{"report_id":"0b96687d-b01b-4e6f-84d9-2d27cfff8abd","version":0,"status":"done","tags":[],"date":"2026-08-01T21:19:08Z","url":{"schema":"http","addr":"rlcounsel.com","fqdn":"rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"title":"RL Counsel","dom":{"size":314944,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33255)","md5":"291196f85668ee995a665e7d437b96aa","sha1":"084c71e5b575ca67f145fda42722f521631794d5","sha256":"33f27a33b58eb1718f95a78dbdee60ac3a5dbb64265646f79330f62b1d9a8582","sha512":"53cdd48abde22d18fdd7b50f58f8f069a9ded72193b34dda80d49db5249666e31d01e6d0e6ea03bb5e7c0a84469ea34fed557ef881ec1f2158692f52b585c351","ssdeep":"6144:bNI/5g/4BWF9jdGTp6tGDHlq8DIWgzBRFDjmGJpNtjDFlc80IWgzBH30/HPOQ2UM:1kj5s","tlshash":"a464b2847f63d039b02f15af8147b5ac24299cdbc82aa2ebf0b44223e4f6d6d7794553","dom_hash":"domhash75381df80998dcefb30e67c9221d18c2","first_seen":"2026-08-01T21:19:11.422493Z","last_seen":"2026-08-01T21:24:36.111398Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rlcounsel.com","fqdn":"rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":0,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-05T21:19:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.rlcounsel.com","ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"domain_registered":"2010-11-19","domain_rank":0,"first_seen":"2026-06-01T20:29:44.397516Z","last_seen":"2026-06-01T20:29:44.397516Z","alert_count":118,"request_count":59,"received_data":1727615,"sent_data":30603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Redis","description":"Redis is an in-memory data structure project implementing a distributed, in-memory key–value database with optional durability. Redis supports different kinds of abstract data structures, such as strings, lists, maps, sets, sorted sets, HyperLogLogs, bitmaps, streams, and spatial indexes.","website":"https://redis.io","common_platform_enumeration":"cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*","icon":"Redis.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Redis Object Cache","description":"","website":"https://wprediscache.com","common_platform_enumeration":"","icon":"RedisObjectCache.svg","categories":["Caching"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"rlcounsel.com","ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"domain_registered":"2010-11-19","domain_rank":0,"first_seen":"2026-06-01T20:29:44.393073Z","last_seen":"2026-06-01T20:29:44.393073Z","alert_count":2,"request_count":1,"received_data":208,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","size":5819,"data":"","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-08-06T07:00:58.742835Z","times_seen":18871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/lib/jsticky/jquery.jsticky.js?ver=1.1.0","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c68365cf540ce801c24b121cdf74408","sha1":"0714a0d772a235a8a4b601e584626e637fd7b1b6","sha256":"2afc088f22e4b94f48a1adccbaceb757f66251505ccb22886836d0d001b8e9ee","sha512":"b600ef0064c159f2ddbd91a13ab5833beb414dae30877b0c4c07edf19f676b99c464ebcfa674fbdbc3829be24113488a214a6a96fc01252e45faa083c5b97afb","ssdeep":"96:JSL5rPeMHi20Er0D5JSCQ2s7etU3ISlVrJh9:QZeMHiMaJSHeU3DVrJz","tlshash":"a4a1f189a7263931847b2324cf579618f3a74037c29692143dad56841fb00b582faffd","size":4671,"data":"","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-08-05T21:45:08.860506Z","times_seen":870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-i18n-js-after","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"205f90fe5c128a2c672479e278317f29","sha1":"c6a938a9c2484b6d483e8c73636ce139b4ef78cb","sha256":"32d835fec307ef1708fc67a74e1f6f2ed9ae116ea8c5309262aeff93c3fc2355","sha512":"8b193ffff5078086a82b91303809fda2efc59ee66a0da904a19595c681865334b991c494d24f1dfb372419d2949fb410b5bf10207fa3aab92835f234ad1d53f3","ssdeep":"","tlshash":"b21112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":972,"data":"","first_seen":"2025-12-21T10:06:23.374728Z","last_seen":"2026-08-03T21:33:37.223833Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/elementor-pro-frontend-js-before","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e3a99083ec835b3e2dc1f2fd986d4d0","sha1":"e17d309bcea23a54048c7d508409414d12d197be","sha256":"856a3e8ede9868f506df06b6b217d77fd5797f12ab563f152031277ce922f550","sha512":"ab3655a6a8fc7373d9f91de77722b745ae56cf370ac406cbb10bd1c1d1ca12528778176e24730b8fb1c8f6eaab94afcc26bae02c84713192b154c4e330e05b96","ssdeep":"","tlshash":"a9418e96de218e24939ea7f821ca3f6f94c50332d5d4b54d52dae06401f7cddf0892a7","size":2224,"data":"","first_seen":"2026-08-01T21:19:11.467125Z","last_seen":"2026-08-01T21:24:36.193611Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-06T07:02:00.161683Z","times_seen":338410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/elementor-frontend-js-before","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2127f730bd55c1637adb927a0d0f5c5","sha1":"5804375a926f22eeabd093b6a0242e8d2ea7a4b8","sha256":"bef46bbd4020517beacbd98c2edf91e89e2fb33d0cb91441f834698398c8f429","sha512":"c264b0508a1875aefafe3918e93eaac0dbde42676a898d503a6a3a4f5de73e94d839df32f58eaed52c10f72e9cd4ff542df42853a5873b62ef7164eb2a0038a4","ssdeep":"","tlshash":"ad718221fa416d7b82d797b43927bf03687c0526c040b9a9f8fc44ac05fa9692207e83","size":3662,"data":"","first_seen":"2026-08-01T21:19:11.469479Z","last_seen":"2026-08-01T21:24:36.190946Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/jet-sticky-frontend.js?ver=1.0.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"59c17b8c203bf7093c6c0e714f384bb4","sha1":"d351f67feb78731cb9fc535f0f4458fbeabf2cda","sha256":"db1b20f4e18c95a0929b838c48bfb8c540eee29cef3875bb4829e290f7bddb71","sha512":"ac3aeb5aa90403a83e783586e1f6a008a75c9fb74e4bc6a016cd319ce0892aa900e621a19a9af72a4d9273b70ec405f64098b56638068c1eb5d247278f5ce33e","ssdeep":"192:IU91ZL8wE6O3yzkl5xdyAKqVaeIoDBRLVbwkpIYB1S3/dY+ZT+Zi+kT0+Z3+Zg+G:IU9La3yze5xdyAKqVaeIafwkKYBM3lFr","tlshash":"0022fac6374f35bf856b3312883b614c917ec47620f041aafaf664ca0cb184762e2e6d","size":10723,"data":"","first_seen":"2023-09-09T04:24:40Z","last_seen":"2026-08-05T21:45:08.879166Z","times_seen":728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-06T07:04:48.799393Z","times_seen":26551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-08-06T07:05:03.109371Z","times_seen":16166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/jet-sticky-frontend-js-extra","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b31b3568d33720059205f885a5ac5ef","sha1":"d8d0e7d4d1a21aa1266c4142ebb5ae6f26258330","sha256":"ab7dccf17cd54f10586761796ab3143671bf1dc2df0c5e60abe5e9eaf731661f","sha512":"8a350acfd522156ade1cab980d2fffcf41a7c773f3e85718b15e19799d192223ab6bc96b9fe61ae93f76f20e95451f911020011810a8794c5383742eb436703c","ssdeep":"","tlshash":"3611a7abef812c24846edc323d176a3791871573c0e4089c67ec490101f2cdda2c0d6e","size":1106,"data":"","first_seen":"2026-08-01T21:19:11.470863Z","last_seen":"2026-08-01T21:24:36.194979Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c95a7a15037d6d426efc06ae6e0c81","sha1":"2ea08bc0eee97c4dd4d96fbcae022fd132ee3a11","sha256":"30770e96ca66d9f13e483db507cef243b0602cbd356bc98a0b5aebf89717bcd2","sha512":"50900d7d694920e757a4cd7ebbf0872bbc12c5dbf8ec68e43a9a6c9836fd2c4551f6975ce16ad301b05d4e1ab82c5632dacdce70973bec6fdb32408bf3cddb5c","ssdeep":"192:X4QA3vFKhXb66GBXiWV+tcqqLm1tlY2hI7a2pK1y6VTEZ+K0IGiwZ2uSneq1m+np:KE56BX9+tjqLm1tu2hlbJVT6bXk2u3qV","tlshash":"2b3295c5f185395647ff7034722f220a2337589ce4466d58bc29c4e169f8e8e12b6fba","size":11622,"data":"","first_seen":"2025-05-21T22:47:05.823896Z","last_seen":"2026-08-06T07:00:58.739707Z","times_seen":64413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-06T07:02:00.219079Z","times_seen":149089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-06T07:00:58.731915Z","times_seen":1006859,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b18107e04b5e9580a3222e4a24261c81","sha1":"0882c32d18dc126fcdb5c7d83a93d56ee6dbc702","sha256":"94d76b5f439fa9551694094393af8870468a47d01d3d6407c2076d9128a55707","sha512":"2a766a251b74d37fa92c2c02d338593461452d4e4cdfab37c3445ddd657ad4e982f51abaa0dd7568b6197a09bf1b40f49e77fd46bc0c9d20bfd15369cd0d741f","ssdeep":"","tlshash":"3f81869ae77638dbb2f900f2697e0e47eb614435d6c8d438c9bea3141cb5893c274a46","size":3861,"data":"","first_seen":"2026-08-01T21:19:11.47229Z","last_seen":"2026-08-01T21:24:36.192207Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"7775a2651760ca479889acaa54c604be","sha1":"0a2fc06fc2a26cb863bbe3a3024c78a094bb64b4","sha256":"46423908678c57d7aef3621a90f5256df5d305b32c1ff03755dfd6a0d1c5a113","sha512":"c8c66492396a8ea7ce34ae037aff887f715aa095d09bd7f000a9928b6c6a8f793cdad31ad44b5136fb59465d22a67d68a4ceb66ad942052495f20a572d7fb1f5","ssdeep":"192:093N+1Cw5kTf6mLo3CTTJr8p4q/1jRneo/QrUU:YTfzLo3C58+81jheo/o","tlshash":"36d15150274b40662e728769ebf7a710b3394013ea04ed01fb9d47e977e4d291236bee","size":6290,"data":"","first_seen":"2026-06-27T15:43:36.833629Z","last_seen":"2026-08-04T21:58:38.338723Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50602,"data":"","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-08-06T07:02:00.196781Z","times_seen":56219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/ekit-core-js-extra","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"588d1839a9a618bbbbaf26601315a851","sha1":"0d0b08d25f331acf66b017f684803ce7267d2e35","sha256":"2cea55d6add41897505d14cea293b3f830eade87f3f0a565e55d45692053ddc3","sha512":"de0b5357443b3dabdd315565665a1ed21aadc5e7055fed8ee885334ad38fb34ab5ccd69456f9817a51a844af91d21108a162be648db3b8b53624a80a23aa625a","ssdeep":"","tlshash":"9c112ba7deac4f474140cef00878af738eb07031c5d098848f8ae0800220d8158ec052","size":999,"data":"","first_seen":"2026-08-01T21:19:11.473706Z","last_seen":"2026-08-01T21:24:36.191568Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/core.js?