{"report_id":"0d73c3ae-7149-4764-aeed-46d5295a3a9c","version":0,"status":"done","tags":[],"date":"2026-09-25T13:57:03Z","url":{"schema":"http","addr":"geckotristate.com/","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":0,"asn":55293,"as":"A2 Hosting, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"geckotristate.com/","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"title":"Home - Gecko Hospitality","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"geckotristate.com/","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":0,"asn":55293,"as":"A2 Hosting, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T13:57:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"geckotristate.com","ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"domain_registered":"2021-10-06","domain_rank":0,"first_seen":"2026-07-08T18:33:02.634586Z","last_seen":"2026-08-05T16:33:53.626606Z","alert_count":142,"request_count":71,"received_data":2006867,"sent_data":36906,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Yoast SEO:27.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SVG Support","description":"SVG Support is a WordPress plugin which allows you to safely upload SVG files to your media library and use them like any other image.","website":"https://github.com/wp-plugins/svg-support","common_platform_enumeration":"","icon":"SVG Support.png","categories":["WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tiny Slider","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"Elementor:4.0.7","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":7,"received_data":5691,"sent_data":3951,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":4,"received_data":144797,"sent_data":2554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"3googleapi.net","ip":{"addr":"172.67.199.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-04","domain_rank":7278083,"first_seen":"2025-08-21T11:59:54.879455Z","last_seen":"2026-03-21T18:28:33.407747Z","alert_count":0,"request_count":1,"received_data":23861,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","size":5722,"data":"","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-09-25T15:50:12.69249Z","times_seen":51696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/svg-support/vendor/DOMPurify/DOMPurify.min.js?ver=2.5.8","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"704af5057face7abafd1fb4e450bb53e","sha1":"4f4d8027b1c36aa41ab943513721db89bc7d05e3","sha256":"a4e1299c636d1878a7ba2dc261638458c930a12367300bfc7cbc6b4b2adddcd6","sha512":"5a124588b70eee06b2c7128bc32859a4247695e8a40051152bd7da10d747ba9990f57e69584e732be582445fbcda34e203589d858572a64b6237bc91987b2d28","ssdeep":"384:qLDozC+QMDfJvIL4tv86lMZ33JUaOlZf8bS3J5eubiKOyoFoKRHZj:auCQRImv8SMZHiaOlZf8bS5subJOyoR3","tlshash":"77a2084d7c1179756fda01e960af490eb17d145a700c8460e6cedcb868baa95a037f2f","size":22392,"data":"","first_seen":"2025-02-24T23:55:17.52983Z","last_seen":"2026-09-25T14:02:17.093432Z","times_seen":4102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-25T15:26:00.659186Z","times_seen":1069382,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-25T15:26:00.597427Z","times_seen":977339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/svg-support/js/min/svgs-inline-min.js","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ebe9d436a30fedc7a3da0dd4d0c7ddf","sha1":"2f65d38eb4d95c0ad76116cc9e628b069648ce20","sha256":"ff831a9611197a461e1da89256f0418d39f279130792d755db5c39d1b07a78a3","sha512":"be7fa17b1c8e73a816d933b528e6060a900c48e002eb023734dae671365bdd97596d62ff622c8e3e1992dde939ec0fc77061d8ca0ea9f490e58d2387dc5ed476","ssdeep":"","tlshash":"1a31e186f66c20d954bb21a5a07712367516493cd419c998d30abcd128fdd4e3129fbf","size":1744,"data":"","first_seen":"2025-02-24T23:55:17.548793Z","last_seen":"2026-09-25T14:02:17.034721Z","times_seen":4637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/bodhi_svg_inline-js-after","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b409b6bfd45f41e9bad741bd8db24ad9","sha1":"efff6bd658d18c49d2f293c1690a5d662a76560c","sha256":"f02646bb39aca14a064741ebc974a207fde54d50c63f47751acca5ba81f3f770","sha512":"4879dd3ab1303458451a10aabfe3e5d192d50babf62195a332735a5763543873eaadb3bfc8bfcfdc9c6cfb85da8c75b77a0fe1250470f9eb910a9f357527fc6e","ssdeep":"","tlshash":"cad08046ed60558e415b09319cd1f5690414ccfbc1701444e12f58b85136cad314965f","size":267,"data":"","first_seen":"2025-12-31T16:37:25.870003Z","last_seen":"2026-09-25T14:02:17.124171Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/bodhi_svg_inline-js-extra","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1232b20ee91d97817382a63a9d2d6a24","sha1":"832cc51abc852e9d1b653f350ce953107789b89a","sha256":"251d7b30f6139fa4aa3c5988c20632e44d98d1765b0e9a2a485af679259e91f8","sha512":"49b877a64050f588e8bda684e789f0edce313a3ce16de00c5ea3a881f5bed77a2629e8f070e781c460063d0ba634584f8df540590b591ff0a94c39b543f0e7f7","ssdeep":"","tlshash":"1bc0240dc1f45d1c15100c3040175373501054dcc0d004f4c117c140c070d4c53d4545","size":174,"data":"","first_seen":"2025-12-16T12:07:52.397415Z","last_seen":"2026-09-25T14:02:17.127117Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-09-25T15:40:37.549803Z","times_seen":76728,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"3googleapi.net/wp-json/geckohospitality.ca/gtag.js","fqdn":"3googleapi.net","domain":"3googleapi.net","tld":"net"},"ip":{"addr":"172.67.199.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2f76f3de4bb1397c5c921039a7391b9","sha1":"4240871ad616b1e67ee4a8bbac8836a63d2bfde9","sha256":"c3ade50e8cb5df01ed34c94cf820f2a17431caf89f48b9eaec816d1abcf49b8e","sha512":"8a3eba37b17b999932fb3e62352ce064d5c03f72de5d17130a772a6bfbad30da19f89f3518b843f9945b65f82939a906241d7b86a0ffd2f4f5a403938c7704b8","ssdeep":"384:00eUW6so7WzC9XCI4MaLZso0y2iMTO1+EUwXNpPCRYnfJmYz3wGPjbStBxl3q36Q:ReUW6s3zC5CI4MgZso0OMq1+Lw9VyYnt","tlshash":"69a2a654b1d079e033432ff7721bf4c9d92d18ad3484485bf684bd886ebaa6ae8d1970","size":23164,"data":"","first_seen":"2026-02-20T09:47:51.526122Z","last_seen":"2026-09-25T14:02:17.096964Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/accessibility-widget/lite/frontend/assets/js/widget.min.js?ver=3.2.1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a6be91b711b0eda66e6b0021f4a84d","sha1":"a1417d21d72003ad248e4ed53bf6481f2718fa40","sha256":"f72dad1ae9a9802390749e4124451db20260713613dca110b2769295c1e78f4b","sha512":"1e0375719a7d3df1e581f2b2eaf50b50692fd1cce14dd04e923c3925cf93238a1cb1b6b85345a10f6fc9de654d1a8e6d9f1b7bed647f90b82e64218c8ae4a3f6","ssdeep":"3072:TF8Wm5hShW2h4T6/jFw6tjVyme1Ik/4AfSE0SJ3vqhiEmuWBPvUMr2BIdk16ds7j:TF7m50kFu","tlshash":"6944ebdea279081f8204b393fd36ae4d2c9854e1a840c33bafbd551be3c6585d693b4d","size":278181,"data":"","first_seen":"2026-05-07T14:37:08.638407Z","last_seen":"2026-09-25T14:02:17.101296Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://geckotristate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/2025/10/Home-Hero-Gecko-Image.webp","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.694Z","timestamp":1790344582694,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/10/Home-Hero-Gecko-Image.webp HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/wp-content/uploads/elementor/css/post-28.css?ver=1778203118\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 02 Oct 2025 09:07:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 148896\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.753Z","timestamp":1790344582753,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://geckotristate.