{"report_id":"f9cd0017-75f0-402e-b480-09ebc4f63848","version":6,"status":"done","tags":[],"date":"2025-10-21T15:58:34Z","url":{"schema":"http","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"172.67.206.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"title":"Log In ‹ หนังโป๊คับ หนังโป๊ฟรี หนังโป้ JAV หนังXXX หนังเอวี คลิปหลุด คลิปโป๊ หนังR แอบถ่าย XXX หี 18+ Porn — WordPress"},"submit":{"url":{"schema":"http","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"172.67.206.122","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-25T15:58:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"gmnpg.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"xn--42cf7cgd7gxbd4m7c.net","ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-18","domain_rank":0,"first_seen":"2025-10-21T15:58:36.203784Z","last_seen":"2025-10-21T15:58:36.203784Z","alert_count":20,"request_count":20,"received_data":1144869,"sent_data":11988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"gmnpg.org","ip":{"addr":"104.21.27.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-10-21T15:58:36.20074Z","last_seen":"2025-10-21T15:58:36.200741Z","alert_count":1,"request_count":1,"received_data":3883,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-05T14:33:42.509453Z","times_seen":237239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-admin/js/user-profile.min.js?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1de3e5a5414ebd5a0c7bb34775699c6b","sha1":"6a7465b6b07d443192e31fa0f9d2861d61256671","sha256":"82c6bfb74d9516de0bbbaa41fa93898222b84b04d99b46e4fa4acb8d8af6e193","sha512":"7521551b2cdb2ff8a46c70e1d8dcf9db6948cd7dc6ccc8f222f01d351b8a59f82480b96cec2d0156dbeec4a58d10a9f992e8c97118dabe1dada0d9b19d893bc6","ssdeep":"192:oqStGKaRMOOuRO2ViNnmOnDYn9JASQmVvr:QtGKaeOrhGDY96SQmVvr","tlshash":"16e19998b1241af2157762b15067660b52336a3dc92689d27172939c2e3ffc313aff1a","size":6862,"data":"","first_seen":"2024-11-13T22:56:15.849368Z","last_seen":"2026-04-05T03:51:34.521148Z","times_seen":5130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/zxcvbn-async.min.js?ver=1.0","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6f045d5e79f0a4f5ce90419ca598162","sha1":"45d70af2ab1d5d4ff738afc052758a0242f31a00","sha256":"e93e18f2f34a865e27d2d839eaccca6bec750d357f1c937980026d6d25507c2c","sha512":"e8f3d6188362292742fb8aa67e50fb4a6b1b2abb5902b3d9bd24d4b22f7912eb070974642613f56e02301306262727887dc3e0bc2191f07d41c9abf8f5c6dfa9","ssdeep":"","tlshash":"41e020593c45da34e390105663abfb06b066425555104853808accd57578dd68169ecc","size":351,"data":"","first_seen":"2023-03-07T01:19:17Z","last_seen":"2026-04-05T13:37:08.761765Z","times_seen":21698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-admin/js/password-strength-meter.min.js?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2e45ac2d733c572ee0b3b5dd53c7cc0","sha1":"f0d35678945439784d91ded2f48936c0396095dc","sha256":"fcbe9e9ff2d1c20cab10bf43dc49914e188b44ae21f34257b4a0ef5cae90f7ac","sha512":"6fcb958d271ae4404c8cf4bedc87ca1b938c6f51e61f37fce1da9cffeffa3006eaa0ebdfee5e39c87cd37cb51160a1b27e88b3f4bc57d9f5a58bc24d3ec182cf","ssdeep":"","tlshash":"6a2126f431946d62daf2239415730315b27b5d3739018de49ef8464c723eed2c283b84","size":1123,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:37:08.868052Z","times_seen":22379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/wp-util.min.js?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","size":1426,"data":"","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-05T14:30:33.83638Z","times_seen":97070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/a11y.min.js?ver=3156534cc54473497e14","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d60d16abc088d80092cef147505a08e4","sha1":"681fbfeb2a611e0db7620dfc72af70a76aa67a7a","sha256":"cf1aa9163953fb477fe5cf452229042578738fa9e600c6ef64c47e4635ba78c2","sha512":"57100e48a4a04b95910cf5f2967883d8d259b2b68c82f0eaa12bbde4d6ddfbe7710cd741db8e727172cc0bb27b8825afd8a72c2a34412f242b951f6ed47b60fa","ssdeep":"","tlshash":"2f4131723450767294bf66f79c3d93c6bf358a303a47e0549e0caea93239c9a21357a1","size":2358,"data":"","first_seen":"2024-11-13T06:33:24.842079Z","last_seen":"2026-04-05T14:22:28.940892Z","times_seen":37612,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"215a37bfebab517e1b8a5dd390046322","sha1":"da69ee53bafe3c196e481412a4a42689ba6691be","sha256":"b075ca877d9ccc6206cb3326d2f1262f05b4f9c22383bd33d2b846dae9555070","sha512":"2a6f5caf2be2863f7bf9931ee85f34cae9cacf4c5c29a8ab8d19387b8a1d829f72dbd04be389edd2186a10ebf3db60fb7521bffd6