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"551e55daa55f01dcc49f7ada4eb0c6ba","sha1":"c4be1daecb826d736adf67e32de9e1702eeadac2","sha256":"75f1f31662760792bf0ee4f0f6778fef082fcf5f554d6cd31d54e784126fd1c2","sha512":"7f789b8fdd82c96bc2cc3255a534dc03bb130d7a1adcb7d0eb3d4c41ef432770f9258c818ff04c02a24db60ae4a0ccfba98d91af7ed6cf6dac1844c7af4ef5a2","ssdeep":"","tlshash":"25519684712568c743ffe876834fb21f712325a99f85c042a29053b35979cda3277f19","size":2942,"data":"","first_seen":"2026-06-17T09:35:18.405407Z","last_seen":"2026-08-06T06:07:32.793262Z","times_seen":724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/nav-menu.js?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9008ee9d0ad598affe289fad4e5b23b9","sha1":"d74b54ba5353084b4ad38336577d074426edce9d","sha256":"bd47defaa1fb7495371e5cdb44b979613199984a945cbb0830156f8608e934e9","sha512":"d1e54b454b88499c35137aa7d7fe827590fa0a8d624a4322b6d9249e817385c1b4f10769d30a5ad475754ee4af16378e272b0748264dcde500cf2e247e7e9897","ssdeep":"","tlshash":"8f617685b28204e041fe7646539fa10a3513483eeb1b8065b0b740776ff6d463afaf1a","size":3178,"data":"","first_seen":"2026-06-24T09:56:22.543582Z","last_seen":"2026-08-06T07:00:58.74362Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/lib/ResizeSensor.min.js?ver=1.7.0","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d84327ecdcd54612e3b9ff60f3010f29","sha1":"2127b0dd225477bc8735ec15d186687653bcd1db","sha256":"ed3bc6c855c860abf7d3c8555df48d70bc185c042d00e33714a7837d270030cc","sha512":"f3e98eae57f64f9dcc3acd4e02e973446dfc55d4928cd6c7e828fd3efaf09f20c4bd0223d3f38f3abaa17312c307f360307c927851288206dde89ce1bdb865ca","ssdeep":"","tlshash":"f741053f3720712eb05fa355fd6f52999233831de7020044e298f4f45d924aac147ee5","size":2286,"data":"","first_seen":"2023-03-07T12:40:53Z","last_seen":"2026-08-05T21:45:08.896128Z","times_seen":1010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-08-06T07:02:00.154852Z","times_seen":126814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cd574f2ef3733faa310167cbdc81c5f","sha1":"2ed23d8d122a3a1318382cb5613cc361e7de5731","sha256":"90486421bc0802b4a746fc891b77c222db3e9fa3a3cf0f010d2a2bd6f7b5791a","sha512":"abaca66e562bb80a171be2181477cb8bb9594ee696b3d37a893991f5f2f7a4016939c4f395677f1a8688769bfe4fc311d237e3aff66f22dcb5485d0fad212c99","ssdeep":"","tlshash":"fdb012d219088441850d80060a770f59bc011440c88891d8b04200280025c913088005","size":88,"data":"","first_seen":"2026-08-01T21:19:11.474742Z","last_seen":"2026-08-01T21:24:36.18311Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-08-06T07:00:58.811468Z","times_seen":35393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"90c5fb5928c661092bdadfe63b3cf502","sha1":"d81a16feddf5e93808fcf632c09293220c900e3b","sha256":"18d51a8406b5a08f43dac449d17aa0ca02c58710ffd7336748990fc3837ece8d","sha512":"cd18a9147c76bf56253570e1e39e84ab3538e1f054fd9f0005dea53102be96e7eefbd84351f04f92b7fe9a86a6bea167dfd176858df2611cd20a2722f35ced7a","ssdeep":"","tlshash":"7ac02b837d840b104b650fdc0199453510221870d0805082d4404085043cdc33adc100","size":130,"data":"","first_seen":"2026-08-01T21:19:11.476346Z","last_seen":"2026-08-01T21:24:36.18454Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"b191dc27d6038a61962d1e5971c5dbc7","sha1":"6b4f08ba12d936f2ba6cb8874b8b701294b1a95a","sha256":"8ee7d4cdc145648346f242e823a4fd2ff7eb4022df9c196f7f900f74ee9ba145","sha512":"8509bb464bc829f6d4cd78c74711b17a97325f1acc51d78b057127ce4691a70cf62b3180bd092f22196322e7aa35bd7c3f516d0221da076d5ad7e165bf803e1e","ssdeep":"","tlshash":"bfc0c00fce1035c110332c2144328f70000c0e70e500c8c5bec0c49bbc32a4038490c4","size":175,"data":"","first_seen":"2026-08-01T21:19:11.477533Z","last_seen":"2026-08-01T21:24:36.185211Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"63a1e8f1fbfd61e15247faef4e4325c5","sha1":"c7805ede11cc5d03972915b19a7ca6b22dd95ebc","sha256":"6e73439066c0471174ffc9a52e8acb4f2ffe02f69b656ec7245f43a4dd417eb8","sha512":"286acafeda4e45cf5a7aaecb2a6c34a068695f86368c741e5f58c072a567c39cd9dd74e7dbe88f90fd07a6de4e838166b80a49cce1856fb0ef0d964422b94df8","ssdeep":"","tlshash":"a051942179416d7b83d797843927bf03687c05268040b9e9f8fc44bc05fa9693207e83","size":2804,"data":"","first_seen":"2026-08-01T21:19:11.47873Z","last_seen":"2026-08-01T21:24:36.185911Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"3003c0715e0e4a3962cfa6324d063d8c","sha1":"45ce498c3825ccab7fbe53b69588a59703ea069b","sha256":"502af66ab2ac114951ba34fdfec316e32a1679fc2168650fbdf928a0ad710d68","sha512":"3c4f0ae0838b585a036fb0809c1aaa0360df7c2a538d91b582446dd66e165626aa3975a7bf65f0156ef5d0cac4b0375a6f8797fad569bce395f8726e29c3d2d5","ssdeep":"","tlshash":"4ec02ba79eac4f4701408ee00474af738e707031c59058848f86e0800220d8158ec052","size":136,"data":"","first_seen":"2026-08-01T21:19:11.480016Z","last_seen":"2026-08-01T21:24:36.188315Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-08-06T07:02:00.238741Z","times_seen":38858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d77b3488059b80723e1a252b92620948","sha1":"6e4c8ce12708e96948334d0e8825d3de65fa5f57","sha256":"b7190df5cb6404d26356e2b872dcb1062857b2ad24e0d26d3d6094345b17c2de","sha512":"001d7261dd541a7c04661d7c857ccf10651624b32caaa73e8d138759f2ebb55bd27a5879e485e5b633a2a53efdba8b7a0387b479bb316567a2279b3a3bf7ce49","ssdeep":"","tlshash":"5721ad972e218e2493aea7ec31ca3f6f94c5033255d4b54d52dae0a401f7cddf0892a7","size":1345,"data":"","first_seen":"2026-08-01T21:19:11.482826Z","last_seen":"2026-08-01T21:24:36.18968Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"022da590168992f26f3ea0fb3ad73005","sha1":"e928e125fa68feea0c4b7ee0a3dbd762827a81ca","sha256":"6b09007db848a7462653f198560084f84543d34bf83bbbe01d4d488725e42d51","sha512":"e8bfd01e0e0a4be090950c08d83884dca5ac3e8cd8d6c3dbd015eeec93faee998732cdcfd5e9dc4f8facfeebebda4129c0a54c4e446449b1dc345ad0bd0d170a","ssdeep":"","tlshash":"01d0a7abaf812c24446e9c0239136a369187157380e4089c67ec090101f2cdda2c0d6e","size":221,"data":"","first_seen":"2026-08-01T21:19:11.484573Z","last_seen":"2026-08-01T21:24:36.190292Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-06T07:00:58.798533Z","times_seen":922665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/fluentform/assets/js/fluent-forms-elementor-widget.js?ver=6.2.5","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"58a4fc1dc987652b9cdfb9fdf7252062","sha1":"38b2d4004e10decd40cab70b194d7426fd1a9cc2","sha256":"01ec2e58020a9aeaa826379966b6d7652efaace7ab433553e8992d8f4cd1d927","sha512":"0f7a3ad170735bf013976d829e640925d3ab4d47d7441fe4ed902564cc1a5361534850fddfbee59a1dbf775d882ce22388a055601664e09b720d36cd4453f594","ssdeep":"","tlshash":"2d01106db6aa647902b756f7c0ef238bf03a11d4640288911941c9d05ebcecb1663fa7","size":751,"data":"","first_seen":"2026-01-14T16:55:51.20951Z","last_seen":"2026-08-06T05:03:40.991577Z","times_seen":3268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","size":32098,"data":"","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-08-06T07:02:00.13445Z","times_seen":21411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/lib/sticky-sidebar/sticky-sidebar.min.js?ver=3.3.1","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee1ebfc01bc14718c8cd457d726ffc9a","sha1":"9724c2fa2b51a9b59264a78db3bf76094333d9d9","sha256":"3d35e8de53a6c930b5135b540c1e6bac6a6872e2dbed80bf32116168b86a3281","sha512":"8c6f498ba8b38a5af8df4af1b695c2243dba6464354d4ce538fcd5880801d81affb4434479b1dc367cb148cd254eaddc8042c3760dd314d7d3a5d65bb7dcf0c2","ssdeep":"192:4un/Q/DK585HKg6JqW61mquciulS3Ul2o:4GM5AdquJA1","tlshash":"0332a61933603c3002d75559edbb930d61325e3ed2c198cc793dcbc99eb86c8a19abb9","size":11903,"data":"","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-08-05T21:45:08.887169Z","times_seen":1068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=4.1.