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 338637\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/jeg-elementor-kit/assets/css/elements/main.css?ver=3.1.2","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.060Z","timestamp":1790344582060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/css/elements/main.css?ver=3.1.2 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23685\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":282752,"size_decoded":24179,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"271084fca01b059b89ebfc9a9c819d1d","sha1":"b23d4490ea6c41d80745ab7eaa92bccd20fef953","sha256":"17623529fe0a60a1f014bef894c4cae1f87d67d0adf78051bc953ff8e9eb7c4b","sha512":"d6f3db1f27891c67b5dc053d01391ee65f58fb0603a065ea77d55cc892c643d107648b1f38a0414071bc657a90d8c7658ee102cc5cf37cdf5425510b344c9649","ssdeep":"1536:m1LULwvU36LGm2hSdSCbvMEFx+mXD44d1Ob8ejJO8FHw63VyY5jAGXoRlSKnXIMF:DzDmyM8jMbLODQz3i3bnhn5nSnAno","tlshash":"0e543255f8eb7105607fc33ed1ce516f8b309c818692a49be961a60bcf72d8433e6a17","first_seen":"2026-04-22T14:14:03.382879Z","last_seen":"2026-09-25T14:23:36.044871Z","times_seen":928,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-carousel-module-base.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.077Z","timestamp":1790344582077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-carousel-module-base.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 582\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3846,"size_decoded":1016,"mime_type":"text/css","magic":"ASCII text, with very long lines (3803)","md5":"2d1e93eda33e016bba9e10ffffd4b3cc","sha1":"13ba8f2e7eaf5778f6858139d727ee35952dd9d9","sha256":"4758617c41dce9d4c0e5651b937bca6e901f3d4f5336dc461eaeadf1ea94111c","sha512":"d9f53ee0aa1c3f3bf6e4ddf035f5d46617131c7c00ee6aaabd271fee90e37dfca01fd9c3aea648a7e3f9a6fdb5372253820bc7482b03620d3df385cb80c3a339","ssdeep":"","tlshash":"2b81b44a7e471106662f0f2f681382ad76599ccca5438dd4e5e2781bc6fccf8332e45a","first_seen":"2026-04-28T15:37:47.120125Z","last_seen":"2026-09-25T14:02:17.105493Z","times_seen":887,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.079Z","timestamp":1790344582079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 214\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":603,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-09-25T15:40:37.508549Z","times_seen":129429,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.093Z","timestamp":1790344582093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 928\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10255,"size_decoded":1362,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-09-25T15:50:12.684565Z","times_seen":60712,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-46118.css?ver=1778203113","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.105Z","timestamp":1790344582105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-46118.css?ver=1778203113 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 907\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6465,"size_decoded":1341,"mime_type":"text/css","magic":"ASCII text, with very long lines (6465), with no line terminators","md5":"bcbc1d73048c471728cd93a40e5d7f2f","sha1":"ad13f7cdc15724ef6a746f64fdb1e16b88bcebc9","sha256":"2e1deafe4bab80c17f06b27eb72fe21a1477759db6f06b05174ddebb9e14ecb6","sha512":"5b3a174776d68803c68231548b689ff9e9109754190a29c932189908467983d668698452f4d706e680d954fa0f921146aa12e1f3952bf5eddf2061a7582bc2b5","ssdeep":"96:SfConyZ4ynmW1CMahDC/Eilr0HzLChEBfjf0vb7azqBJKSBJ5usD7c:snk4UmW1CMahDC/Eilr0HzLChEVQM","tlshash":"3ad1ad987c1bd01af26f04ef6587b45c101ca8d8dd1a9be2f8248523eaf7e6573b4742","first_seen":"2026-02-20T09:47:51.505509Z","last_seen":"2026-09-25T14:02:17.052591Z","times_seen":4,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.337Z","timestamp":1790344582337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 10:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30194,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-25T15:26:00.659186Z","times_seen":1069382,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/2025/03/Home-Industry-Professionals-Restaurant-Slider-Image-1-e1754845334221.webp","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.374Z","timestamp":1790344582374,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/03/Home-Industry-Professionals-Restaurant-Slider-Image-1-e1754845334221.webp HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-173.css?ver=1778203117","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.452Z","timestamp":1790344582452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-173.css?ver=1778203117 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 701\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3923,"size_decoded":1135,"mime_type":"text/css","magic":"ASCII text, with very long lines (3923), with no line terminators","md5":"42b20de0f9df5e495d977adf012d2334","sha1":"178cc05cb0bc2f6c8db56aeddc8644c98bf5d4f0","sha256":"aa8ea949aef57f60bb6cd516252a2ababa2c2c02972ef6c4919f8946498f6baf","sha512":"cea28382221a78dc8e88892fc45b02191b89ede1b040d4786a869ee74cab2314dcf731c310deae9cd2774c2517c0e3db444dd9684063fd459646e9633095b621","ssdeep":"","tlshash":"f8815d54bd13d225f13f086fa00bb66d24189ccee93fabd6f9545123e0f6e527360915","first_seen":"2026-02-20T09:47:51.512786Z","last_seen":"2026-09-25T14:02:17.079319Z","times_seen":3,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.332Z","timestamp":1790344582332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Lato:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 13:56:22 