e32445ad96aef509c118120","ssdeep":"","tlshash":"d3b01211a4000af548136bc136ec83817d7755c09a817801d0bce002d9f1c06cc42fd8","size":100,"data":"","first_seen":"2023-11-17T13:40:43Z","last_seen":"2026-04-05T07:28:51.169487Z","times_seen":4353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f71e6db4ef3675e27415701fee8cd045","sha1":"8cb4a2802a09c58ca3bae909980b63964e3de451","sha256":"ff0d8ce026c52671fc051e310103de620a46e23d435c69a27c500b36187215d6","sha512":"3f3908c149f1e7730a0084b5255931664696d65a74608c2929a4ae2e3a9c9880ed23cd1460a8e441a3171e9ebc67d56600da9b83bddfed4382e8b6c12408eba3","ssdeep":"","tlshash":"0ed095b23446653241fb35b4647f43cc4cb3c2153c205083941d05e1dd76c879772f88","size":250,"data":"","first_seen":"2023-11-17T13:40:43Z","last_seen":"2026-04-05T07:28:51.170123Z","times_seen":3214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","size":457,"data":"","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-05T14:48:13.860178Z","times_seen":82330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/jquery/jquery.min.js?v=3.7.1","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5d708aa60534ea8961ef7f4cd34d7d","sha1":"d67116d661ef31324a2fc897e09eb13e58bcdb4f","sha256":"6b981684218b66a97907ca41fd04ae26a0b6f9162c970347d59f5f16bb09e70e","sha512":"294683b5ce3eb7876bff6d5d46dd736ac563d8e08e1a7ad9d59f644321134963e31db3233931a94c8bfe5036b4f748124dab164c9968ef01eaf93633f4271e94","ssdeep":"1536:pC3MBNveGTqMGxxaxskraIR77JNACgr26Sde/3OErILaB2khE8cw4px771gTFhQ:gcN/JNACo2HirILZL1ZgTFhQ","tlshash":"5e8308df72cab02247a730b9007f550af276199d684d8400f159e8d9bc7ca8a527bf7d","size":88460,"data":"","first_seen":"2025-10-21T15:58:42.811913Z","last_seen":"2025-11-01T22:54:44.588078Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","size":18905,"data":"","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-05T14:39:13.915026Z","times_seen":89978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gmnpg.org/profile","fqdn":"gmnpg.org","domain":"gmnpg.org","tld":"org"},"ip":{"addr":"104.21.27.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb0b3bd3c78b42717337957b8b03557b","sha1":"f66aba67f250ed59d9d6ac870f817d1ef8e03cf9","sha256":"8eb64190f88a3aa7d794474792264798d7db1fbf2e6a18a98bfaca4b704a4376","sha512":"aaf301515db7cc62f3cbd20b563df15730ef16fb4eb04f39508f8ecbce53a7e18fb47cbea1db572e37fcfa9548357b6a9731b58ba6b13d494ef3845f52bbbcb2","ssdeep":"","tlshash":"b7611245b1f0ed9d03a353b7226f7ac6e866645e3c4ccc8af01ba41124a9712d8d3a70","size":3360,"data":"","first_seen":"2025-10-21T15:58:42.806535Z","last_seen":"2025-10-21T15:58:42.806535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-05T14:47:28.271497Z","times_seen":596840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-04-05T14:49:41.029537Z","times_seen":205396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/clipboard.min.js?ver=2.0.11","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e27391ffa5b7b7646a497ede69b554e2","sha1":"d97711085914cc040b151fa12f1799dda892c6f9","sha256":"700c8bd73d93522ca53cdc35e2a71e96caf7c344bc7a8391f3af90c10b917033","sha512":"9cde02c5747b8b36be59e73342d67d11b53faecf2e297914eae9712abb3838264b16f9cc41ef8ac88e075c8780832e51771ea61460c51fd773113ab6566a234f","ssdeep":"192:jdHxtMHHwpUJTyHg4LyAalqkp/eo9sfkA37wx8p:j9npUJTKzGqAGoWB7wx8p","tlshash":"4b027498b291b0f15ad731a8412f920ff276a569708bd090d279d4f0acbcdde4463f39","size":9009,"data":"","first_seen":"2023-03-08T14:28:12Z","last_seen":"2026-04-05T13:26:54.396214Z","times_seen":11372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"995fc5a57ae0fc658390cb0ad71c806d","sha1":"446c1e04d12067046c05981c1a8054982f003f13","sha256":"794aba12c35785f2cda046cc6771c57deabf7a487b032e182ffb23e2915e6e58","sha512":"5a42a3c73d5f4991fb33e3303c2f0e24ed62d55dc4835e94ecf3f831bc0637c0c09ee61592c4422ffd1c63cf40dd151b3124b2db61b6fa3c5cdeefdad6963c12","ssdeep":"","tlshash":"6eb02b01d474044002c000e0125911398dab3417b50494a5c44cdd545d720f084ce60e","size":128,"data":"","first_seen":"2025-10-21T15:58:42.816484Z","last_seen":"2025-10-21T15:58:42.816484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02d7d8402b7ddb8e6fe47f2a35071e8d","sha1":"174b5a8fe0ecdfa989fbf40f3ecd51f1d0117693","sha256":"8a96c1a0a8b1c2a8eab8adfa21634b7f2c4226f6bc5322df1ab7efc4f1f1af7f","sha512":"aafd7e64bba6934b73597de06bf30303d6bce9ea9e981102d881c52e8543d6ce7b5310694c6b230635e66557019cdf79b99bfed422f3397d892f5ff754500e8e","ssdeep":"","tlshash":"c5b01285308728818099e260ab62fc01499215cf064ecd4429d8df64afa2480f4c231f","size":94,"data":"","first_seen":"2023-11-08T00:42:21Z