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"f739835ccaa2963d44dff09626f29dd0","sha1":"ef923ec54df73d8845c29045d783f15ffe9c36d5","sha256":"7c3bee12c9dd2a2ca02c4fa6462f7ea3dd1b491439b68c37cc2ef70eaf6a6a0a","sha512":"0d4b7dc0f55fdbe51a70ce49104c1541d9f8c9010125577fd4bc4fa5f3edccaff66d0cd2e26ae48fd4fb0084448d1e73cf011abc04e05c4db9177bd7e51e2291","ssdeep":"768:k/XscBD1+WE9A5yLce/gvd4dedEdkdPd2d4d5dqd1dIdMd/dpdedUdUdojPm7L+r:CsOD1+WE9A5yLcWgvGEeSBYWfQfOCZvf","tlshash":"0f13b55171aaca2941cf84abf463164fb7215c9cf413f0da7afc8d82a564ec7a354731","size":43922,"data":"","first_seen":"2026-06-23T15:31:14.017272Z","last_seen":"2026-08-06T07:00:58.779676Z","times_seen":2881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/fluentform-elementor-js-extra","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"08d56fa8803b4e5bca45d349c273fca6","sha1":"b4d1a014e721597fd9811fab9aaf5c89bc094c3c","sha256":"1670f688f92b20de1c53d2c7f0d5c6925e54a55b3aa0ec6ab44239f9d88bfa04","sha512":"791db2b982563aa39c8380c1b6f892a8aea3fd035c2df7dc91766925c243e76f9d96df94fa6c0cc8dd857a454b20329b400d4173fe9949936cefe48f75388a31","ssdeep":"","tlshash":"cd112b83fd840b108b654ffc059d453610221870d0c09082d4408085043cdc33adc100","size":974,"data":"","first_seen":"2026-08-01T21:19:11.486057Z","last_seen":"2026-08-01T21:24:36.182426Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"946d17c4b23d5536a47a054c3d6d3610","sha1":"ac2b82d110078e84218bb8d0c8e04f7a380a1c93","sha256":"ea27310b9422ab8170bd2daf9a4667398e1ac1c587a3de94964e35c4cd7ebebd","sha512":"eed6409b3fca9e0997e29d624ec7132f8e0adc75c573f04b2b36ee94f66fd23ec88880b6030eb4cf03eef1fc54538a2b762e2131712e756c1742e883074cfa26","ssdeep":"768:F176ciVqynkMLvtC+BkBZP5Enfkmrvke0KzrJ2hPR9gGn+hYQiipztfoIpa+b/ME:wqitJiPynfkmrv3zV2hPR9gGn+hYQii7","tlshash":"2d13d64e7300307542efb17a92af550fb23b6518a60790acb5aad8da2d78c4d2137f7d","size":43982,"data":"","first_seen":"2026-06-24T09:56:22.535594Z","last_seen":"2026-08-06T07:00:58.779117Z","times_seen":1806,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wpascript-js-after","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf43a0456d3df9104f6cef52d4bcb39f","sha1":"0709fb9fd64be6d69ec9fea4ef202f232e1f97ad","sha256":"bff04b967aca2486c38c054b60b7ef943cc67929b8ae79f6ebddf0a51535fddc","sha512":"4d28a09e6a72b20529d3991d958fd1af2c1ebcd53ea8b766485e81381a0fcec7ff4fdfea5d1edb05203214d836b8640b03883597849eed51c1c8caeb1bf95112","ssdeep":"","tlshash":"6511c00fce1035c110732c3244328f70000c0e71e500ccc5bec0d49bbc32e4038590c4","size":1026,"data":"","first_seen":"2026-08-01T21:19:11.48766Z","last_seen":"2026-08-01T21:24:36.192955Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=4.1.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c159984c074af8f78de255385cc6b201","sha1":"82afdac9992942fe27e5bd16c82087b447442786","sha256":"65abd9b710baa92c2d6fd6dc609e58f969e4c12976ec7653953841140f1558d8","sha512":"5a81364e024ea40beb8061aaba23eea888be5655b2d4a789d953607abe84dbd44d16e36c41b6f000e70c86c89be43ee3b2cd7bd76acb744eae43fc6e1e161d0f","ssdeep":"96:Bnpx3DThw6mcGFQIRo23pG7LJPqkho4KYXh7NMfl2o/VP+LyVPONeYuGXhqnuvVw:NvhwbFVo23WL9PhPXx6J/0Ws/uI2k2","tlshash":"84d1339906949e1b26e03ae8b09b6b741f3dd0723c1aea41e611eddc18fcfd147e6532","size":6242,"data":"","first_seen":"2026-06-23T15:31:13.984712Z","last_seen":"2026-08-06T07:00:58.732462Z","times_seen":2883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-08-06T07:05:03.145795Z","times_seen":16559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=4.1.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfa0a73f6d7761e7bd3f82b56019913f","sha1":"b70223a45c7c072d1267fdfeedf6f482dc559983","sha256":"beb80dfb7fb8917ff9ce5567e320c59319bf41ff7f82ee1b410767fe6be161c6","sha512":"e018db46ff6eb7d6710565fbff65680d01becd82f772687e8725922a7a007c95be114533676925150cf38383b0691a98fe7640f5219da287339363bbd253bce6","ssdeep":"384:htwgZ+EVxFm6cKJsqdldgglQtHuaQkba/iZTSXDTZmMo7YtD/MHJiIVkoh/vF7Nk:jwK+EVxFm6cKiqdldgglQtHuaQkba/ok","tlshash":"acb2d9053163ac7a50cf815be067420e7b374899b40570ed7abc6cdba5b8d9a33ea335","size":23939,"data":"","first_seen":"2026-06-23T15:31:14.009424Z","last_seen":"2026-08-06T07:00:58.750892Z","times_seen":2886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://www.rlcounsel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.600Z","timestamp":1785619118600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=3.9.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:32 GMT\r\nvary: accept-encoding\r\netag: W/\"6a42760c-14636\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83510,"size_decoded":11180,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"367ab533a0102ff78178c9e893a6d70d","sha1":"f3be6e8823a9fe27fe31a67b21f7efe2b2611f60","sha256":"3ff4a24018142ad7639f8d86b8060672ba7d940f11f26cb30f9ca260c8a1d51c","sha512":"70427cb0483912f37ecd9602ec4947aa4e66c0926b75625d80ecc39013e2bd786b2c97c20a6fa04c8f92dd906112e34e8d341c44eb9f2e8fd03c365fb09e088e","ssdeep":"768:mGXfR+KJyeegwKf5xtq8jtjVb8tebxqh6Fn+fFO:mGXAcfNq8jtjmZh6FsFO","tlshash":"8083cbd8cc5d6ac4bb35c80f4711ba09dd44b1e28de24c27f4af8c4d0bf6a2d65e1a66","first_seen":"2026-05-19T13:41:15.770529Z","last_seen":"2026-08-06T07:00:58.786773Z","times_seen":2392,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=4.1.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.625Z","timestamp":1785619118625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=4.1.2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:28 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427608-1862\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6242,"size_decoded":3074,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6199)","md5":"c159984c074af8f78de255385cc6b201","sha1":"82afdac9992942fe27e5bd16c82087b447442786","sha256":"65abd9b710baa92c2d6fd6dc609e58f969e4c12976ec7653953841140f1558d8","sha512":"5a81364e024ea40beb8061aaba23eea888be5655b2d4a789d953607abe84dbd44d16e36c41b6f000e70c86c89be43ee3b2cd7bd76acb744eae43fc6e1e161d0f","ssdeep":"96:Bnpx3DThw6mcGFQIRo23pG7LJPqkho4KYXh7NMfl2o/VP+LyVPONeYuGXhqnuvVw:NvhwbFVo23WL9PhPXx6J/0Ws/uI2k2","tlshash":"84d1339906949e1b26e03ae8b09b6b741f3dd0723c1aea41e611eddc18fcfd147e6532","first_seen":"2026-06-23T15:31:13.984712Z","last_seen":"2026-08-06T07:00:58.732462Z","times_seen":2883,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/fonts/rethinksans-244c31b0.woff2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.322Z","timestamp":1785619119322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/rethinksans-244c31b0.woff2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/css/rethinksans.css?ver=1765861576\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35676\r\nlast-modified: Tue, 16 Dec 2025 05:06:16 GMT\r\netag: \"6940e8c8-8b5c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35676,"size_decoded":35965,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35676, version 1.0","md5":"458055875edc59ac9899a0a72c8e785c","sha1":"29156cd7f751212473474b82db9f298c953c345d","sha256":"c09b45b96be12831873317869fce88361278ba47a9bfc18d5c14bfe6f8a85f01","sha512":"0959368fd4dd092ac2ef8142337e3412901fb950e075b830c1d5c8078f121051fec4d1dcba23e0dd559ebbb3acb78914b05d755098325c21bfe9b78fb579c286","ssdeep":"768:LRrSJfH4h43c6tj/wfwRuYzG/StcRadcoJG739DV6uTL78Qddus0BAkAEU:LV0dj/wfwYTqtQtTiuTLAQdd4t5U","tlshash":"1ef201ae7514b4b1b040f1ab2006687de64005a756aef709ce19f9f713afc1ae9c87f4","first_seen":"2025-09-06T13:28:51.413077Z","last_seen":"2026-08-04T21:37:03.038143Z","times_seen":877,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/jet-sticky-frontend.js?ver=1.0.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.630Z","timestamp":1785619118630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/jetsticky-for-elementor/assets/js/jet-sticky-frontend.js?ver=1.0.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Aug 2025 17:19:58 GMT\r\nvary: accept-encoding\r\netag: W/\"68a603be-29e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10723,"size_decoded":2545,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"59c17b8c203bf7093c6c0e714f384bb4","sha1":"d351f67feb78731cb9fc535f0f4458fbeabf2cda","sha256":"db1b20f4e18c95a0929b838c48bfb8c540eee29cef3875bb4829e290f7bddb71","sha512":"ac3aeb5aa90403a83e783586e1f6a008a75c9fb74e4bc6a016cd319ce0892aa900e621a19a9af72a4d9273b70ec405f64098b56638068c1eb5d247278f5ce33e","ssdeep":"192:IU91ZL8wE6O3yzkl5xdyAKqVaeIoDBRLVbwkpIYB1S3/dY+ZT+Zi+kT0+Z3+Zg+G:IU9La3yze5xdyAKqVaeIafwkKYBM3lFr","tlshash":"0022fac6374f35bf856b3312883b614c917ec47620f041aafaf664ca0cb184762e2e6d","first_seen":"2023-09-09T04:24:40Z","last_seen":"2026-08-05T21:45:08.879166Z","times_seen":728,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.538Z","timestamp":1785619118538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:21 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427601-10a2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4258,"size_decoded":1027,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-08-06T07:00:58.771857Z","times_seen":44148,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.603Z","timestamp":1785619118603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:21 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427601-d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214,"size_decoded":393,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-08-06T07:02:00.211384Z","times_seen":117491,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/fonts/sortsmillgoudy-5b0a36b1.woff2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.324Z","timestamp":1785619119324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/sortsmillgoudy-5b0a36b1.woff2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/css/sortsmillgoudy.css?ver=1765861575\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22804\r\nlast-modified: Tue, 16 Dec 2025 05:06:15 GMT\r\netag: \"6940e8c7-5914\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22804,"size_decoded":23093,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22804, version 1.0","md5":"a35fdf56426e56fa96c37db222f4bf4b","sha1":"7fc1f31f035c1f5630c84d25f16a5e42114abd6b","sha256":"7a1ef9b6f47c9f8d0afbce1dbe6e4afe2b632e8db12d262b51d46a4b37dca079","sha512":"76753c98dbc67679e5918154d376374c34cfb95587ca20186d2a37488a89c5c9451111464c23f35f37d33207491bb45372541773ebfb5c9f9a8a0cb03dd0eb6a","ssdeep":"384:STZ9YrR45vt1jWp1cSfcnn8EuWxzu7Vd3vMcSdS4yh7HdYbyBkRDoi5PlIRbc7QM:STQt4t1j0cSfXEuWxuVSdhyh7Hdgys/h","tlshash":"d1a2d1570d1616a3873da234c97782e69630354ca586b46a4bcc3d11377fea18ee2a8c","first_seen":"2025-09-19T15:21:18.566275Z","last_seen":"2026-08-05T21:33:30.092793Z","times_seen":525,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T21:18:38.092Z","timestamp":1785619118092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://www.rlcounsel.