GMT\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8264,"size_decoded":1277,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3e60d92d1a3ec9b0ecddb3b2f3818ffd","sha1":"517b66169afb17d5d0538ae8d559371698077511","sha256":"9aa57887b113c39cf22bae9d6289ec0c6624a0b274c2124555e81235df512597","sha512":"791f3208a2b56caa224bd13ccb1f89f5660be92fa92e8d0163a5c0a081f0738e2de67c9258a67f2616e968cfce980018d1c18aec1741b2f05540357d77d68895","ssdeep":"192:43pv33pUn/J3n/lOw3Oir/i3r/Ux/o3x/TpwOp7RIu71D5Mp76D:4353m/R/lFx7u7Up8pTHF","tlshash":"0802c092086ba508db930dc222da7e36ff0fa25064559935efff14c8bc97c6a5361b0c","first_seen":"2025-09-17T05:16:48.274798Z","last_seen":"2026-09-25T14:02:17.106438Z","times_seen":9439,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":48,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.458Z","timestamp":1790344582458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15445\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50602,"size_decoded":15895,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50601), with no line terminators","md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-09-25T15:40:37.533164Z","times_seen":68740,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.459Z","timestamp":1790344582459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Feb 2025 10:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":7261,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-09-25T14:49:23.111114Z","times_seen":351312,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.463Z","timestamp":1790344582463,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Aug 2023 11:18:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1687\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5520,"size_decoded":2136,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-09-25T15:40:40.893344Z","times_seen":211839,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.473Z","timestamp":1790344582473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6191\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23939,"size_decoded":6640,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23896)","md5":"35d7795d3e10623e591254262e787c3a","sha1":"758695cbcc18ee4ab6d8defe4bd73db4704228d1","sha256":"2e684728f70d905f09f38a996426253d6208409930dc24e046658c18e898cb23","sha512":"57e53f95885b62d712c9dbe97f9b48a7cd32787b46488ce03542e401e15122110a9696677a8bb176a64682d6045f2ad8410201c6613d6fe62d588de911fe03c4","ssdeep":"384:btwgZ+EVxFm6cKJsqdldgglQtHuaQkba/iZTSXDTZmMo7YtD/MHJiIVkoh/vF7Nk:hwK+EVxFm6cKiqdldgglQtHuaQkba/ok","tlshash":"63b2d9053163ac7a50cf815be067420e7b374899b40570ed7abc6cdb95b8d9a33ea335","first_seen":"2026-04-28T15:37:47.151216Z","last_seen":"2026-09-25T14:02:17.071141Z","times_seen":8220,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-5.css?ver=1778203112","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.063Z","timestamp":1790344582063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-5.css?ver=1778203112 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 591\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2052,"size_decoded":1025,"mime_type":"text/css","magic":"ASCII text, with very long lines (2052), with no line terminators","md5":"f0fa08416ebc04dd970040fa752cdc33","sha1":"11d5692dedf2ccfc6971fa5f64a367e755ff0b27","sha256":"590d8ac7b762b3b1f19eb904368f004ffe575f25f18618effa4d71fdb95e824a","sha512":"7d59c61f68d4278cc6d3c9989278210ffa9a34d2ffe158e1778a640e6081846bc17cf9d1af3c8ad61fd6b0b16b53c341458b106b8143dc129e1c11b0b6249c9b","ssdeep":"","tlshash":"44417b42bd23e022e07b497fd2c7f42c041c845f516e9adaf42d8649e9bfa4b6329707","first_seen":"2026-02-20T09:47:51.524318Z","last_seen":"2026-09-25T14:02:17.086377Z","times_seen":4,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.074Z","timestamp":1790344582074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 699\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5486,"size_decoded":1133,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-09-25T15:23:18.566942Z","times_seen":90647,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-testimonial-carousel.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.076Z","timestamp":1790344582076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-testimonial-carousel.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1398\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19691,"size_decoded":1833,"mime_type":"text/css","magic":"ASCII text, with very long lines (19648)","md5":"d3551156addf647381dc0720734980b5","sha1":"51d35e931d14a06f4657aee83bed871f0a7f9e20","sha256":"55ce66067e335e018c93356e175540efce05d0f5d0d8eb1aca0cc433b3d0a9ab","sha512":"75892139060e610c92b5ddc2df6514db625ea28197a4b37fbf5f9401212d5e87ed33082a94ffd9aad0ab4d81f865b6621e6a24bd9ed20d230c7bb54c383a38d1","ssdeep":"384:EuJJLi4irvmCP2Jq2Hxu2I2+leQmSJ7yC:E9eWOULyIt","tlshash":"969225613c2b8041201fb93fe00bd51d4e54fc85afe6ab71b856a9178db6cb83b73589","first_seen":"2026-04-29T05:07:03.659985Z","last_seen":"2026-09-25T14:02:17.066446Z","times_seen":529,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-45964.css?ver=1778203113","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.327Z","timestamp":1790344582327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-45964.css?ver=1778203113 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 907\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6461,"size_decoded":1341,"mime_type":"text/css","magic":"ASCII text, with very long lines (6461), with no line terminators","md5":"db95886e6311f1189ad4298204700676","sha1":"750e7d499c98d059860086a38911918f134663af","sha256":"47951339599e72a674cfcf6965bc0893e9a0c2d32c82f7b777259c1de1f942a6","sha512":"ae0c5f8c9d14ed580a8297bdf17cb22b89142edb919a2302bbd3a0c7635624d6064db2e48de2ea91cb3b59fba7790e24679f2bcd345e87674e79db1d8e44fbf2","ssdeep":"96:yfCoimW1CMahDC/Eilr0HzLCxEx/jfEv7DabSZBSKpRhWkLzy:MimW1CMahDC/Eilr0HzLCxE9gy","tlshash":"56d159d57c17901ab06f04ef60c7b05c686cb8d88a1996e3f8688533e7f6ea533e0746","first_seen":"2026-02-20T09:47:51.466829Z","last_seen":"2026-09-25T14:02:17.027065Z","times_seen":4,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Cabin:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.334Z","timestamp":1790344582334,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Cabin:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 13:56:22 GMT\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10668,"size_decoded":1334,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5703e43a9cb576ded80dfbb2d45b8b1f","sha1":"44ffb85cfb140eb881952f284ecf68d43b944438","sha256":"1a058be3164c6cbf877af0dd069ef0207ebe3ea905712c5f6a6d3ff9f71a1534","sha512":"c3684ed6323cb1904da106142c9e50c0e6c7dea26a7a631417612dbe3c6624529e9cc8ccf891e40737c4b0d80ca9ad03d7ecea3ae3df10da4552070cfb8510a7","ssdeep":"192:cziWlidGWiGzZWlZdGWZGzkWlkdGWkGzTWlTdGWTGl3xyT+YxpTvtx0TwGxj0:czblIJlzklPJQz5lKJ/zClhJqqLw+","tlshash":"f322e16208ab5540d7934dc233ce7d32de4eb1a47444d979affe1898bc9bc22a32571c","first_seen":"2025-09-12T04:45:42.164234Z","last_seen":"2026-09-25T14:02:17.099984Z","times_seen":640,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":49,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-slider.js?ver=2.9.3","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.467Z","timestamp":1790344582467,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-slider.js?ver=2.9.3 