-24T10:40:13.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 373621\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 18 May 2026 23:47:54 GMT\r\nexpires: Tue, 18 May 2027 23:47:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 471139\r\nlast-modified: Sun, 10 May 2026 16:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876736,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-06T20:36:10.061882Z","times_seen":13692,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Le1Yf8dAAAAAJNHTO2SY3uGDFkIlxwE462F1W4Y\u0026co=aHR0cHM6Ly9saXRsLmNjOjQ0Mw..\u0026hl=en\u0026v=Br0hYqpfWeFzYCAXLD4UuCIV\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=jcbqx7f6tdjz","date":"2026-05-24T10:40:13.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 May 2026 02:29:48 GMT\r\nexpires: Thu, 28 May 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 288625\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-06-07T08:20:47.188151Z","times_seen":647953,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/css/share.css?v=1.10.3","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /css/share.css?v=1.10.3 HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 20:56:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"420-69631eca-ddfe2698da10ba5;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 381\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 395030\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tmh9XyIpDpMRHGFv6GYU70d1tDpMnevyOR2X%2FYIpww7FZEGByhiV2T4aju3ffqYdCpRztme0ZEmSqD9HJTd3Ncwk0F01JbH6Xfa%2BaLYqIatHxP74NsYtWLOc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae49bd465ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e386b3e97f324e5229901f0876dbd0d6","sha1":"5ba713e85758e95f09060eb7fbba3f6e70292481","sha256":"041e4b17b1e9d9b3bfd8453720ef35dd173958eb9811809b289969f4d9db0446","sha512":"1f073e7c1ba0cc49ba49563e91c17709b6afa0272d45187248c9213cf0e3c8397f3b815cd8aadc12ea9e1cfef730d0583ca85851c45dcf9058499d7ab47057d7","ssdeep":"","tlshash":"9f112067f9856c5eb43bcb14bd3755d8824ee0138e694f10fab83c7eb0844845137789","first_seen":"2023-05-23T15:55:47Z","last_seen":"2026-05-30T11:39:05.064445Z","times_seen":54,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/user/plugins/aiaraldea-qr-google-charts-a27ab72/custom.css","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /user/plugins/aiaraldea-qr-google-charts-a27ab72/custom.css HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 29 May 2026 08:31:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 27 Apr 2024 02:53:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 180495\r\ncf-cache-status: HIT\r\netag: W/\"50-662c68af-a33ba2ba464bdbda;;;\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kOpAppbpri1Ahnr5VlXKa1IP3HJ47ZkqKJo190%2By1UREXDAo0%2Bpe4tPc8e37KsgKk9kej%2F5ucrcQHMz4vB6YvzN6Kv3UfLY37kATI%2FNb1LU%2Fb6ZIk9wUJuUL\"}]}\r\ncf-ray: a00bae49bd495ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":80,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f95c83f41a5aedea16f09a54c3f5f1d6","sha1":"43291e87a9da0f3d9f7a9992f7509abbf1d8f4e2","sha256":"c8b6be69f4215a44ebc11991b7a223b872c4eba83814f86c1d0029ce28d3efb7","sha512":"2eb7775276cc459943a7d4860ef8fed1180ddae732bf74686f89b8e58175dd792cab404f317ce20a5cd21b2274ca35c40458e722c9db75e715e814a6a58ac992","ssdeep":"","tlshash":"8fa00192f7e10889956e50daee5727bdaa6e08186b0d48b6a5a137358201ab7006581a","first_seen":"2025-11-03T16:27:32.101609Z","last_seen":"2026-05-24T10:40:41.935108Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.awin1.com/cshow.php?s=4674506\u0026v=82281\u0026q=526216\u0026r=2194957","fqdn":"www.awin1.com","domain":"awin1.com","tld":"com"},"ip":{"addr":"23.49.29.238","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.awin1.com","organization":"Awin AG"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Fri, 25 