","last_seen":"2026-04-05T14:46:06.253127Z","times_seen":132157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c32aa77a529b98d09f633823e17b98d0","sha1":"3b19228e265ee66caf31e4f7628b3bbf7b3899f8","sha256":"84b370ed717643f59f4b407442e92facd66ff2648138381f43527c6b1093e622","sha512":"0ac04ab3e25628d3bac5a06ed9762a6c58ff8dbbb7ee72b02c20ec1684df1994c2d0f8c7a0c5e405978c427e08ecb3bf67f8a030e30260d188801e9669e3c375","ssdeep":"","tlshash":"84c08c30615248e05b8042e0e04c3aaafaeb4b50802571e2caceaa9c1e7fb00817a729","size":171,"data":"","first_seen":"2023-03-07T01:02:49Z","last_seen":"2026-04-05T07:21:32.350439Z","times_seen":7528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb3a538fd2a39c22198e72c3b9f498a7","sha1":"c966ebdbd2701a0980a85671126664f3892d4f1e","sha256":"ac233233e7bcaf806041b243578fab081dced8a045d9a82756410da9ea2382a1","sha512":"fb50d60ece94f9447a8deaf22fa3d2422f4b6eaff522833fb311495ff653339896e7bf0393fb12a537b538f9bdb057369cccff99ce38d9449ed1e6d41f510ad9","ssdeep":"","tlshash":"4fb0125c64542f8b61e82ceba168b3ab6ad1235058244c1127c9d5540f12804cd84349","size":96,"data":"","first_seen":"2023-03-07T01:02:51Z","last_seen":"2026-04-05T15:08:31.214692Z","times_seen":43611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/zxcvbn.min.js","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"027c098ebca6235056092f7b954dfc5f","sha1":"1ea18e5e6ece74f6f3a7c1a57d2ac2462c9c666b","sha256":"daa6634ed8d6376bfd22d8f68942d00e1b56db0fa8c9f90ba2af52734dd5593b","sha512":"135d02cda1e1bbe6196854d20fd052001127355fbe7e330757c6c741309372c1032baf746372f46f4893903c7adda52e5902285fe351e4d1159df92e3354d197","ssdeep":"6144:FTVmi9vezsy1+gq0WjRBHA7EY7FPHLkMM4YU3UdZLwVxBc8a6pkX9FYfx1K58s0T:Fwi9ve31P6ixvA5xL8bK6sB0V+g/FHB/","tlshash":"03055b8398181bd87325272c14db6f0cb77848b66969caecd36b8dd193a67d130d3c9b","size":822237,"data":"","first_seen":"2023-03-07T01:19:17Z","last_seen":"2026-04-05T13:37:08.945873Z","times_seen":29443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c31238ae6afa4cd21cbae0105bd1f12b","sha1":"aa419860f3d6ba337098407a011923b4fb3916e5","sha256":"0ba00fc2d00c25f4ac5eee4b30a8bd29d393ff8b0b0f8617496966634994cc02","sha512":"3744bc97469f06ce05fcfb9c00863a4b3748f63081c71e4ce7e95945ce81552a7d8467970b9ae8f62f0448fdf0f10fe758989c7a622c05ba0362d1be8555aa5e","ssdeep":"","tlshash":"75b01200c442289120a5245132d40675129f2130405528841ebcc0250fc600281d4144","size":87,"data":"","first_seen":"2025-10-21T15:58:42.81988Z","last_seen":"2025-10-21T15:58:42.81988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-05T14:33:42.490039Z","times_seen":210260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 15 Apr 2025 18:05:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"67fe9fd9-49d9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZwPrEoutbneYLCvz%2Fi7n0k35lsl6qzCzYVS8IqAUphY3NPqcuGi8c%2BoXU%2F8SYhK9l2Ht693SuBPahXDNZZl%2By%2FEr7urFoEPcUsAbyCMUxVuliW7P527EfM%3D\"}]}\r\ncf-ray: 9921f4671a90b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18870)","md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-05T14:39:13.915026Z","times_seen":89978,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":494,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/wp-util.min.js?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 21 Oct 2023 11:51:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"6533bb28-592\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdiEaTwfUFaY45Z2MWDWzIlnLRVzNtPrXMkt%2F4ilRw8zGqXjeuU%2FHGk3%2BeWKBmp2AHE4oTjTX2SjYkLXH4LkM%2FOaIdFtltHAQtyfMTzuXtXu8jDeoZLfthk%3D\"}]}\r\ncf-ray: 9921f4672a91b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-05T14:30:33.83638Z","times_seen":97070,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-21T15:58:07.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/ HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: PHP/7.4.33\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d1c4BKVTwYfrClV2NkCVe%2F163bvX9brFlL9ayBMuuJuTz%2FyuML3%2F69MKNkYKKaeWBapvsgQYmdVdsgFxwsHIo1CdNxev1WYByZwLwAy%2F2Glks4IsmViRMck%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: wordpress_test_cookie=WP%20Cookie%20check; HttpOnly; Secure; Path=/\nwordpress_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/wp-admin; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_sec_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/wp-admin; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/wp-content/plugins; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_sec_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/wp-content/plugins; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_logged_in_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_logged_in_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwp-settings-0=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwp-settings-time-0=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_sec_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpress_sec_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpressuser_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpresspass_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpressuser_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwordpresspass_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\nwp-postpass_6e5d84294799fcfc8b9a6503b3684b06=%20; Path=/; Max-Age=0; Expires=Mon, 21 Oct 2024 15:58:08 GMT\r\ncf-ray: 9921f4624c70b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":7846,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"4e9d7bba71c1a0eaa516b7c7d4ffdc79","sha1":"ca66daa4593ef6aa15103515202223d0246ee583","sha256":"eb9b46e7d4a84c9c89cff96db314a7623bdc1f12ded7095251911f040e64be11","sha512":"1714973f9e5a7ba7aba094990567122c4c5a5f8c4daa432b172484ed7bc648f3b6a2d8e70cbe907010a543509d587d2d3142435a2a4126facdebdc9e710abdde","ssdeep":"192:2PCYWZcYGCY6MAY7CYQby+MtO7VZuHVn524upc+aK+/6V/:0Ip+rAyQbyfO7VZu1n524upc+aK+/A","tlshash":"09f18493ac0d8c06520116e490f9b21dd15fbe22db05d4d5baf78cc9eee6f885812ea7","first_seen":"2025-10-21T15:58:42.795309Z","last_seen":"2025-10-21T15:58:42.795309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":23,"dns":0,"connect":1,"send":0,"wait":404,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/zxcvbn-async.min.js?ver=1.0","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 21 Oct 2023 11:51:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"6533bb28-15f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhHmkdqbZHpaMCE0z7nD92hXV%2Fp4WKzoh4BP1Tr1ZkDaVwL0vRTHQsAbkv3VXDiZQTbP7h%2Bp9a6sf%2F7tAY2GQCzohxU8pBxu9iVr2thhr6WcunO01obtGFY%3D\"}]}\r\ncf-ray: 9921f4671a8bb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (316)","md5":"c6f045d5e79f0a4f5ce90419ca598162","sha1":"45d70af2ab1d5d4ff738afc052758a0242f31a00","sha256":"e93e18f2f34a865e27d2d839eaccca6bec750d357f1c937980026d6d25507c2c","sha512":"e8f3d6188362292742fb8aa67e50fb4a6b1b2abb5902b3d9bd24d4b22f7912eb070974642613f56e02301306262727887dc3e0bc2191f07d41c9abf8f5c6dfa9","ssdeep":"","tlshash":"41e020593c45da34e390105663abfb06b066425555104853808accd57578dd68169ecc","first_seen":"2023-03-07T01:19:17Z","last_seen":"2026-04-05T13:37:08.761765Z","times_seen":21698,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 03 Apr 2024 06:05:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"660cf1a2-23b5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TizCE%2BoTfd2E0qZVSOh%2FM%2BI2C1ADPxtR1k1sm%2BJfTXndmaOvHIFmxSYvkm7MeZa8gPTlqBU6I%2FnwJyKPkwJrij8tmeMVVMZmH%2FAuaADmuQyxVfSPvf4%2FikU%3D\"}]}\r\ncf-ray: 9921f4671a8eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-05T14:33:42.509453Z","times_seen":237239,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/a11y.min.js?ver=3156534cc54473497e14","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/dist/a11y.min.js?ver=3156534cc54473497e14 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 13 Nov 2024 06:05:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"673441a4-936\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uO9VQWvbTLHx8rLFAHbjU0ULg5kROurCIAyll%2FkKQpGnArxRAhGggw3uGvda03VAgUkQOqleEgf9rlnbdr5JA7o14JyJPBEN8SlInRZvSX%2BPZA4ZR%2FaUPuQ%3D\"}]}\r\ncf-ray: 9921f4672a93b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2358,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2322)","md5":"d60d16abc088d80092cef147505a08e4","sha1":"681fbfeb2a611e0db7620dfc72af70a76aa67a7a","sha256":"cf1aa9163953fb477fe5cf452229042578738fa9e600c6ef64c47e4635ba78c2","sha512":"57100e48a4a04b95910cf5f2967883d8d259b2b68c82f0eaa12bbde4d6ddfbe7710cd741db8e727172cc0bb27b8825afd8a72c2a34412f242b951f6ed47b60fa","ssdeep":"","tlshash":"2f4131723450767294bf66f79c3d93c6bf358a303a47e0549e0caea93239c9a21357a1","first_seen":"2024-11-13T06:33:24.842079Z","last_seen":"2026-04-05T14:22:28.940892Z","times_seen":37612,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/favicon.ico","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:09.