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:15:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12391\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31946,"size_decoded":12841,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31946), with no line terminators","md5":"55f3e7c5cb2956cc114e146b31529646","sha1":"6d761ff2ac1303232814780cd057981270602a93","sha256":"2cce3f44895a78eb42466d1aa10e4aff6c22855d751e386755ac18a229cdb5e9","sha512":"7247eca32d2b1136515c5b7e03a7b1f80cc15290ebeb5e02b6d968dcf8f1d32af428c0e74ad071468ff92335cc2c136c421d317054b86c1bc40b4e6bb3629ce1","ssdeep":"384:Y8IekegWyzWjHQkJ/Yko2vvWCDzX2a/kP/BmnmkwhVeG6iVCzkAdhpirix4uQc2k:Yjnqx9vXkXB0mkwinPiOx4lZMOQiI","tlshash":"03e22cc93161757342d322f501af810a7635a524de038a80e42bfcd87efda79916fe6e","first_seen":"2026-01-11T20:27:51.118436Z","last_seen":"2026-09-25T14:02:17.116346Z","times_seen":410,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.062Z","timestamp":1790344582062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6613\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54666,"size_decoded":7048,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-09-25T15:40:37.521327Z","times_seen":81864,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.068Z","timestamp":1790344582068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":560,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-09-25T15:40:37.533735Z","times_seen":133331,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-post-info.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.455Z","timestamp":1790344582455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-post-info.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 167\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":559,"size_decoded":601,"mime_type":"text/css","magic":"ASCII text, with very long lines (516)","md5":"3ebba202a58c629fbf1891afc9e287d8","sha1":"14afbbb2e0bfe5dbf9b6b33bd2c32a95c4f8a98c","sha256":"6e4c053ca704b66d5ccbfc94bce6a121bad2c737aa57065cf2297d71efc08aec","sha512":"d8bde717c5d3712e7689b64a53739335dd9a812328f20ba0be5df4152e05626d8943e6ba912ca447db4695bd038a4443dd274a61c410efd0cd2ec6f93bbd71c6","ssdeep":"","tlshash":"54f0b2d17ca7c1069aff64172a972a890488c4cee9b0ec85f8454313e73adc93b60124","first_seen":"2026-04-28T20:01:21.332293Z","last_seen":"2026-09-25T14:02:17.056064Z","times_seen":723,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.461Z","timestamp":1790344582461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38152\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143709,"size_decoded":38602,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-09-25T15:23:18.562824Z","times_seen":109621,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.464Z","timestamp":1790344582464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 27 Mar 2026 20:02:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 493\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1830,"size_decoded":941,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1830), with no line terminators","md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-09-25T16:18:31.737954Z","times_seen":30012,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.woff2?bv8d8l","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.745Z","timestamp":1790344582745,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.woff2?bv8d8l HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.css?ver=3.1.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.099Z","timestamp":1790344582099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 464\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6713,"size_decoded":898,"mime_type":"text/css","magic":"ASCII text, with very long lines (6713), with no line terminators","md5":"f94a49c4961bc08d71abedf98d482d79","sha1":"1f71eca41def14e975ce1ba14313f635323a8d01","sha256":"cf502b45ef8bcae37a65822f78546f6cc7db74faf8f48850bf8a860262817fe6","sha512":"709ba29bb0c9d3e4ff5d505c9d40e51cc2aa069dec27809b17ea754d60f5aa30f7888d0a5aa7c96effaeb98b4bda0ecb0136f685532d073051c14691b2ab31a4","ssdeep":"192:lozzzlztzDTIeIUI8IxdEzWEznI1zkDmdz0zaz6zgsIXIBIhI6dJzLJzQIuz91rn:KnhBhXIwYY2+OhSnqmwsIBOt","tlshash":"e1d1a6757f0b6a358d6b2c5b1357a06f668080e9a182a342c04318035cfbfde7bb857d","first_seen":"2025-12-04T23:21:35.478119Z","last_seen":"2026-09-25T15:50:08.769897Z","times_seen":56385,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.064Z","timestamp":1790344582064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12380\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59344,"size_decoded":12816,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-25T15:50:12.68297Z","times_seen":117169,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"3googleapi.net/wp-json/geckohospitality.ca/gtag.js","fqdn":"3googleapi.net","domain":"3googleapi.net","tld":"net"},"ip":{"addr":"172.67.199.49","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.376Z","timestamp":1790344582376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"3googleapi.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 17:33:23 GMT","end":"Fri, 18 Dec 2026 18:32:05 GMT"},"fingerprint":{"sha1":"A9:E1:1B:AB:7C:99:C4:7A:EC:12:C2:BE:F1:6D:41:D7:AF:8B:D6:3A","sha256":"05:92:B1:47:45:9F:85:E8:05:94:1B:0B:E7:4D:AE:1C:25:9D:7E:DB:83:84:2F:5C:38:59:60:93:E3:A6:47:84"}}},"request":{"raw":"GET /wp-json/geckohospitality.ca/gtag.js HTTP/1.1\r\nHost: 3googleapi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Jun 2025 05:33:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5a7c-637a9bad81251\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if%2FggtFIKeG0n2C8qonfjUzwnAJLifb6HsBlJiE%2FCypybbJmMYfV2FBpP6NNBzSTecfHaWh6WLlMkl%2F%2B3AFvy9BAzKDDLGEFKyQewv5Ij2SpAeyO%2FPLvgER9agSch6AYIg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a40a88283e034c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23164,"size_decoded":10087,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23164), with no line terminators","md5":"a2f76f3de4bb1397c5c921039a7391b9","sha1":"4240871ad616b1e67ee4a8bbac8836a63d2bfde9","sha256":"c3ade50e8cb5df01ed34c94cf820f2a17431caf89f48b9eaec816d1abcf49b8e","sha512":"8a3eba37b17b999932fb3e62352ce064d5c03f72de5d17130a772a6bfbad30da19f89f3518b843f9945b65f82939a906241d7b86a0ffd2f4f5a403938c7704b8","ssdeep":"384:00eUW6so7WzC9XCI4MaLZso0y2iMTO1+EUwXNpPCRYnfJmYz3wGPjbStBxl3q36Q:ReUW6s3zC5CI4MgZso0OMq1+Lw9VyYnt","tlshash":"69a2a654b1d079e033432ff7721bf4c9d92d18ad3484485bf684bd886ebaa6ae8d1970","first_seen":"2026-02-20T09:47:51.526122Z","last_seen":"2026-09-25T14:02:17.096964Z","times_seen":4,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":40,"connect":18,"send":0,"wait":83,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.753Z","timestamp":1790344582753,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://geckotristate.