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"22:B5:D8:B9:18:F9:16:53:C0:DB:E8:19:C4:CC:7A:C2:BD:C4:38:0B","sha256":"97:EA:AF:7C:93:A9:47:3B:CB:87:B2:C2:8D:D5:EC:14:26:FC:7A:83:D2:3E:82:14:10:4C:4C:09:2E:C0:39:83"}}},"request":{"raw":"GET /cshow.php?s=4674506\u0026v=82281\u0026q=526216\u0026r=2194957 HTTP/1.1\r\nHost: www.awin1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nContent-Length: 0\r\nLocation: https://a1.awin1.com/ads/awin/82281/img300x250-1769737631776.jpg\r\nNode: Helix\r\nP3P: policyref=\"http://www.awin1.com/w3c/p3p.xml\", CP=\"NOI NID CURa ADMa PSAa HISa OUR IND UNI PUR COM NAV\"\r\nDate: Sun, 24 May 2026 10:40:11 GMT\r\nConnection: keep-alive\r\nSet-Cookie: AWSESS=526216:4674506;domain=.awin1.com;path=/;Secure;SameSite=None\r\nStrict-Transport-Security: max-age=86400\r\nAwin-Akamai-Rule-Set: default\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29370,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":61,"dns":36,"connect":5,"send":0,"wait":70,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data684.click/81ece301781a879b0cc9/3c56ac5b36/?placementName=default","fqdn":"data684.click","domain":"data684.click","tld":"click"},"ip":{"addr":"134.122.81.220","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"data684.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 03:10:29 GMT","end":"Thu, 13 Aug 2026 03:10:28 GMT"},"fingerprint":{"sha1":"AD:E1:56:C2:33:DD:A4:F4:10:6B:2B:E6:85:39:DC:A7:81:09:05:9B","sha256":"17:F9:8F:B9:66:5C:85:A7:A2:BE:8E:EA:6A:E7:CF:94:09:DB:DE:F9:33:44:59:62:59:CC:42:11:D5:48:CA:BA"}}},"request":{"raw":"GET /81ece301781a879b0cc9/3c56ac5b36/?placementName=default HTTP/1.1\r\nHost: data684.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-type: application/javascript;charset=utf-8\r\nexpires: Sun, 01 Jan 2014 00:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-robots-tag: noindex,nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nx-cache: MISS\r\nx-server: debian-s-1vcpu-1gb-fra1-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4043,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3bfd0985ceaa2194ce8a5e4fd0b298ef","sha1":"4f5c26ff61628b83581b4496f2133fb452f0a1d7","sha256":"2f6d069219d69a75dea47445bf62fe46dbfbe3b3d55b8ede3eca300e833941fb","sha512":"117623a7cd14860e22c2a18f31136167bcf163975283bf8b35cb95227a2992dca4bddd2be6125a75f932cf7003116c5e85b80c65c0221228677c8ed18453b24f","ssdeep":"","tlshash":"088144f84fd2e539e1e732959c6ea12c3571c133368598097c0c85643f60a7789aef9e","first_seen":"2026-05-24T10:40:41.936801Z","last_seen":"2026-05-24T10:40:41.936801Z","times_seen":1,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":84,"dns":1,"connect":30,"send":0,"wait":89,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data963.click/3e1677022f8a3dfa70da/946fa3a25f/?placementName=default","fqdn":"data963.click","domain":"data963.click","tld":"click"},"ip":{"addr":"134.122.81.220","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"data963.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Apr 2026 00:30:21 GMT","end":"Mon, 27 Jul 2026 00:30:20 GMT"},"fingerprint":{"sha1":"37:98:BC:BE:34:5B:03:F8:0E:85:1A:48:1C:EA:4B:47:02:5F:6C:85","sha256":"30:2B:B6:A6:0B:07:D0:30:50:B3:FD:5A:8E:80:8B:12:13:0D:ED:A0:9D:41:8B:94:1F:6B:25:FF:7A:26:79:3D"}}},"request":{"raw":"GET /3e1677022f8a3dfa70da/946fa3a25f/?placementName=default HTTP/1.1\r\nHost: data963.