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.rlcounsel.com/wp-json/wp/v2/pages/31\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.rlcounsel.com/\u003e; rel=shortlink\r\nx-cache: HIT\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Redis","description":"Redis is an in-memory data structure project implementing a distributed, in-memory key–value database with optional durability. Redis supports different kinds of abstract data structures, such as strings, lists, maps, sets, sorted sets, HyperLogLogs, bitmaps, streams, and spatial indexes.","website":"https://redis.io","common_platform_enumeration":"cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*","icon":"Redis.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Redis Object Cache","description":"","website":"https://wprediscache.com","common_platform_enumeration":"","icon":"RedisObjectCache.svg","categories":["Caching"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":342722,"size_decoded":64933,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33176)","md5":"070dea3176cfbd24243f8c0531b7886b","sha1":"d7b53c7869972ee4f4c4877fe7f07df18fea1d2d","sha256":"80cca7aea8a0e8a7b0204291d73edf5a2a04b127e6b1ce71d2344101cc927fd5","sha512":"ff2a44e90d52fbe1ab4a3e9818d4b3fb8b93bf14673de66396b7c7c4676a696b93bde0f696dabdced0bb7c13f39c7174564bfcf7f661c04cac2b5c3b5758a057","ssdeep":"6144:pNI/5g/4BWF9jdGTp6tGDHlq8DIWgzBRFDjmGJpNtjDFlc80IWgzBE35/qsqqqsZ:4JjaY","tlshash":"cf74c4807f63d039b02f119f8147b5ac20199cded92a96ebf4b48123e4f6d6d37a4693","first_seen":"2026-08-01T21:19:11.429709Z","last_seen":"2026-08-01T21:24:36.126284Z","times_seen":5,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":7,"connect":183,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/themes/hello-theme-child-master/style.css?ver=2.0.0","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.530Z","timestamp":1785619118530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/themes/hello-theme-child-master/style.css?ver=2.0.0 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 11 Aug 2025 15:18:47 GMT\r\nvary: accept-encoding\r\netag: W/\"689a09d7-271\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":625,"size_decoded":626,"mime_type":"text/css","magic":"ASCII text","md5":"6305ee5e1a7e9fee0d8b1dafffea9126","sha1":"6aa4c539cde7881db3b34de289477ca0025b62b9","sha256":"dbb02d3f313a9b8efd7e4580c11f448c66d29790f5f5172a50de92e455151aa0","sha512":"fcb347474688bd98ba673302bc8331a2ee33ff7a9da9af1e4b2a1add784848a7490a02bcda6133fa7dc3d2c447b925f6b43f3670985e09a51d78a4c72ec0a508","ssdeep":"","tlshash":"cdf07d1e68276267767e020a783bb48eb797c78452ea04e4e20d16447570fe903e9585","first_seen":"2023-07-18T16:09:37Z","last_seen":"2026-08-06T07:00:58.781508Z","times_seen":3338,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/fluentform/assets/css/fluentform-public-default.css?ver=6.2.5","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.609Z","timestamp":1785619118609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/fluentform/assets/css/fluentform-public-default.css?ver=6.2.5 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:37 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427611-e0b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3595,"size_decoded":1405,"mime_type":"text/css","magic":"ASCII text, with very long lines (3594)","md5":"91578a71da519a1ab892a24cbb48f102","sha1":"bbf257f8b7fe52c06709ba6251ab9515b8a6294e","sha256":"b920eba31c8b756a18fe27ab8bbc6caf38143a722bccbaa16cb427343575d108","sha512":"d35d132e7e27eb31484c5e440d88210ddb173a84f322151f7c38237dbf953565287615b4f9a2b8bf4c200cd2356c0608d33e39f7f814b0b6afb9913494ee78e1","ssdeep":"","tlshash":"8f713323b118e23fb2778b2522d6b4a50113cb43e95b6f5ef4cab9dcc2cd9a41413b12","first_seen":"2025-04-08T12:32:39.550797Z","last_seen":"2026-08-06T07:04:48.714619Z","times_seen":4911,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/lib/sticky-sidebar/sticky-sidebar.min.js?ver=3.3.1","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.622Z","timestamp":1785619118622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/jetsticky-for-elementor/assets/js/lib/sticky-sidebar/sticky-sidebar.min.js?ver=3.3.1 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Aug 2025 17:19:58 GMT\r\nvary: accept-encoding\r\netag: W/\"68a603be-2e7f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11903,"size_decoded":3855,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11677), with CRLF line terminators","md5":"ee1ebfc01bc14718c8cd457d726ffc9a","sha1":"9724c2fa2b51a9b59264a78db3bf76094333d9d9","sha256":"3d35e8de53a6c930b5135b540c1e6bac6a6872e2dbed80bf32116168b86a3281","sha512":"8c6f498ba8b38a5af8df4af1b695c2243dba6464354d4ce538fcd5880801d81affb4434479b1dc367cb148cd254eaddc8042c3760dd314d7d3a5d65bb7dcf0c2","ssdeep":"192:4un/Q/DK585HKg6JqW61mquciulS3Ul2o:4GM5AdquJA1","tlshash":"0332a61933603c3002d75559edbb930d61325e3ed2c198cc793dcbc99eb86c8a19abb9","first_seen":"2023-03-07T12:57:13Z","last_seen":"2026-08-05T21:45:08.887169Z","times_seen":1068,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.626Z","timestamp":1785619118626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 02:53:11 GMT\r\nvary: accept-encoding\r\netag: W/\"6a505e97-1664\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5732,"size_decoded":2793,"mime_type":"application/javascript","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-08-06T07:05:03.109371Z","times_seen":16166,"resource_available":true,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":716,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.542Z","timestamp":1785619118542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=3.9.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:32 GMT\r\nvary: accept-encoding\r\netag: W/\"6a42760c-72abb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":469691,"size_decoded":53550,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"215370893d5e845c454a648e2a42278b","sha1":"038513886206fcfd29c34aa6895d5739796aee52","sha256":"ec7a8af83baaa0e7cdf4bc2e82ed537e4a3f8db0497217906171e10112540e57","sha512":"6503b73bb9fec7ae92e959edaa33ceed8016bc109c1fdeb1afd8a63b9c47624132938389cf7ec59ec7ee58fa8dd2c417301694fef5d415ce69cbbecddb2549c8","ssdeep":"3072:ALT6E+EtwW0rNLfOVfjhWpGphoGmu8fefK:ALT6ctwW0rJfOVfjhWpGphoGm5fefK","tlshash":"a5a464565c523308913f8e1f93d99a5c1728c193e0a30ddeb6c26c1bc75aebd72ea607","first_seen":"2026-06-17T09:35:18.387411Z","last_seen":"2026-08-06T07:00:58.72908Z","times_seen":614,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css?ver=4.1.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.604Z","timestamp":1785619118604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css?ver=4.1.2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:28 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427608-3e3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":995,"size_decoded":656,"mime_type":"text/css","magic":"ASCII text, with very long lines (995), with no line terminators","md5":"3034ff16bd46f230e8c546990ff1735a","sha1":"a80e0d3f3dadb578d99869db272f5cecb9a3997d","sha256":"3e86e49c78cd2befb9c7e7b27ee263298290728f7489b17077f00c25e37a5838","sha512":"06d12b5e5d9f6c1b240c03a8e42f8c1cd327a524bfc6b5757ad77311fad793bf20635f4f5910db01d4f9b3ec781f3d3fa0699cc8186c501d32d4ac3766e90a45","ssdeep":"","tlshash":"d6115b913d5bb538901f423bba433ecd691254c5b7022a98ec70e83745e5c84756e5e9","first_seen":"2024-12-11T20:13:02.117127Z","last_seen":"2026-08-06T07:00:58.732968Z","times_seen":44328,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.539Z","timestamp":1785619118539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:21 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427601-280f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10255,"size_decoded":1366,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-08-06T07:10:51.275148Z","times_seen":53262,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/css/rethinksans.css?ver=1765861576","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.545Z","timestamp":1785619118545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/rethinksans.css?ver=1765861576 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 05:06:16 GMT\r\nvary: accept-encoding\r\netag: W/\"6940e8c8-238c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9100,"size_decoded":761,"mime_type":"text/css","magic":"ASCII text","md5":"04eda6f8ddb91c17c03a6fb7d6c26401","sha1":"4c219e5a4669ff25b5289e424601d89b59f36817","sha256":"f8ad3a59497b666cc31dcfa2f3765579b99216c9da089a4a356d72487a392023","sha512":"60665443dd56e778c897f0e5297a738145ebf302ef395b226669acc35e45c9a1d6b4ab5a36e267061fe6fbe75b88c1002be65e09ea9a6d5179aa5795198350d4","ssdeep":"192:QO8rzzO8rPN8rzzN8rPE8rzzE8rPr8rzzr8rPC8rzzC8rd8rQx8rv8rQC8rS8rQk:Q3f3P8f8PFfFPCfCPTfTMd+6jvYUVJH","tlshash":"221200c20cafa200c7974dc531dd7f22de1ea165b445e9a85bfd049cec96c1923b279d","first_seen":"2026-08-01T21:19:11.434489Z","last_seen":"2026-08-01T21:24:36.158943Z","times_seen":5,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.547Z","timestamp":1785619118547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:44:10 GMT\r\nvary: accept-encoding\r\netag: W/\"6900ba9a-3509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-06T07:00:58.798533Z","times_seen":922665,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=4.1.