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:09 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLiA1ajA7NfVfNXFTcmy1OGNzEqTrsCiBc9Eh1bnu7OX3YsqlDLDOaOObtZtakWk9S5Km6gI7pQhPZEoSQCOUbjzRfOFCGweQAYHBi6xA%2BtYia7bMrCSO9c%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9921f46d6b26b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"932da5a430ff6db1bc48425b567d56fa","sha1":"e7e88023dbbc6346d354ffe9fb7db957888c2299","sha256":"10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325","sha512":"f30ad93d17d8ceb3ec2727a08a6ce7fc59da51a66ba7aeb2ab93efc84af4e16ea442769f9a5be140287e24d3e431218b0fec1e52e78ea70e5f8607b6569108e4","ssdeep":"","tlshash":"51c02b2d75137c4cc963327422c37180c0c6833764ba8112c480800331cf29a8ac3397","first_seen":"2023-04-05T05:55:13Z","last_seen":"2026-04-05T13:17:04.441039Z","times_seen":5443,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-admin/css/forms.min.css?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-admin/css/forms.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:09 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 13 Nov 2024 06:05:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"673441a4-6f20\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5DeCaExB5y2dG%2F8sn5kECQ%2FuAaDjxWLrPPWvSc4G72Oj7fn9lRDELHK7ZRWJjxL96WNHf7KnAexor800jMoA%2B25fkgBvnvxs%2BJvODiDUg%2BRhgXn0MWttEE%3D\"}]}\r\ncf-ray: 9921f4670a83b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28448,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28413)","md5":"c9c9d6f656dc8529026ba5199d1fa16d","sha1":"6413219232072d3e77ee47ae8e582c942fdeb274","sha256":"7543d0f51f9aa8ad7e4331ed88d0ddc6e39bd99e0a715a1dd60e936ef98dc329","sha512":"86b78ba2ede36f1cd4994dc93ad669b6cd5d2a6abd6ecdabf7f560ba06f5a26df0c07f3f9a25253ab3300eab82bedbd9ef4e3f6cfcb7d7b10839fb180c9e4330","ssdeep":"384:ltFLMro/koh0QiKnWPfzBn56VGTA99CQk2Mu:lJ4KWPfzh2YS/","tlshash":"02d2e962a360354af417c576abc2e7d937129627620757b6c8276afcc74e0812f32f6c","first_seen":"2024-11-13T22:56:15.80761Z","last_seen":"2026-04-04T17:09:36.165323Z","times_seen":5135,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":547,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/clipboard.min.js?ver=2.0.11","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/clipboard.min.js?ver=2.0.11 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 21 Oct 2023 11:51:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"6533bb28-2331\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DS9OBNxK%2FaFHqkp6afNQl0PT%2FtBkiaKCQT8f%2Ft%2BtwZjRJbPI27wRaT2Ql682uo205%2BbfRedYsYkNCjfBd%2B0MvST80sByCKC6zg7JvUwtSy5vZkKl%2FYQgd7w%3D\"}]}\r\ncf-ray: 9921f4671a88b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9009,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8974)","md5":"e27391ffa5b7b7646a497ede69b554e2","sha1":"d97711085914cc040b151fa12f1799dda892c6f9","sha256":"700c8bd73d93522ca53cdc35e2a71e96caf7c344bc7a8391f3af90c10b917033","sha512":"9cde02c5747b8b36be59e73342d67d11b53faecf2e297914eae9712abb3838264b16f9cc41ef8ac88e075c8780832e51771ea61460c51fd773113ab6566a234f","ssdeep":"192:jdHxtMHHwpUJTyHg4LyAalqkp/eo9sfkA37wx8p:j9npUJTKzGqAGoWB7wx8p","tlshash":"4b027498b291b0f15ad731a8412f920ff276a569708bd090d279d4f0acbcdde4463f39","first_seen":"2023-03-08T14:28:12Z","last_seen":"2026-04-05T13:26:54.396214Z","times_seen":11372,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 13 Nov 2024 06:05:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"673441a4-12a8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcaNCL3jDbbxTIx2H%2FIuVWgTIGHIJrTpWEnAfdSkqCTKb9pzM%2FuBEgQ7JawMm%2B4K70%2FP8MJdr8UdXDYvHRzNedrSY8Tl9daQ33totcjDbRLJ3OTF6FAhJVA%3D\"}]}\r\ncf-ray: 9921f4671a8db1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-05T14:33:42.490039Z","times_seen":210260,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-admin/js/user-profile.min.js?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-admin/js/user-profile.min.js?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 13 Nov 2024 06:05:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"673441a4-1ace\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jw4yAoYyYQY8lPAIublgpC27v0h6PZUfxGAh4ZHa32I23AxEwPgzLF7otWqbrWsVX6ZI30vPdxhZVuTEGvAQS5DLuCw0uW3L3MFoc3v%2FVkyujfDmSjV%2FhCs%3D\"}]}\r\ncf-ray: 9921f4672a94b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6827)","md5":"1de3e5a5414ebd5a0c7bb34775699c6b","sha1":"6a7465b6b07d443192e31fa0f9d2861d61256671","sha256":"82c6bfb74d9516de0bbbaa41fa93898222b84b04d99b46e4fa4acb8d8af6e193","sha512":"7521551b2cdb2ff8a46c70e1d8dcf9db6948cd7dc6ccc8f222f01d351b8a59f82480b96cec2d0156dbeec4a58d10a9f992e8c97118dabe1dada0d9b19d893bc6","ssdeep":"192:oqStGKaRMOOuRO2ViNnmOnDYn9JASQmVvr:QtGKaeOrhGDY96SQmVvr","tlshash":"16e19998b1241af2157762b15067660b52336a3dc92689d27172939c2e3ffc313aff1a","first_seen":"2024-11-13T22:56:15.849368Z","last_seen":"2026-04-05T03:51:34.521148Z","times_seen":5130,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-content/uploads/2021/10/npkub.png","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:09.