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 338632\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.087Z","timestamp":1790344582087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 20:02:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1126\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5097,"size_decoded":1561,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-09-25T14:23:35.977832Z","times_seen":51586,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-off-canvas.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.097Z","timestamp":1790344582097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-off-canvas.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 713\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3153,"size_decoded":1147,"mime_type":"text/css","magic":"ASCII text, with very long lines (3110)","md5":"074bfb1b3a5326b6503127dff586ac7f","sha1":"b8bea2309559091799c2abdc93a3608d76ae3556","sha256":"1b2f1840dc971d0df1b7c9e2fbbb0ef4b58aabffa85de8bd772d9d02842c7001","sha512":"b5d13226597bd6e25408d9fb65b51798093bf90c249a6541194023e90a33797b8be69aa4238c888ee593cacd4d6cc32538ad6e4b70186cb6f64ddcd05e754cd7","ssdeep":"","tlshash":"5b516cb43c9f50146eff122b124760cc8b7098d4a82ae89db9e65b064ffed9f3311665","first_seen":"2026-04-29T21:45:40.178493Z","last_seen":"2026-09-25T14:02:17.064977Z","times_seen":267,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.098Z","timestamp":1790344582098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1039\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5110,"size_decoded":1474,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-09-25T15:50:12.684061Z","times_seen":85104,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.101Z","timestamp":1790344582101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/conditionals/popup.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 328\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":995,"size_decoded":762,"mime_type":"text/css","magic":"ASCII text, with very long lines (995), with no line terminators","md5":"3034ff16bd46f230e8c546990ff1735a","sha1":"a80e0d3f3dadb578d99869db272f5cecb9a3997d","sha256":"3e86e49c78cd2befb9c7e7b27ee263298290728f7489b17077f00c25e37a5838","sha512":"06d12b5e5d9f6c1b240c03a8e42f8c1cd327a524bfc6b5757ad77311fad793bf20635f4f5910db01d4f9b3ec781f3d3fa0699cc8186c501d32d4ac3766e90a45","ssdeep":"","tlshash":"d6115b913d5bb538901f423bba433ecd691254c5b7022a98ec70e83745e5c84756e5e9","first_seen":"2024-12-11T20:13:02.117127Z","last_seen":"2026-09-25T16:03:05.09055Z","times_seen":47176,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.744Z","timestamp":1790344582744,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://geckotristate.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:02:37 GMT\r\nexpires: Tue, 21 Sep 2027 16:02:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nage: 338025\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.751Z","timestamp":1790344582751,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://geckotristate.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 338637\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.086Z","timestamp":1790344582086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 20:02:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1581\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5456,"size_decoded":2016,"mime_type":"text/css","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-09-25T14:23:35.991587Z","times_seen":44640,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-201.css?ver=1778203117","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.453Z","timestamp":1790344582453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-201.css?ver=1778203117 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 705\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3846,"size_decoded":1139,"mime_type":"text/css","magic":"ASCII text, with very long lines (3846), with no line terminators","md5":"85a7f37552e8be19dd100e2d78b3c118","sha1":"4000a4b4894551f80bd3f810f6f41b566b4d6981","sha256":"da513580052a3c56b330278b66921a18c2d8e8d6a004dfacf7be2149b6cd1d17","sha512":"a15284b7b9f19488b0e7ab55390dbb8f55d26a71c3e83172e85efda955e8abf6a4cb2d50a663c6fecee7cdae838619a9591e079f71435984671b5feffae9db04","ssdeep":"","tlshash":"e281676a7c57d22df67f042f2007b5ac285ca8ced92e9bd6f8944113f4fad523364914","first_seen":"2026-02-20T09:47:51.498459Z","last_seen":"2026-09-25T14:02:17.027985Z","times_seen":3,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/2025/03/Home-Industry-Professionals-Background-Shape.svg","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.695Z","timestamp":1790344582695,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/uploads/2025/03/Home-Industry-Professionals-Background-Shape.svg HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/wp-content/uploads/elementor/css/post-28.css?ver=1778203118\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 21 Mar 2025 07:20:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 202\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T13:56:20.811Z","timestamp":1790344580811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=UTF-8\r\nx-pingback: https://geckotristate.com/xmlrpc.php\r\nlink: \u003chttps://geckotristate.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://geckotristate.com/wp-json/wp/v2/pages/28\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://geckotristate.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 25 Sep 2026 13:56:21 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Yoast SEO:27.5","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SVG Support","description":"SVG Support is a WordPress plugin which allows you to safely upload SVG files to your media library and use them like any other image.","website":"https://github.com/wp-plugins/svg-support","common_platform_enumeration":"","icon":"SVG Support.png","categories":["WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Tiny Slider","description":"Tiny Slider is a vanilla javascript slider for all purposes.","website":"https://github.com/ganlanyuan/tiny-slider","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Statcounter","description":"","website":"https://www.statcounter.com","common_platform_enumeration":"","icon":"Statcounter.svg","categories":["Analytics"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor:4.0.7","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]}],"data":{"size":338738,"size_decoded":56424,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055), with CRLF, LF line