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.628Z","timestamp":1785619118628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=4.1.2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:28 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427608-5d83\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23939,"size_decoded":6988,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23896)","md5":"bfa0a73f6d7761e7bd3f82b56019913f","sha1":"b70223a45c7c072d1267fdfeedf6f482dc559983","sha256":"beb80dfb7fb8917ff9ce5567e320c59319bf41ff7f82ee1b410767fe6be161c6","sha512":"e018db46ff6eb7d6710565fbff65680d01becd82f772687e8725922a7a007c95be114533676925150cf38383b0691a98fe7640f5219da287339363bbd253bce6","ssdeep":"384:htwgZ+EVxFm6cKJsqdldgglQtHuaQkba/iZTSXDTZmMo7YtD/MHJiIVkoh/vF7Nk:jwK+EVxFm6cKiqdldgglQtHuaQkba/ok","tlshash":"acb2d9053163ac7a50cf815be067420e7b374899b40570ed7abc6cdba5b8d9a33ea335","first_seen":"2026-06-23T15:31:14.009424Z","last_seen":"2026-08-06T07:00:58.750892Z","times_seen":2886,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":714,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/cropped-logo-192x192.webp","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.949Z","timestamp":1785619119949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-logo-192x192.webp HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5078\r\nlast-modified: Tue, 12 Aug 2025 16:50:50 GMT\r\netag: \"689b70ea-13d6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5078,"size_decoded":5366,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2507419fd4b48fe041340eab636b415","sha1":"d713a3277d0074a75a6082eb16760fa59e835a16","sha256":"f3369e000fc3150e0fae98a67648adbc08927ea100d30f5cfa4a08fbd0e4d125","sha512":"ac6a0943a6c21d0a24da35c16f87a8c5c3f6bb623e877c0716b661793b0ea130eaab5ad774b58ef80ca08b8c5acff1d51969df2ebae6e070098064a857f750ef","ssdeep":"96:gElbw+iX/2c7/m/UPdTVUyvujDwqXgSO25rJYAD4Mdx9SgGN:FwTOWu2dZUAujHgWb9jGN","tlshash":"e1a1af2ee7401bbde1ab193350b33397abc4d75fcb8e4d300a44a0c93956c821c0cba9","first_seen":"2026-08-01T21:19:11.436571Z","last_seen":"2026-08-01T21:24:36.181048Z","times_seen":5,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.501Z","timestamp":1785619119501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-544\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1348,"size_decoded":941,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-08-06T07:02:00.154852Z","times_seen":126814,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rlcounsel.com/","fqdn":"rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-01T21:18:37.362Z","timestamp":1785619117362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx/1.28.1\r\ndate: Sat, 01 Aug 2026 21:18:37 GMT\r\ncontent-type: text/html\r\ncontent-length: 169\r\nlocation: https://www.rlcounsel.com/\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":22,"connect":171,"send":0,"wait":171,"receive":1,"ssl":356},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.543Z","timestamp":1785619118543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=3.9.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:32 GMT\r\nvary: accept-encoding\r\netag: W/\"6a42760c-6df5\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28149,"size_decoded":3325,"mime_type":"text/css","magic":"ASCII text, with very long lines (28149), with no line terminators","md5":"ea1bc7801ace4a5fc16ab7e60c765408","sha1":"dda47d256c566a0915e44d0cb5b6315cff81536f","sha256":"9b33c0ba535db91800fc2c826260d33da9c53e9eaf93cf5e1821bb7942deaa65","sha512":"4d45c917153b15c8a08e2a0ee5eb3ad612f19372730beda79398cbe1f72778f75eeda9677fac2ce5207a87cd6d02befa2b4c6f15142bd6dde63a7dbdb7b9505b","ssdeep":"768:LX6v2vjV3zv6vzv2DBsBI6v2njVAjVFSlNBc6vzv2vBg6izi2iBPB5BQzGuar7vD:LX6v2vjV3zv6vzv2DBsBI6v2njVAjVFr","tlshash":"07c2f21eed3a369a127d9c3e13a2588d3b9480cbd2d328e6ac81de16c76dd70753944f","first_seen":"2026-06-17T09:35:18.236247Z","last_seen":"2026-08-06T07:00:58.750371Z","times_seen":2167,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/fluentform/assets/css/fluent-forms-public.css?ver=6.2.5","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.606Z","timestamp":1785619118606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/fluentform/assets/css/fluent-forms-public.css?ver=6.2.5 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:37 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427611-ac28\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44072,"size_decoded":8310,"mime_type":"text/css","magic":"ASCII text, with very long lines (44071)","md5":"3596e7f454c3e12c83fa49a0d3dbb1ba","sha1":"7f96c856235d3517c49cb4ca69cb15d96db54d4a","sha256":"1eb487cbf37794ff69f180b298928bd2f3a18db7ac0e26afaafd1e0b7dce5b37","sha512":"c0d9323702a78557de455d52f0a3ed34b020dfbd6d558e06dde1dd88d47695cba0ad829a6ae0a56b641a19da4b35ef01caa2f50aee5b4fc88dcb1d02200e3394","ssdeep":"768:GOuLIvLWrb1LvUD47ffwIqloVEjNrnQSguxoA5NM8XTQhHqjirwG/r4:GOu0vLWrb1LvUD47ffwIqloVEjNrnQSn","tlshash":"0f1384a3da74243b6273d39276c091c913236721e6ce8d7bbc09b17ec2ddaa81573b54","first_seen":"2026-05-22T15:09:56.738279Z","last_seen":"2026-08-06T01:31:14.372229Z","times_seen":497,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.614Z","timestamp":1785619118614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-16bb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5819,"size_decoded":2843,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5819), with no line terminators","md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-08-06T07:00:58.742835Z","times_seen":18871,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.617Z","timestamp":1785619118617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-7d62\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32098,"size_decoded":11115,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32098), with no line terminators","md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-08-06T07:02:00.13445Z","times_seen":21411,"resource_available":true,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/fluentform/assets/css/fluent-forms-elementor-widget.css?ver=6.2.5","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.524Z","timestamp":1785619118524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/fluentform/assets/css/fluent-forms-elementor-widget.css?ver=6.2.5 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:37 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427611-f5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3933,"size_decoded":1153,"mime_type":"text/css","magic":"ASCII text, with very long lines (3932)","md5":"2030176df39a8b78676e61a95e3589f2","sha1":"d6d764e78fef24c5889e80bebc9012c1d6e657e9","sha256":"9f9a2460f9858396264d4054ca4af0b2eb21353518a912cdb44371e7302837cc","sha512":"4713d67cfcb3091e54b4a0e5d2683470f77a976e490934824cafcbc6e8defceb474cef7dcbd90ac6086506d098217d6d8ab6704ff69757a9407ebce32a70a7d6","ssdeep":"","tlshash":"6281799bd8740eb622734b3903ca5901412b5bb9f74a28ce2dc4b6fc576d8c64633fa5","first_seen":"2023-04-07T00:14:41Z","last_seen":"2026-08-06T05:03:41.011052Z","times_seen":8024,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.611Z","timestamp":1785619118611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=3.9.