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/npkub.png HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 52030\r\nlast-modified: Sat, 21 Oct 2023 11:51:03 GMT\r\netag: \"6533bb27-cb3e\"\r\nexpires: Wed, 21 Oct 2026 15:58:09 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHnSFoxhqtMafULgSP9IKiRkEXA%2FadHQDAppyi%2By6R0uIagY%2BY3BO559A5%2BDqYCCrHTOO5kNcyw9OmP8hsTaaBrk6YnEwoBEYNCtZSQ9LwDBI%2B%2BeqrDgMAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9921f46b4aeab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 200, 8-bit/color RGBA, non-interlaced","md5":"05c8f2bdfc54b3c9b40cb573c4497921","sha1":"7d2eec5801da09ba2fd39dc92378a2bd1557f9c9","sha256":"c99c2a9006b60de93f238848f88c261e4aa580c5e616bea21fc659d578d908e3","sha512":"76c6d3c77ece6f6f394cccd96b1256381dc8ebe1974bc3adb03f45da8e28087d684da4e8a69308b953fdb929c7ea2372d83b4e0346488aa29d92d0add5130163","ssdeep":"768:DkjNwDxRZw7HxXLN6SCUpUqeet6NbHu3rP6lkHEpJgpNYTu0uUHiFIJ3Harns:DImDmFXlvmdNbO3rPLk4wgUCiRHWs","tlshash":"053302ddc1833c7c2ad1aafd809318beafa4245f17139570deaa1f126bd522e1e6d805","first_seen":"2025-10-21T15:58:42.804546Z","last_seen":"2025-10-21T15:58:42.804546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gmnpg.org/profile","fqdn":"gmnpg.org","domain":"gmnpg.org","tld":"org"},"ip":{"addr":"104.21.27.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:09.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmnpg.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 13:38:27 GMT","end":"Tue, 13 Jan 2026 14:36:05 GMT"},"fingerprint":{"sha1":"90:54:A2:A5:65:14:9B:B7:8B:47:71:06:30:85:F0:69:C4:7A:B7:EB","sha256":"6A:5C:C6:15:20:FF:44:14:DE:E8:2E:AC:26:A7:6E:DD:51:BB:E2:DB:43:8B:E5:67:A5:F1:D7:09:F4:07:11:6A"}}},"request":{"raw":"GET /profile HTTP/1.1\r\nHost: gmnpg.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Oct 2025 15:58:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8RwBFRAtkz4N3TzqTnjmYCYUz9F9nAaDq4w6MC0qAznp7btg%2FPQEyA5jCzLKpZzN7f7ariUbh9GpiNWiIhu9aSDCCLGRL1o%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9921f46c7d1056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3360), with no line terminators","md5":"cb0b3bd3c78b42717337957b8b03557b","sha1":"f66aba67f250ed59d9d6ac870f817d1ef8e03cf9","sha256":"8eb64190f88a3aa7d794474792264798d7db1fbf2e6a18a98bfaca4b704a4376","sha512":"aaf301515db7cc62f3cbd20b563df15730ef16fb4eb04f39508f8ecbce53a7e18fb47cbea1db572e37fcfa9548357b6a9731b58ba6b13d494ef3845f52bbbcb2","ssdeep":"","tlshash":"b7611245b1f0ed9d03a353b7226f7ac6e866645e3c4ccc8af01ba41124a9712d8d3a70","first_seen":"2025-10-21T15:58:42.806535Z","last_seen":"2025-10-21T15:58:42.806535Z","times_seen":1,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":90,"dns":67,"connect":1,"send":0,"wait":320,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"gmnpg.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/zxcvbn.min.js","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:09.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/zxcvbn.min.js HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:10 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 21 Oct 2023 11:51:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:10 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"6533bb28-c8bdd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4lBe9HdHJglv9EwIWIh7IsRcvdiRLpmLs7j2FkTVL1v2pTCXOckVflkTAa%2B07RfjNkT04P%2BwqO0v2BZxq4jlqesC%2Fg0kWMQmwf0xtgVFvEfLRNbKmdNcztI%3D\"}]}\r\ncf-ray: 9921f46ecb64b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822237,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53869)","md5":"027c098ebca6235056092f7b954dfc5f","sha1":"1ea18e5e6ece74f6f3a7c1a57d2ac2462c9c666b","sha256":"daa6634ed8d6376bfd22d8f68942d00e1b56db0fa8c9f90ba2af52734dd5593b","sha512":"135d02cda1e1bbe6196854d20fd052001127355fbe7e330757c6c741309372c1032baf746372f46f4893903c7adda52e5902285fe351e4d1159df92e3354d197","ssdeep":"6144:FTVmi9vezsy1+gq0WjRBHA7EY7FPHLkMM4YU3UdZLwVxBc8a6pkX9FYfx1K58s0T:Fwi9ve31P6ixvA5xL8bK6sB0V+g/FHB/","tlshash":"03055b8398181bd87325272c14db6f0cb77848b66969caecd36b8dd193a67d130d3c9b","first_seen":"2023-03-07T01:19:17Z","last_seen":"2026-04-05T13:37:08.945873Z","times_seen":29443,"resource_available":true,"data":null}},"time_used":1035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":516,"receive":519,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/css/buttons.min.css?