terminators","md5":"c79af4759472fed71dfef360989fdf95","sha1":"3c1ff0c3a72ce7e0ad3b8ae847ddce0aada35d90","sha256":"c8dca69892107470d28a0f150ae907e2c0f5b58d42402a368bfb473b647e9edf","sha512":"5555c3d366c61bf60daed58d155adc93e494ae49963b8c05341dfa73b3205400fb29a85add15c2b3b1e05dbf19ee20abca169140469959aba8ac88515d405465","ssdeep":"3072:G/wnt+gYgFYwe7L4wxmYSodaM+nl+nrMPjqcGaNQiz70VZFp2b2F2q7kp3jGfAqz:ztY/7L4wxPdaM+nl+rMPGcbNQi4","tlshash":"44747496b6b2492d165b84c7cc32a85c689e9ef5d020c7f5bcff4113e264c50b2a936f","first_seen":"2026-09-25T13:57:14.194026Z","last_seen":"2026-09-25T13:57:14.194026Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":28,"connect":154,"send":0,"wait":692,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/svg-support/vendor/DOMPurify/DOMPurify.min.js?ver=2.5.8","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.336Z","timestamp":1790344582336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/svg-support/vendor/DOMPurify/DOMPurify.min.js?ver=2.5.8 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Jun 2025 05:13:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8468\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22392,"size_decoded":8917,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22164)","md5":"704af5057face7abafd1fb4e450bb53e","sha1":"4f4d8027b1c36aa41ab943513721db89bc7d05e3","sha256":"a4e1299c636d1878a7ba2dc261638458c930a12367300bfc7cbc6b4b2adddcd6","sha512":"5a124588b70eee06b2c7128bc32859a4247695e8a40051152bd7da10d747ba9990f57e69584e732be582445fbcda34e203589d858572a64b6237bc91987b2d28","ssdeep":"384:qLDozC+QMDfJvIL4tv86lMZ33JUaOlZf8bS3J5eubiKOyoFoKRHZj:auCQRImv8SMZHiaOlZf8bS5subJOyoR3","tlshash":"77a2084d7c1179756fda01e960af490eb17d145a700c8460e6cedcb868baa95a037f2f","first_seen":"2025-02-24T23:55:17.52983Z","last_seen":"2026-09-25T14:02:17.093432Z","times_seen":4102,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.466Z","timestamp":1790344582466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1442\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3721,"size_decoded":1891,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-09-25T15:50:08.749543Z","times_seen":74365,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.470Z","timestamp":1790344582470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Oct 2025 00:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1852\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5661,"size_decoded":2301,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-09-25T14:49:23.074421Z","times_seen":206691,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.748Z","timestamp":1790344582748,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /s/cabin/v35/u-4i0qWljRw-PfU81xCKCpdpbgZJl6Xvqdns.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://geckotristate.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:02:37 GMT\r\nexpires: Tue, 21 Sep 2027 16:02:37 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:56:51 GMT\r\ncontent-type: font/woff2\r\nage: 338025\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.750Z","timestamp":1790344582750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://geckotristate.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 338637\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.072Z","timestamp":1790344582072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4248\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":4683,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-09-25T15:25:52.204221Z","times_seen":147418,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.080Z","timestamp":1790344582080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-spacer.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 287\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1793,"size_decoded":721,"mime_type":"text/css","magic":"ASCII text, with very long lines (1793), with no line terminators","md5":"c329a1f8486b82d9b9c7cb4d7060f346","sha1":"85b874b1c09c4f163738d439cacd53e6141f4f2b","sha256":"808a659eb4e85607c6efe022bff149c3076853c5570a322bd35e5e8cb9458904","sha512":"414974a35c9d401df85422ca92e886a3e0b57c6cd071023dd97d2987157fc9976d777d7b44c0c8d4a8caac81b0c1b862828bdaa67e5b05345894964a1dbe81a4","ssdeep":"","tlshash":"3731f650bd07662c787fa60f8413129c658494dee581ccc6dba1f60aa2fcde33336935","first_seen":"2025-04-08T12:29:44.439106Z","last_seen":"2026-09-25T15:17:36.303851Z","times_seen":44322,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-loop-common.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.082Z","timestamp":1790344582082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-loop-common.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 207\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":207,"size_decoded":596,"mime_type":"text/css","magic":"ASCII text","md5":"297dc04746732f79312f217276044f03","sha1":"0e279410aae9920ae39dff68a242b1a7ee14d22e","sha256":"fe1ffcfd1de38f5620c1f4ad9247e2b13c6928c8fd9da1990986612b03ddba51","sha512":"b20505e0ede4576a82bb99dbd80dd5ccfff2b47bdc03a12b6da344a72d2125df5de1f23655a989c2e454bb1f735056cff443b6d54f0b01d46dc951d53e0ce42d","ssdeep":"","tlshash":"cfd0226efcf302b0148f463d2bd3a48af0d000c5eac08ea15de3a2119bb4c816272024","first_seen":"2026-04-28T20:01:21.320071Z","last_seen":"2026-09-25T14:02:17.089836Z","times_seen":1016,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.743Z","timestamp":1790344582743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://geckotristate.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 338632\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"font/woff2","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/2025/03/Home-Gecko-Footer-Logo.svg","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.380Z","timestamp":1790344582380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/Home-Gecko-Footer-Logo.svg HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 24 Mar 2025 23:07:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9477\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25166,"size_decoded":9917,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd5101fab0def71aa0c3c823d44b6099","sha1":"5b508f252c268d93eb66dde4bc9d2f41cf6f5f09","sha256":"36686471eb08e5d77d216172ddbf05a6f5886c9a01e1ab4d275152219ff7fb71","sha512":"7841f9612548a9273b74cdbc5d66352a4f0b049a5f670238cd84efd79f4aa5734fb16022dfc01c70a9a57d596d3503352dcfbc69cfa18055db2557ce74adf365","ssdeep":"384:hXnhkPm/Xh+ggwVIdzgbAP4SGkdIszh7nkHaurIg+l+i/q1ZEjjnW1X0VTl:hXhtNMXLk6u0gW//q1ZEjjR5","tlshash":"0db274ee6b641ae5dccac3c7bf1255ee3c0694bf54858b20c65c8f5834858acdd62f82","first_seen":"2026-02-20T09:47:51.516442Z","last_seen":"2026-09-25T14:02:17.107127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/jeg-elementor-kit/lib/jeg-framework/assets/css/jeg-dynamic-styles.css?ver=1.3.0","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.451Z","timestamp":1790344582451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/lib/jeg-framework/assets/css/jeg-dynamic-styles.css?ver=1.3.0 