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:32 GMT\r\nvary: accept-encoding\r\netag: W/\"6a42760c-abce\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43982,"size_decoded":14711,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23862)","md5":"946d17c4b23d5536a47a054c3d6d3610","sha1":"ac2b82d110078e84218bb8d0c8e04f7a380a1c93","sha256":"ea27310b9422ab8170bd2daf9a4667398e1ac1c587a3de94964e35c4cd7ebebd","sha512":"eed6409b3fca9e0997e29d624ec7132f8e0adc75c573f04b2b36ee94f66fd23ec88880b6030eb4cf03eef1fc54538a2b762e2131712e756c1742e883074cfa26","ssdeep":"768:F176ciVqynkMLvtC+BkBZP5Enfkmrvke0KzrJ2hPR9gGn+hYQiipztfoIpa+b/ME:wqitJiPynfkmrv3zV2hPR9gGn+hYQii7","tlshash":"2d13d64e7300307542efb17a92af550fb23b6518a60790acb5aad8da2d78c4d2137f7d","first_seen":"2026-06-24T09:56:22.535594Z","last_seen":"2026-08-06T07:00:58.779117Z","times_seen":1806,"resource_available":true,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.625Z","timestamp":1785619118625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 02:53:11 GMT\r\nvary: accept-encoding\r\netag: W/\"6a505e97-13ba\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5050,"size_decoded":2133,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-08-06T07:05:03.145795Z","times_seen":16559,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.438Z","timestamp":1785619119438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.3 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-2d66\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11622,"size_decoded":4142,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11409)","md5":"b7c95a7a15037d6d426efc06ae6e0c81","sha1":"2ea08bc0eee97c4dd4d96fbcae022fd132ee3a11","sha256":"30770e96ca66d9f13e483db507cef243b0602cbd356bc98a0b5aebf89717bcd2","sha512":"50900d7d694920e757a4cd7ebbf0872bbc12c5dbf8ec68e43a9a6c9836fd2c4551f6975ce16ad301b05d4e1ab82c5632dacdce70973bec6fdb32408bf3cddb5c","ssdeep":"192:X4QA3vFKhXb66GBXiWV+tcqqLm1tlY2hI7a2pK1y6VTEZ+K0IGiwZ2uSneq1m+np:KE56BX9+tjqLm1tu2hlbJVT6bXk2u3qV","tlshash":"2b3295c5f185395647ff7034722f220a2337589ce4466d58bc29c4e169f8e8e12b6fba","first_seen":"2025-05-21T22:47:05.823896Z","last_seen":"2026-08-06T07:00:58.739707Z","times_seen":64413,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/cropped-logo-32x32.webp","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.951Z","timestamp":1785619119951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/cropped-logo-32x32.webp HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:40 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1054\r\nlast-modified: Tue, 12 Aug 2025 16:50:50 GMT\r\netag: \"689b70ea-41e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1054,"size_decoded":1341,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a962dbb229eb56cdb5789f2661b02a8","sha1":"aa88061f6ce3191f387a668264de039cf0ba6ba5","sha256":"ecb0689d628cad7c495665f1cda55b081949afa60528e8442e29fe7b9deda5cb","sha512":"60805a9b7b2771f232a10c0aa1cf81b332a338ae00f195a0b84487dbcea6f14673371d8b98575e71730c24018302a64b01d9aa01e8f255ce64ad7fcfed8a0bea","ssdeep":"","tlshash":"b81110b5a3187788f1524bb8a8941f45eba97d27421bae1b808041790b156c7a85ce8f","first_seen":"2026-08-01T21:19:11.442965Z","last_seen":"2026-08-01T21:24:36.149072Z","times_seen":5,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.540Z","timestamp":1785619118540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:21 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427601-1276\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4726,"size_decoded":708,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-08-06T07:00:58.763064Z","times_seen":18469,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInDown.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.601Z","timestamp":1785619118601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInDown.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-89\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137,"size_decoded":393,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"213b8c4eb2b35897bce80cd293410b73","sha1":"a01463905eaec1255620662679dfe847a44b2f74","sha256":"13037a61480cee3d2149c59c4f6ddddce6cec4653016cb189bc6bedd42aca2fd","sha512":"6e103fed608ba80069d3e490b359210fb659377c06081294a17a8db778aaa8b2cf1598fd5a301c1baeb01935efd296ca2ea11f9247766c0cd0d0c1c7131e4026","ssdeep":"","tlshash":"aec02b2c89500870008100d254c055009d35d7f1e4332ccf315474050e80bfd03401e3","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-08-06T06:43:00.649393Z","times_seen":18553,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.616Z","timestamp":1785619118616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:44:10 GMT\r\nvary: accept-encoding\r\netag: W/\"6900ba9a-53d8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21464,"size_decoded":7553,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-06T07:02:00.161683Z","times_seen":338410,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/nav-menu.js?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.619Z","timestamp":1785619118619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/nav-menu.js?ver=3.9.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:32 GMT\r\nvary: accept-encoding\r\netag: W/\"6a42760c-c6a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3178,"size_decoded":1238,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3178), with no line terminators","md5":"9008ee9d0ad598affe289fad4e5b23b9","sha1":"d74b54ba5353084b4ad38336577d074426edce9d","sha256":"bd47defaa1fb7495371e5cdb44b979613199984a945cbb0830156f8608e934e9","sha512":"d1e54b454b88499c35137aa7d7fe827590fa0a8d624a4322b6d9249e817385c1b4f10769d30a5ad475754ee4af16378e272b0748264dcde500cf2e247e7e9897","ssdeep":"","tlshash":"8f617685b28204e041fe7646539fa10a3513483eeb1b8065b0b740776ff6d463afaf1a","first_seen":"2026-06-24T09:56:22.543582Z","last_seen":"2026-08-06T07:00:58.74362Z","times_seen":389,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/heading.mov","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.665Z","timestamp":1785619119665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/heading.mov HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 13669397\r\nlast-modified: Wed, 27 Aug 2025 11:39:24 GMT\r\netag: \"68aeee6c-d09415\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 0-13669396/13669397\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65297,"size_decoded":65659,"mime_type":"video/quicktime","magic":"ISO Media, Apple QuickTime movie, Apple QuickTime (.MOV/QT)","md5":"54957f73565c2f440c9b4f0ea11e0fca","sha1":"5ac6bbaa01afcdffd215121b92d3ee4eaa38d7c8","sha256":"190777d5da59e2becc53afa35371c338e95c2f29464ddad474d965151f6b976a","sha512":"978326f1ede472aa2a7b558e9f1830db9fe695b666fcbd2e83ff26df6d98c871f4d0fc0c9c74575c41e5eeb4eab11db24ac4b5a906ea70d9823d1d5940697cee","ssdeep":"192:vDcD+yNgLX1crIK8SU8So4GhAp4jT+FS6PLe1lRbJMORa+IaI74:7cD+tX1Zq39+I16PClR1Mr3","tlshash":"6553bf0cf5f5d664e88267723986e21480725a12633e17b386b1b72dee836a4646139f","first_seen":"2026-08-01T21:19:11.446121Z","last_seen":"2026-08-01T21:24:36.174308Z","times_seen":4,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/heading.mov","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.844Z","timestamp":1785619119844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/heading.mov HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=13631488-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 37909\r\nlast-modified: Wed, 27 Aug 2025 11:39:24 GMT\r\netag: \"68aeee6c-d09415\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 13631488-13669396/13669397\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37909,"size_decoded":38275,"mime_type":"video/quicktime","magic":"data","md5":"318313484293d911c33012c7b61211e2","sha1":"4804674a01fa3ae51b559c9edfa3e592b1c4692e","sha256":"232bc5376b0ac735af5f34fb68e6bbdc3fcc0ed470ef9a96ea75416b0cc41407","sha512":"45fe47ae77f2b9cd9b7411e1492d9436742357d18edacd4bb5409dc7353717b058731450cba361be85cc2cb38e2bec533dfcc153fbb65b95a0968249bb74d1db","ssdeep":"48:0egSt9CkS5BMUgqNp1ZwG0F2tkB+RuxtKe6d8BvTDIdbXtaOhaC+A7UwtFwGnU:aS7RBqpjYhvom5kD9d7UwtOGnU","tlshash":"49033aa63304fe82e2b182f043e1d3017775f9b41667a78f3193e33da9693809e61788","first_seen":"2026-08-01T21:19:11.447169Z","last_seen":"2026-08-01T21:24:36.175355Z","times_seen":5,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/heading.mov","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:40.023Z","timestamp":1785619120023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/heading.mov HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=32768-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:40 GMT\r\ncontent-type: video/quicktime\r\ncontent-length: 13636629\r\nlast-modified: Wed, 27 Aug 2025 11:39:24 GMT\r\netag: \"68aeee6c-d09415\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-range: bytes 32768-13669396/13669397\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/quicktime","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.533Z","timestamp":1785619118533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-82\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130,"size_decoded":391,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"18b6260305b3bdc5100c937971d28906","sha1":"12c44b736a53dfa11c8286fe3ef05c2f64f47a47","sha256":"7263363f11b6184fe306b05a849db2de5a674258610578e594068bec72b4f2a9","sha512":"2c1751f012fd78fdf93ee1700536c117a4d9eac6fb442f3386aea7339f72ad2fcdf4835b309eafc6214da2c584bdfb47680291e191ac4b3721b21c32e5cdd2d8","ssdeep":"","tlshash":"78c092488aa4414d029a05fabcc4a951c53acbf6e9732edf7294494b4b81aad13892e3","first_seen":"2023-10-30T21:54:19Z","last_seen":"2026-08-06T07:00:58.762538Z","times_seen":45760,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=4.1.