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-type: application/javascript;charset=utf-8\r\nexpires: Sun, 01 Jan 2014 00:00:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-robots-tag: noindex,nofollow\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\nx-cache: MISS\r\nx-server: debian-s-1vcpu-1gb-fra1-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4036,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"79352ea657de27dee5578192c4dcb12d","sha1":"166aa6482540d2af8a1dfe851828bebd3eac30fb","sha256":"8dc2f48a0b997e6497545dd946600659dc5553a12a5472d517057c05700c59ea","sha512":"9cea85bc09b7fede6b36e8d37b2f3c26619654cadb9cecdbcbe619faf0a67ee4c626f64fddacb731d0e99f1a3187c40bd19c7d8f91ee1fc86cd09f2016c01ca3","ssdeep":"","tlshash":"6c8133f80fd2a139e1e732959c6ea12c3571c133368994097c0c95243f60a7789aef9e","first_seen":"2026-05-24T10:40:41.938916Z","last_seen":"2026-05-24T10:40:41.938916Z","times_seen":1,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":98,"dns":0,"connect":33,"send":0,"wait":101,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"data963.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.paypalobjects.com/en_US/i/scr/pixel.gif","fqdn":"www.paypalobjects.com","domain":"paypalobjects.com","tld":"com"},"ip":{"addr":"104.19.184.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.paypalobjects.com","organization":"PayPal, Inc."},"issuer":{"commonName":"DigiCert EV RSA CA G2","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Mar 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C5:00:18:97:B9:56:2D:A2:02:A9:4D:5F:A6:BD:CF:EE:71:7F:9C:70","sha256":"64:BB:91:23:34:C5:83:1C:FA:85:2C:6D:1A:14:E6:E1:AB:9D:84:06:AE:2E:45:D4:68:B7:F4:BD:6B:F2:50:A2"}}},"request":{"raw":"GET /en_US/i/scr/pixel.gif HTTP/1.1\r\nHost: www.paypalobjects.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://litl.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncf-ray: a00bae4b6b321a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1052738\r\ncache-control: s-maxage=31536000, public,max-age=3600\r\netag: \"cfRCl5RHCPaxWqSUk2MFPH2cYSK1VnHOdKHxTvMGKADQ:5d5637be-2b\"\r\nlast-modified: Fri, 16 Aug 2019 04:57:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-content-type-options: nosniff\r\ncf-resized: internal=ok/h q=0 n=16+0 c=0+0 v=2026.4.1 l=43 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=4;i=?0,cf-chb=(39;u=3;i=?0)\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-06-07T07:57:06.941252Z","times_seen":73448,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/images/favicon.svg","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /images/favicon.svg HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 20:01:23 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 11 Jan 2026 03:53:46 GMT\r\netag: \"199e-69631eca-cf83dfd0e0b9cc46;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1948\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=6,i=?0\r\nage: 398329\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMexxMx2Zlxqh5GJdImoard4r2cS%2BI3vKlaIjPZGJknsU9d5StyrRThK5tb71Qk%2F9p2Y55NmtBk6aJip9sPKTRzB16KE4xJMclpxR%2Bb%2BthwrVqWMcynMivCh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae4c9dd25ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4c05ab7236d050bca68906e68f98ac1","sha1":"df213cf73e426ae0bbcb85d61fdccd7de5f38b01","sha256":"da81854b677df36c965d6d49e6d3a9fcc5016ece5a0f42781b9a2855bb1f8058","sha512":"4fc10cb831f78d187e1c0a0ad25bf388b05ccd49a46539f85eb7b38678d6947d865948014ff41be43c912df8506ce5646d867b21a91806453e73e3ce25b75ff2","ssdeep":"96:VkoIanLDRX79+yhYfLJoMLHV3XDwLBB0PTbBTr3EDcRv8+H9H1v8Cbma:Vk8IyuVHkLmTbeQTr","tlshash":"5ed18141a39d90fc626f4a245ce774021b1e68b33311290a7dcd6870df591e6e62beca","first_seen":"2023-05-22T11:52:16Z","last_seen":"2026-05-30T11:39:05.030151Z","times_seen":93,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:12.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=485OonNxJoRvKNrjuhZVpNRo6kHMKpDTztduHXtTOdE-1779619212-1.2.1.1-5l0OCNLghgWJ5W7WpLJkFwKSE9_kvgl2DLn7e4OMFiPAg9kvbCWSZWFkgnmNsBwk7XMOEYG20w0rJrMX6MO_slP5nes06Vq_xm781tfb9J0pwKLBTDtjnJh81ImGKfE3DjJ4GLqzx9YmMBuCoZTiUafVDRS_ny1O5PdkMDis1SGQL_x30SFC.Y6qektLjnfMI9v5l6IgR9yQAQqgs89XPdJdjawExulnSS7QeGYJXfqgdUfsUiySyC2ImKqDoMMcR3jTwGBvhSoOr2llbkuefHHAFPGa8NtPf92qo.28kw6W6InBjfXZU9nS8J.iAL0hThnD3iWJHQUd1jGJoFZWjg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/1eec422858ff/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sun, 24 May 2026 10:40:12 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a00bae4d2dfb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22775,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T17:34:24.203013Z","times_seen":16217467,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T10:40:11.