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/css/buttons.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 03 Apr 2024 06:05:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"660cf1a2-17ad\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fe%2FgZ0juTfy9YcvRd%2FS%2FcW5UuRa66kEhhJrPlKCKBeDiJm59MKW9%2BMq4ZMvm1qdomL2P%2FbCaVT3oc%2BblIPqD3A9TL1pMHe%2F3sVg8yadzEdj1QPDIOJQ73yQ%3D\"}]}\r\ncf-ray: 9921f4670a81b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6061,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6026)","md5":"5c113141f5f44bd474a14e5b75e00595","sha1":"9f06dcadb72fc200d5a9b258a58f3804d6f4181a","sha256":"d5a5fea14a12ec9ee91f044a7ff810602662c97d3fad8728497ea4e8c5aef0eb","sha512":"71229398a5cb3cb084aec606a988a92674d3a035df76b0360206e688673b31b07136e8462c624aced748251988ca56f4e4abb0b607eaaa5d173aab325eae4031","ssdeep":"96:lBIiP1NQxABpLsSzYOzCRF3HohBmdOI1q6nW0oTX2E2d/uj2Oc1Zh+r5wuHCcMMI:TZhTw/DV3CXdL+","tlshash":"c1c18eebd141d3193e1276e592626da2f32ffa1590b86be6ac1461fc42c5070341eaeb","first_seen":"2024-02-14T11:04:38Z","last_seen":"2026-04-05T13:26:54.342786Z","times_seen":12568,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-admin/js/password-strength-meter.min.js?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-admin/js/password-strength-meter.min.js?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 21 Oct 2023 11:50:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"6533bb1c-463\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFf%2FY2U1V22M2E6Y%2B7tfC07OnW5A2ifjKwN8BbFM7twpQ1bv1JqDkNH92y0GNPQEyp7aJoPmteBRJq7eWi01Ee32d%2FlokiKn5An5b7Mjq5NzPMmQEekeTs8%3D\"}]}\r\ncf-ray: 9921f4671a8fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1123,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1088)","md5":"b2e45ac2d733c572ee0b3b5dd53c7cc0","sha1":"f0d35678945439784d91ded2f48936c0396095dc","sha256":"fcbe9e9ff2d1c20cab10bf43dc49914e188b44ae21f34257b4a0ef5cae90f7ac","sha512":"6fcb958d271ae4404c8cf4bedc87ca1b938c6f51e61f37fce1da9cffeffa3006eaa0ebdfee5e39c87cd37cb51160a1b27e88b3f4bc57d9f5a58bc24d3ec182cf","ssdeep":"","tlshash":"6a2126f431946d62daf2239415730315b27b5d3739018de49ef8464c723eed2c283b84","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:37:08.868052Z","times_seen":22379,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 03 Apr 2024 06:05:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"660cf1a2-1c9\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEKZH3UgftkcYVFYGOhFe3U5jIIay40PK5jM93fnOPWFSiXyAQKcx1N5UO5Tj0DAjP7WbQws7QCnBjYGc074XPy%2FsW372jv0jnzKNWfEs%2FEwK2v72eaA6Nk%3D\"}]}\r\ncf-ray: 9921f4672a92b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":457,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-04-05T14:48:13.860178Z","times_seen":82330,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/css/dashicons.min.css?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:09 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sat, 21 Oct 2023 11:51:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"6533bb28-e688\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bx6PKUua%2Fq2eOL2GwBIs34%2F0iq%2BnGPrhbk1%2B2EoqijP5S32TnbmjeDD4xmswSkJOEmHHy8zuN1ttTceuJ87%2Foi%2FF91LRduVDnDfd0pxXc8sfAFcqkCeAImE%3D\"}]}\r\ncf-ray: 9921f4670a7fb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58981)","md5":"d68d6bf519169d86e155bad0bed833f8","sha1":"27ba9c67d0e775fc4e6dd62011daf4c3902698fc","sha256":"c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e","sha512":"fd0956d1a7165e61348fda53d859493a094d5a669aa0ba648be3381b02ed170efd776704af6965f1e31143f510172ee941d4f2fc32c4751d9b8763b66301486d","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq","tlshash":"9c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2023-04-05T05:16:42Z","last_seen":"2026-04-05T14:34:23.955506Z","times_seen":123846,"resource_available":true,"data":null}},"time_used":641,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":519,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-admin/css/l10n.min.css?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-admin/css/l10n.