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.629Z","timestamp":1785619118629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=4.1.2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:28 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427608-ab92\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43922,"size_decoded":11287,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43879)","md5":"f739835ccaa2963d44dff09626f29dd0","sha1":"ef923ec54df73d8845c29045d783f15ffe9c36d5","sha256":"7c3bee12c9dd2a2ca02c4fa6462f7ea3dd1b491439b68c37cc2ef70eaf6a6a0a","sha512":"0d4b7dc0f55fdbe51a70ce49104c1541d9f8c9010125577fd4bc4fa5f3edccaff66d0cd2e26ae48fd4fb0084448d1e73cf011abc04e05c4db9177bd7e51e2291","ssdeep":"768:k/XscBD1+WE9A5yLce/gvd4dedEdkdPd2d4d5dqd1dIdMd/dpdedUdUdojPm7L+r:CsOD1+WE9A5yLcWgvGEeSBYWfQfOCZvf","tlshash":"0f13b55171aaca2941cf84abf463164fb7215c9cf413f0da7afc8d82a564ec7a354731","first_seen":"2026-06-23T15:31:14.017272Z","last_seen":"2026-08-06T07:00:58.779676Z","times_seen":2881,"resource_available":true,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/lib/jsticky/jquery.jsticky.js?ver=1.1.0","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.623Z","timestamp":1785619118623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/jetsticky-for-elementor/assets/js/lib/jsticky/jquery.jsticky.js?ver=1.1.0 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Aug 2025 17:19:58 GMT\r\nvary: accept-encoding\r\netag: W/\"68a603be-123f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4671,"size_decoded":1677,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7c68365cf540ce801c24b121cdf74408","sha1":"0714a0d772a235a8a4b601e584626e637fd7b1b6","sha256":"2afc088f22e4b94f48a1adccbaceb757f66251505ccb22886836d0d001b8e9ee","sha512":"b600ef0064c159f2ddbd91a13ab5833beb414dae30877b0c4c07edf19f676b99c464ebcfa674fbdbc3829be24113488a214a6a96fc01252e45faa083c5b97afb","ssdeep":"96:JSL5rPeMHi20Er0D5JSCQ2s7etU3ISlVrJh9:QZeMHiMaJSHeU3DVrJz","tlshash":"a4a1f189a7263931847b2324cf579618f3a74037c29692143dad56841fb00b582faffd","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-08-05T21:45:08.860506Z","times_seen":870,"resource_available":true,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/advoca2.png","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.280Z","timestamp":1785619119280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/advoca2.png HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":233,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-06T06:48:03.801578Z","times_seen":546806,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/css/jet-sticky-frontend.css?ver=1.0.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.532Z","timestamp":1785619118532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/jetsticky-for-elementor/assets/css/jet-sticky-frontend.css?ver=1.0.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 Aug 2025 17:19:58 GMT\r\nvary: accept-encoding\r\netag: W/\"68a603be-1c0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":448,"size_decoded":496,"mime_type":"text/css","magic":"ASCII text, with very long lines (448), with no line terminators","md5":"04ec582d0f29673a0e496d491aaffcfb","sha1":"336193e30abfdf53683f893183d9e21d90ab68d8","sha256":"10eb0b8388b0654b42faf3176d9558281b499ea9bdba0c48431b5610aeb6f833","sha512":"970a8472b7d335eda7d93aadc36252cff8b6c2b4f8bbfd3ac1a6af8cd89416697ea9a9a15248aab1a09186858bfd2000f5e3e65f38dbdced6bd4954a1577ee65","ssdeep":"","tlshash":"4bf0e523a7391ffcc817b7661ac1175e12e6c809dbd326ee18538229818a64c0ae60cc","first_seen":"2023-08-26T00:36:29Z","last_seen":"2026-08-05T21:45:08.923039Z","times_seen":771,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.535Z","timestamp":1785619118535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:21 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427601-230\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":560,"size_decoded":424,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-08-06T07:02:00.221056Z","times_seen":121075,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/fluentform/assets/js/fluent-forms-elementor-widget.js?ver=6.2.5","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.610Z","timestamp":1785619118610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/fluentform/assets/js/fluent-forms-elementor-widget.js?ver=6.2.5 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:37 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427611-2ef\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":751,"size_decoded":698,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (751), with no line terminators","md5":"58a4fc1dc987652b9cdfb9fdf7252062","sha1":"38b2d4004e10decd40cab70b194d7426fd1a9cc2","sha256":"01ec2e58020a9aeaa826379966b6d7652efaace7ab433553e8992d8f4cd1d927","sha512":"0f7a3ad170735bf013976d829e640925d3ab4d47d7441fe4ed902564cc1a5361534850fddfbee59a1dbf775d882ce22388a055601664e09b720d36cd4453f594","ssdeep":"","tlshash":"2d01106db6aa647902b756f7c0ef238bf03a11d4640288911941c9d05ebcecb1663fa7","first_seen":"2026-01-14T16:55:51.20951Z","last_seen":"2026-08-06T05:03:40.991577Z","times_seen":3268,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/core.js?ver=3.9.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.618Z","timestamp":1785619118618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widgets/core.js?ver=3.9.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:32 GMT\r\nvary: accept-encoding\r\netag: W/\"6a42760c-b7e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2942,"size_decoded":1551,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2942), with no line terminators","md5":"551e55daa55f01dcc49f7ada4eb0c6ba","sha1":"c4be1daecb826d736adf67e32de9e1702eeadac2","sha256":"75f1f31662760792bf0ee4f0f6778fef082fcf5f554d6cd31d54e784126fd1c2","sha512":"7f789b8fdd82c96bc2cc3255a534dc03bb130d7a1adcb7d0eb3d4c41ef432770f9258c818ff04c02a24db60ae4a0ccfba98d91af7ed6cf6dac1844c7af4ef5a2","ssdeep":"","tlshash":"25519684712568c743ffe876834fb21f712325a99f85c042a29053b35979cda3277f19","first_seen":"2026-06-17T09:35:18.405407Z","last_seen":"2026-08-06T06:07:32.793262Z","times_seen":724,"resource_available":true,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/jetsticky-for-elementor/assets/js/lib/ResizeSensor.min.js?ver=1.7.0","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.621Z","timestamp":1785619118621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/jetsticky-for-elementor/assets/js/lib/ResizeSensor.min.js?ver=1.7.0 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 Aug 2025 17:19:58 GMT\r\nvary: accept-encoding\r\netag: W/\"68a603be-8ee\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2286,"size_decoded":1206,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2233), with CRLF line terminators","md5":"d84327ecdcd54612e3b9ff60f3010f29","sha1":"2127b0dd225477bc8735ec15d186687653bcd1db","sha256":"ed3bc6c855c860abf7d3c8555df48d70bc185c042d00e33714a7837d270030cc","sha512":"f3e98eae57f64f9dcc3acd4e02e973446dfc55d4928cd6c7e828fd3efaf09f20c4bd0223d3f38f3abaa17312c307f360307c927851288206dde89ce1bdb865ca","ssdeep":"","tlshash":"f741053f3720712eb05fa355fd6f52999233831de7020044e298f4f45d924aac147ee5","first_seen":"2023-03-07T12:40:53Z","last_seen":"2026-08-05T21:45:08.896128Z","times_seen":1010,"resource_available":true,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.460Z","timestamp":1785619119460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-2121\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8481,"size_decoded":3016,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-06T07:02:00.219079Z","times_seen":149089,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.526Z","timestamp":1785619118526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/honeypot/includes/css/wpa.css?ver=2.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:40 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427614-2f7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":759,"size_decoded":555,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a0b823f7ab1f0a3a563fb10c3664d2a6","sha1":"0dd5bce879ab0d3b972f3ea4dedc301bcfc9d6b1","sha256":"7e7d81a09a47d0726c0de06e37e162c4b83fc2b1a4a5f5962fb5c29840183421","sha512":"20cb6d2625469aeb463242449d5040a416dd9919b63074a7adeac3912e4d779db06816dc7388d2c6a3ac23664865c3233d4b1d466b01ff01cbe41c30d929dcba","ssdeep":"","tlshash":"1901ad13f6d81181a41747a8a96bf7fd7f7e825283410f7568a1b3388b88efb2d24585","first_seen":"2024-06-04T14:19:26Z","last_seen":"2026-08-06T05:01:37.943244Z","times_seen":12211,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.531Z","timestamp":1785619118531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:21 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427601-d58a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54666,"size_decoded":7724,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-08-06T07:02:00.108994Z","times_seen":70022,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.546Z","timestamp":1785619118546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 28 Oct 2025 12:44:10 GMT\r\nvary: accept-encoding\r\netag: W/\"6900ba9a-15601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":31712,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-06T07:00:58.731915Z","times_seen":1006859,"resource_available":true,"data":null}},"time_used":671,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/logo.webp","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.557Z","timestamp":1785619118557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/logo.webp HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4306\r\nlast-modified: Tue, 12 Aug 2025 10:01:13 GMT\r\netag: \"689b10e9-10d2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4306,"size_decoded":4594,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f330bcb4052850e5158727584e3aa41a","sha1":"3308ef0fd18190243968f6e8cbab8741be384e76","sha256":"316d96551183a2947207c2bb8747b98f72f84f93250bf526d5ea880f4d05821d","sha512":"d551356ef01c8c4968fb1ac3238b01baa6ca4b44bfc656cba815eb48518cb159e9d581c432be79e06a87826037d0bfdb30497a7e286baabcdd167e08f942ebd6","ssdeep":"96:lElbw+iXwZ7ckoLAZcyVpvYqFmsUwuAUtBpJlK53V+QDFD:owTp5LinJUsUEUfpJ83LDt","tlshash":"16918d3942510328e0c887be33c62f02db467dd3678296aba48643342f97c3be18c683","first_seen":"2026-08-01T21:19:11.457861Z","last_seen":"2026-08-01T21:24:36.137081Z","times_seen":5,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.613Z","timestamp":1785619118613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/honeypot/includes/js/wpa.js?ver=2.