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 0\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":387,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.090Z","timestamp":1790344582090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3241\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27363,"size_decoded":3676,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27319)","md5":"cc682b343d3083d08deef225dc6aaa8c","sha1":"1db26ae6d83d5e376c8438a7bfccf14324eb042a","sha256":"88f19af8f0aa38a4605bd5c9d8481b28e062045f3def8f637e691363f542dbe2","sha512":"ea8e739eb44b90c34e9f9b8136208b9920dba277c11ef4d54d1f86fae5a71fd0cd1543f71fb3e953ac4782de8ed5e488eec7a2a853425cdc3d12c282d5af0913","ssdeep":"768:DrPoScoKjcUlwvGQzKVwGz42lvQz0ABI5PmBMqRIEEtCelEqJUrY+jZ:l","tlshash":"1bc27a81be93592f032f613b91e2c60c4f9519c8b2a176a9f0f5910f41d7d5c6bb7b22","first_seen":"2026-04-28T17:18:51.829144Z","last_seen":"2026-09-25T14:02:17.042329Z","times_seen":4375,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.091Z","timestamp":1790344582091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 162\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162,"size_decoded":551,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7305ed8a30b2e9610fea4e383b7d1756","sha1":"24bef514e8dbd4dc0cbebb686639085dccbb9b4e","sha256":"6f0b2e96bd88c2d8512dfd204adaf2251376467a1f834a51c66ce85f0051979d","sha512":"cb9938e53724a35304cd932207fc9a255f4aa51ea111168e7fe4f9871435e5430a0377886243a4a62b3c2de92f143b88608a460086f6f482e024d251d29be11d","ssdeep":"","tlshash":"82c08c847a8fc830c03fb291088aae1c036ba8c34a90408aac12a00e0aedfe512dc002","first_seen":"2024-10-29T10:46:14.149107Z","last_seen":"2026-09-25T15:50:08.757757Z","times_seen":58604,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.092Z","timestamp":1790344582092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 678\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4258,"size_decoded":1112,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-09-25T15:17:36.41944Z","times_seen":49129,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/animations/styles/slideInRight.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.096Z","timestamp":1790344582096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/slideInRight.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 155\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155,"size_decoded":544,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"5144b262df1bba4f71d9dc1db70afeff","sha1":"53e27a4ca78f4d4ce16cf36554bf914d5e1e3e8e","sha256":"377461349f66b2ccbd1e1f289cee9ebe37b81a366f5cda5846fd289996a7ec7e","sha512":"2b7f10dc1f6bda1db77cc99676d9e9e3e96df9fbc8fddd0ecc8ec576672df463b52af4182ffbc23e232f9d1434f2470f0371b4fff67b071a637b71abb4a7ae42","ssdeep":"","tlshash":"4fc08c980450082a08b86303c0e4e8748289dab150a38c3e3285258a0e42aca338c587","first_seen":"2024-09-17T14:45:00Z","last_seen":"2026-09-25T15:23:18.574689Z","times_seen":10966,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.css?ver=3.1.2","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.335Z","timestamp":1790344582335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/fonts/jkiticon/jkiticon.css?ver=3.1.2 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19454\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":120006,"size_decoded":19890,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"604502da825da25ade6a90553d0e707b","sha1":"ff9497af6f43557381f52a03ad80f3e916d16e84","sha256":"5f088df60ae5af8645eb7d4cbca1d641fcd23225e9eac268388d3bf4822b2c1a","sha512":"2e145b1f2e1846b3f3ac4c8e27ab7b4d4e6a0eeebe092e7d28e5fcf7577aef9a0aeaf0aff88b50079a1fac72181e78d76ff71951c6d00ea8667ccf5cbc4120cd","ssdeep":"1536:+a2WWKophaG8v717wd6SMar9ZEgR7qRV+/nGtCf/9PYg3grdyv1fWgfm+x3urAQw:x2WWKiad7kT5rXd3xD","tlshash":"1dc311a3e2ab36c57b35c84b9b40fb4896d2f1b9c40d0c47f69b881f1ed16141ad6e78","first_seen":"2026-01-06T13:20:40.519656Z","last_seen":"2026-09-25T14:02:17.043935Z","times_seen":1666,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-28.css?ver=1778203118","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.085Z","timestamp":1790344582085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-28.css?ver=1778203118 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3092\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":35782,"size_decoded":3527,"mime_type":"text/css","magic":"ASCII text, with very long lines (35782), with no line terminators","md5":"a90fa74a9096accc13217ec83e3f63b7","sha1":"ce520c5852a5329c3c00010de071db518323d73f","sha256":"7d4c11509ac65cd55ac827da6512eb573343a9ac9ff33cb7f5a6d7f143a9a0f6","sha512":"7921a4ab5debc2b312445a0efc0f8c9e18c6db25b70a5cffa023e876442568235f1a4954489b1cd3058eeea130404ea3bfea8865d39286443b709da2caf22fde","ssdeep":"768:aI3fUT2AnbFNROozj89CITiUjDcyFn9t3axU7MkgtjUGWn4FGpGGU6Bm:aFXzj8dRjgin9t3gkmJ","tlshash":"c9f27b533d03512eb12f24af9413f59c65249ccec53e6bd7e960622bf8bac9133a1786","first_seen":"2026-09-25T13:57:14.21698Z","last_seen":"2026-09-25T14:02:17.023971Z","times_seen":2,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-350.css?ver=1778203113","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.103Z","timestamp":1790344582103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-350.css?ver=1778203113 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1538\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15166,"size_decoded":1973,"mime_type":"text/css","magic":"ASCII text, with very long lines (15166), with no line terminators","md5":"78c61ced04060b10dad2873ac73015c2","sha1":"a9f9b0143012d4729295e5be6e276e301e1eea43","sha256":"3268238cd006ae38e6976fb6516f5f08f1754025cde538abf62cf2943409f769","sha512":"fa1f99e208be688c9e4c6fba26611ee915c30b62a634aef0279c834fbaaf131262d3201de173e57399ae55044e44c13f458414fc33297cd889df7ca47c86cf71","ssdeep":"192:sZ6JW08jwiJuiJ7PypHsn6It0Syf4bAInqtDlCfglv7MBgt5BJOUDnRf1TrrjZju:BJZiJmKzmt5BJ5DnFIQY","tlshash":"686213947d53d025b27f201f5107b99c3168e8ceea7aabc1f8a11213f4f9cb17b94a64","first_seen":"2026-09-25T13:57:14.218165Z","last_seen":"2026-09-25T14:02:17.017908Z","times_seen":2,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.338Z","timestamp":1790344582338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 08 Jun 2023 22:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5127,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-25T15:26:00.597427Z","times_seen":977339,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/svg-support/js/min/svgs-inline-min.js","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.339Z","timestamp":1790344582339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/svg-support/js/min/svgs-inline-min.js HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 