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=exCHfhYMLTzZbQCB7NPZHQHpTx08qemnR2RlZG4YrQuFzuzFeGVR0oktVRCY9LxmITjt2ke%2BJpzdKEgt7V6S7rCUla5nPgGVVx%2BlJjzQlgZFAaRsVrSUuSxB\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=10,cfOrigin;dur=335\r\ncontent-encoding: br\r\ncf-ray: a00bae46b8dab51e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tablesorter","description":"Flexible client-side table sorting.","website":"https://mottie.github.io/tablesorter/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]}],"data":{"size":14065,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1676), with CRLF, LF line terminators","md5":"1e29a0bd5a9ec424b2dce5653ef2fe16","sha1":"b4ad539a1e5cceccb922f73df45cd51520d1da9d","sha256":"e58be097a944e45979c0f1a17a228f9c9d16d10a149b33805b682db919222939","sha512":"7ddb873623f51ec90b9ed26c60a280be0912befd753c224dc868c675c8ff9bb506b3ef70b9083b7f889eb4acf9485d8bcaab230fc22734ac3655cd1cf1ad4fcb","ssdeep":"192:psKHhHbtsku4bwc/JBscnBTgPILlS6nl9Jpd6BsEdlnx/3dNq:p5BHZsWbTBgPILwMlj6BsEdlnx/3i","tlshash":"3052e87b3c04e9164a9210f193a7fb48e17ba15ae600ec95bcdc94e92bd0bfd042b7d4","first_seen":"2026-05-24T10:40:41.941602Z","last_seen":"2026-05-24T10:40:41.941602Z","times_seen":1,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":351,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"litl.cc/images/litlcc-logo.png","fqdn":"litl.cc","domain":"litl.cc","tld":"cc"},"ip":{"addr":"172.67.186.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://litl.cc/","date":"2026-05-24T10:40:11.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"litl.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 18:24:41 GMT","end":"Sun, 02 Aug 2026 19:24:39 GMT"},"fingerprint":{"sha1":"C7:9D:FA:A7:D9:D0:3A:31:43:58:3C:0C:14:29:9D:CD:49:19:D2:47","sha256":"97:83:F8:98:C8:2B:04:94:17:F1:6D:F2:B4:AF:10:D8:BA:65:6B:85:61:C7:CE:2F:C6:D9:08:24:46:85:CE:23"}}},"request":{"raw":"GET /images/litlcc-logo.png HTTP/1.1\r\nHost: litl.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://litl.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 21:17:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 17 Feb 2021 09:31:55 GMT\r\netag: \"2997-602ce28b-c3383ba418b92e5;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 10647\r\ndate: Sun, 24 May 2026 10:40:11 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests;\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 393743\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYEMzjKlYb%2B6LscLpDpbI6X8rbV%2BQ0FZvtnIX4tNTGTCl4eM0cIcTJiNcahP746HOwT2LgyMubuvuaKUebJAJ7lmxWGmDeYdBxZ2t2qwJ44prV9C9EWpiw%2BI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00bae49bd485ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 229 x 71, 8-bit/color RGBA, interlaced","md5":"c6ca7323cac3dd6c49e4482d59c6b6a4","sha1":"7feaf81f1caed083c982edae9b3658780b6438a1","sha256":"e6d11b4c26ff15bc4d5245423e267827b71e0371b2ecd87c573c068f565a436b","sha512":"7bc9b713002dbf48008262ba476356d72e9aec3b6452c3664a7d4be802059a21dd92076109194b131c21005aaf861f81f7255ac71338ef8af4e5dcec0c84a19b","ssdeep":"192:USrFVj6V2jCnpzvIuf1cFHDto7dsYprtvWTVWfYF4cbEaA9dtUJJt:TrFVjm2opdWZD2sYpRUgAGcbKAJt","tlshash":"4d22bfc4036e6a10e91652599d7628abd071be336b2b4a495933c77231396032f7e2ae","first_seen":"2025-11-03T16:27:32.077707Z","last_seen":"2026-05-24T10:40:41.944215Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"litl.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}