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:40 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427614-1892\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6290,"size_decoded":2387,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (379), with CRLF line terminators","md5":"7775a2651760ca479889acaa54c604be","sha1":"0a2fc06fc2a26cb863bbe3a3024c78a094bb64b4","sha256":"46423908678c57d7aef3621a90f5256df5d305b32c1ff03755dfd6a0d1c5a113","sha512":"c8c66492396a8ea7ce34ae037aff887f715aa095d09bd7f000a9928b6c6a8f793cdad31ad44b5136fb59465d22a67d68a4ceb66ad942052495f20a572d7fb1f5","ssdeep":"192:093N+1Cw5kTf6mLo3CTTJr8p4q/1jRneo/QrUU:YTfzLo3C58+81jheo/o","tlshash":"36d15150274b40662e728769ebf7a710b3394013ea04ed01fb9d47e977e4d291236bee","first_seen":"2026-06-27T15:43:36.833629Z","last_seen":"2026-08-04T21:58:38.338723Z","times_seen":196,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":610,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/fonts/rethinksans-244c31b0.woff2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.320Z","timestamp":1785619119320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/rethinksans-244c31b0.woff2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/css/rethinksans.css?ver=1765861576\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35676\r\nlast-modified: Tue, 16 Dec 2025 05:06:16 GMT\r\netag: \"6940e8c8-8b5c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35676,"size_decoded":35965,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35676, version 1.0","md5":"458055875edc59ac9899a0a72c8e785c","sha1":"29156cd7f751212473474b82db9f298c953c345d","sha256":"c09b45b96be12831873317869fce88361278ba47a9bfc18d5c14bfe6f8a85f01","sha512":"0959368fd4dd092ac2ef8142337e3412901fb950e075b830c1d5c8078f121051fec4d1dcba23e0dd559ebbb3acb78914b05d755098325c21bfe9b78fb579c286","ssdeep":"768:LRrSJfH4h43c6tj/wfwRuYzG/StcRadcoJG739DV6uTL78Qddus0BAkAEU:LV0dj/wfwYTqtQtTiuTLAQdd4t5U","tlshash":"1ef201ae7514b4b1b040f1ab2006687de64005a756aef709ce19f9f713afc1ae9c87f4","first_seen":"2025-09-06T13:28:51.413077Z","last_seen":"2026-08-04T21:37:03.038143Z","times_seen":877,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/elementor/google-fonts/css/sortsmillgoudy.css?ver=1765861575","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.544Z","timestamp":1785619118544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/sortsmillgoudy.css?ver=1765861575 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 05:06:15 GMT\r\nvary: accept-encoding\r\netag: W/\"6940e8c7-738\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1848,"size_decoded":717,"mime_type":"text/css","magic":"ASCII text","md5":"7a360ceb3fc48ce07a66262a748e9ca6","sha1":"0248e61053458ed0b3296b3e95d2d050479385b8","sha256":"664b72e78ba621b991c76fc14ef2c7caa763a99f251790bc033bb130a64a0fe7","sha512":"591cc5ec3bfd38b6014b122e655d926434dc8eca5a3728ac620739715ba6096a7c6a066d6162accaca4e7b0b8cca3e3d75817cbac604b68e358186ef59b2bef0","ssdeep":"","tlshash":"ff31c0d24cbba20087a34dc131ca3e21ea1ea155b448e9649bfe04ccbda6c55635275d","first_seen":"2026-08-01T21:19:11.46Z","last_seen":"2026-08-01T21:24:36.140993Z","times_seen":5,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":505,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.615Z","timestamp":1785619118615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-c5aa\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50602,"size_decoded":16773,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50601), with no line terminators","md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-08-06T07:02:00.196781Z","times_seen":56219,"resource_available":true,"data":null}},"time_used":607,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.527Z","timestamp":1785619118527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 May 2026 16:07:01 GMT\r\nvary: accept-encoding\r\netag: W/\"6a1c5ca5-1578\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5496,"size_decoded":2020,"mime_type":"text/css","magic":"ASCII text, with very long lines (5495)","md5":"a741da910e7f765be235b95bbf51c2f3","sha1":"4aa1fe2fe18f0251909dbfe4fc89e6e0648ff2b3","sha256":"548c5d23d83057d2ec8b022905acafcdb513bb4e374bbd2a8ea00befdb440b88","sha512":"14f416fc431e91fd158dbbfb661f0f9e763ac0fd7b5f36b6b7038bb569bf9c4ca84d0dfaf5af86fb78a59aa7783d0b11b850dc9c1389203cf273d7df0d1ea4ed","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIE7RhPCZBG9H9zk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL862hKZBG9H9UXhz/ad","tlshash":"50b16363971031497537c83637d17ed47a216215c8332ab4e426aafccbca4275a39faa","first_seen":"2026-05-20T19:46:20.673484Z","last_seen":"2026-08-06T06:19:40.580933Z","times_seen":4859,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeIn.min.css?ver=4.1.4","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.537Z","timestamp":1785619118537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeIn.min.css?ver=4.1.4 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 29 Jun 2026 13:41:22 GMT\r\nvary: accept-encoding\r\netag: W/\"6a427602-4d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":357,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a006a019fa982ad49f20d7bbeb9523db","sha1":"6a547c9bbab84d6cdba37f24c9926065ef76abc3","sha256":"d9c370831c74b1850d70f5b1c99453d6cda21e5099428a3f21c43bd96c3acb5d","sha512":"4f0ffd920100618ad627d6b3c2dc95ff6fc362db3e358b74331136e65d49063e8fa38b6d2f25f0d0ea01ce47ac1a299f2b48667899892e961a874166d6d93495","ssdeep":"","tlshash":"d3a0029dcb84566742eb05f33818e9419a324cf5f8f332e964e8488886ddb9c2742555","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-08-06T06:59:43.235166Z","times_seen":49232,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:39.597Z","timestamp":1785619119597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.2 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 02:53:11 GMT\r\nvary: accept-encoding\r\netag: W/\"6a505e97-58e0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":5598,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-06T07:04:48.799393Z","times_seen":26551,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.9","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.529Z","timestamp":1785619118529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.9 HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 31 May 2026 16:07:01 GMT\r\nvary: accept-encoding\r\netag: W/\"6a1c5ca5-13e9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5097,"size_decoded":1527,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-08-06T07:02:00.220086Z","times_seen":48002,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rlcounsel.com/wp-content/uploads/2025/08/advoca2.png","fqdn":"www.rlcounsel.com","domain":"rlcounsel.com","tld":"com"},"ip":{"addr":"149.28.136.20","port":443,"asn":20473,"as":"AS-VULTR","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.rlcounsel.com/","date":"2026-08-01T21:18:38.558Z","timestamp":1785619118558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rlcounsel.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 20:38:47 GMT","end":"Wed, 23 Sep 2026 20:38:46 GMT"},"fingerprint":{"sha1":"C4:72:D5:14:E6:18:6B:FE:C4:3B:B4:CD:7C:33:76:82:FA:9D:98:BE","sha256":"38:CC:7A:A5:75:8B:2B:AB:14:91:75:ED:2F:16:05:2B:34:7E:64:D1:7E:E9:F0:36:C2:C8:10:FD:A8:25:CF:ED"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/advoca2.png HTTP/1.1\r\nHost: www.rlcounsel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rlcounsel.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: nginx\r\ndate: Sat, 01 Aug 2026 21:18:38 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\ncontent-encoding: br\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":233,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-06T06:48:03.801578Z","times_seen":546806,"resource_available":true,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":660,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-01","alert":"Sinkholed","trigger":"www.rlcounsel.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}