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 16 Jul 2024 18:05:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"6696b663-c80\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uAZn4Juyb5LFMBlNKD%2FvWDxmni1d9fDuQFEfEqSlfJ%2BoNlG8jnFbvigRjvZbZ0us%2FRPk%2FuQ%2BjrYqFz%2Fz7E7YsRXTqRgDgNRsK%2BXGkF%2B0jeZ8094R9RG2zGs%3D\"}]}\r\ncf-ray: 9921f4670a84b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3200,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3165)","md5":"6ab6ae6bd910d522bb3edb221bd2aab2","sha1":"bfa85d3d52207a0774683634de7bb3b1240d78c1","sha256":"8a77610fd0190ea9ecb57063433a619486dec13a59b1c2ce3b502b5c7cad7454","sha512":"1a5cc70f1899e014db5d4a2320636dee21ef34de31b8bcc641ea8d84f3fb164005dc135a13843e0c633ca21632c1b093dffbc60897ae85c4d285ac8715882ed0","ssdeep":"","tlshash":"9b61ae03603754521cd60af26d8c6193aacaf12ea5ef9c11c1674ee769d933e32fc5ac","first_seen":"2024-07-18T11:41:35Z","last_seen":"2026-04-05T08:24:37.234903Z","times_seen":7248,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-admin/css/login.min.css?ver=6.8.3","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-admin/css/login.min.css?ver=6.8.3 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Tue, 15 Apr 2025 18:05:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\netag: W/\"67fe9fd9-18ed\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4KLY4bUQDw68n3F8qlf6xknSxxL%2BysH5v2TYdZjsEvFFsMaH8FrB%2FvHI2SwW6%2BLQypdLiRDbCyfNbQQIJx0mPDROJ1i0XA%2FwJIBID7qGOQKHRrW%2B7m99pPQ%3D\"}]}\r\ncf-ray: 9921f4671a86b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6381,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6346)","md5":"85f4121090150b260e4b67eacf26f1a3","sha1":"90f50e2f9310b17e32ad46461a4a9f5dbb138ec1","sha256":"b61b997af7f022009afd97adec6058cd685d6ef028b4ccd1327afe05b420bf6c","sha512":"11aa983526e2f9a71f782880bd411539e07f6c7f0ac27933ea6dad7dc9bb7fb257eb1d6f3ad7a4f9aa1275d974281b51dcba8d7c92ca7ed8bc86dd8eb04afa5d","ssdeep":"96:MXW9SPPsSkeRUR4Sw7gVfiQG7IObSAJXQoljjyWA9ODlXxkAMpvrl:pS3sSkd4SpfzGRkoY9MlONxl","tlshash":"43d16531069c191ef4238322a1f36648b21fc635a343df6eee366975cd9a0951b32f68","first_seen":"2025-04-16T01:44:25.531208Z","last_seen":"2026-04-05T08:24:37.241709Z","times_seen":6091,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xn--42cf7cgd7gxbd4m7c.net/wp-includes/js/jquery/jquery.min.js?v=3.7.1","fqdn":"xn--42cf7cgd7gxbd4m7c.net","domain":"xn--42cf7cgd7gxbd4m7c.net","tld":"net"},"ip":{"addr":"104.21.61.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/","date":"2025-10-21T15:58:08.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xn--42cf7cgd7gxbd4m7c.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Oct 2025 08:16:02 GMT","end":"Fri, 16 Jan 2026 08:16:01 GMT"},"fingerprint":{"sha1":"54:A7:5D:7C:40:35:AF:0B:57:3D:9D:CC:6D:6D:2B:46:E9:F3:A3:E1","sha256":"7D:0F:1A:FF:5C:C8:B2:1D:AE:67:12:9B:4D:D3:B3:6F:40:D8:78:DF:03:D1:2C:E0:06:F6:77:F4:00:AA:64:6D"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?v=3.7.1 HTTP/1.1\r\nHost: xn--42cf7cgd7gxbd4m7c.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://xn--42cf7cgd7gxbd4m7c.net/wp-login.php?reauth=1\u0026redirect_to=https://xn--42cf7cgd7gxbd4m7c.net/wp-admin/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wordpress_test_cookie=WP%20Cookie%20check\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Oct 2025 15:58:09 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 21 Oct 2025 13:34:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 21 Oct 2026 15:58:08 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\netag: W/\"68f78bd1-1598c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKZ8RoE8PVSG8KuISRiGG%2Fzx7SI5KkwjV98kciUVtsbln8LTUmKEE%2Fwy5myZMtKw%2Fs3jA%2FInUPjxJFiiDNyTSVZ%2BcPNun8u5JSBfUEVQF55v2R%2FF563i67w%3D\"}]}\r\ncf-ray: 9921f4671a89b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88460,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"dc5d708aa60534ea8961ef7f4cd34d7d","sha1":"d67116d661ef31324a2fc897e09eb13e58bcdb4f","sha256":"6b981684218b66a97907ca41fd04ae26a0b6f9162c970347d59f5f16bb09e70e","sha512":"294683b5ce3eb7876bff6d5d46dd736ac563d8e08e1a7ad9d59f644321134963e31db3233931a94c8bfe5036b4f748124dab164c9968ef01eaf93633f4271e94","ssdeep":"1536:pC3MBNveGTqMGxxaxskraIR77JNACgr26Sde/3OErILaB2khE8cw4px771gTFhQ:gcN/JNACo2HirILZL1ZgTFhQ","tlshash":"5e8308df72cab02247a730b9007f550af276199d684d8400f159e8d9bc7ca8a527bf7d","first_seen":"2025-10-21T15:58:42.811913Z","last_seen":"2025-11-01T22:54:44.588078Z","times_seen":6,"resource_available":true,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":533,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-21","alert":"Sinkholed","trigger":"xn--42cf7cgd7gxbd4m7c.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}