24 Jun 2025 05:13:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 700\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1744,"size_decoded":1148,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1744), with no line terminators","md5":"1ebe9d436a30fedc7a3da0dd4d0c7ddf","sha1":"2f65d38eb4d95c0ad76116cc9e628b069648ce20","sha256":"ff831a9611197a461e1da89256f0418d39f279130792d755db5c39d1b07a78a3","sha512":"be7fa17b1c8e73a816d933b528e6060a900c48e002eb023734dae671365bdd97596d62ff622c8e3e1992dde939ec0fc77061d8ca0ea9f490e58d2387dc5ed476","ssdeep":"","tlshash":"1a31e186f66c20d954bb21a5a07712367516493cd419c998d30abcd128fdd4e3129fbf","first_seen":"2025-02-24T23:55:17.548793Z","last_seen":"2026-09-25T14:02:17.034721Z","times_seen":4637,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.340Z","timestamp":1790344582340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4042\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15073,"size_decoded":4491,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-09-25T15:40:37.549803Z","times_seen":76728,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/2025/03/Home-Gecko-Header-Logo.webp","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.364Z","timestamp":1790344582364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/Home-Gecko-Header-Logo.webp HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 21 Mar 2025 02:57:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11408\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.066Z","timestamp":1790344582066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3987\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26702,"size_decoded":4422,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-09-25T15:48:49.735708Z","times_seen":92339,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.100Z","timestamp":1790344582100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1405\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6797,"size_decoded":1840,"mime_type":"text/css","magic":"ASCII text, with very long lines (6754)","md5":"e45578c703339163deb50503f1863270","sha1":"c5b5ca0adb77f7d47fde21caf31b2783cab5e357","sha256":"6f5192d3a0f16dfee9385f200e67e5aee421af90964e1ddeb295c10cfc7adbcf","sha512":"6c93aea8014d3c843e968a603cbd4b370aaf895e687f4f170c7740e08c93fcae7c6425df86fe20abd25b16f3c8555b1655510a03afa58a5a45d7d1ad8c814d7a","ssdeep":"96:B8nuedCc+P7p6YWHZENaFqZERQZENapmzYTWCqz6P1TZM3AKA/AujMWJpS5vF9IY:JQEcME+EcdV4C5LTUjX","tlshash":"f0e167f1bc22852b5927b8f9c5d524cc028876a08bc1c58b9c6c6458c3feaf1537678f","first_seen":"2026-04-28T17:18:51.854983Z","last_seen":"2026-09-25T14:02:17.118997Z","times_seen":1826,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.331Z","timestamp":1790344582331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 13:56:22 GMT\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":1602,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-09-25T16:00:46.007649Z","times_seen":23875,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":48,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/2025/03/Home-Industry-Professionals-Hospitality-Slider-Image-2.jpg","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.378Z","timestamp":1790344582378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/Home-Industry-Professionals-Hospitality-Slider-Image-2.jpg HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 23 Mar 2025 23:05:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 58678\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/accessibility-widget/lite/frontend/assets/js/widget.min.js?ver=3.2.1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.456Z","timestamp":1790344582456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/accessibility-widget/lite/frontend/assets/js/widget.min.js?ver=3.2.1 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:14:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 63803\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":278181,"size_decoded":64253,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65456)","md5":"b3a6be91b711b0eda66e6b0021f4a84d","sha1":"a1417d21d72003ad248e4ed53bf6481f2718fa40","sha256":"f72dad1ae9a9802390749e4124451db20260713613dca110b2769295c1e78f4b","sha512":"1e0375719a7d3df1e581f2b2eaf50b50692fd1cce14dd04e923c3925cf93238a1cb1b6b85345a10f6fc9de654d1a8e6d9f1b7bed647f90b82e64218c8ae4a3f6","ssdeep":"3072:TF8Wm5hShW2h4T6/jFw6tjVyme1Ik/4AfSE0SJ3vqhiEmuWBPvUMr2BIdk16ds7j:TF7m50kFu","tlshash":"6944ebdea279081f8204b393fd36ae4d2c9854e1a840c33bafbd551be3c6585d693b4d","first_seen":"2026-05-07T14:37:08.638407Z","last_seen":"2026-09-25T14:02:17.101296Z","times_seen":77,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.465Z","timestamp":1790344582465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6867\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24109,"size_decoded":7316,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24021)","md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-09-25T15:46:25.621831Z","times_seen":111390,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.471Z","timestamp":1790344582471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Oct 2025 00:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2119\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5314,"size_decoded":2568,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-09-25T14:49:23.054078Z","times_seen":203631,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/css/widget-loop-carousel.min.css?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.083Z","timestamp":1790344582083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-loop-carousel.min.css?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1244\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8436,"size_decoded":1679,"mime_type":"text/css","magic":"ASCII text, with very long lines (8393)","md5":"9671fd5a1911567142882ffcc5e04dd2","sha1":"28f4791a3be398ff62d703f050c6f773dfa5211b","sha256":"f3aa635350b15f073733a64d1bb1ecd3a09223e4f20457b058953c19679b4133","sha512":"1dd3256e53508a8b9cd3dd39adb2f28153a58d0a501067989dbdc5734732cbd0e172c17976670b88001e37c1f7453a4821e118e909aa2a019e24b8c42625ac5c","ssdeep":"96:BmnMnz7yRmDe8qZmpmA5tmCkm3s05Er+j8IOoFFtjujdqgSX:onMnz7yfh25Hhwo9jujdqgSX","tlshash":"4502bf453a8350b56e1b4e2e4627166cf56858d4e642cdfce8e3a80ad7f9cf5231f82c","first_seen":"2026-04-28T20:01:21.238791Z","last_seen":"2026-09-25T14:02:17.075082Z","times_seen":427,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.089Z","timestamp":1790344582089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 27 Mar 2026 20:02:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1261\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7182,"size_decoded":1696,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-09-25T14:23:36.024057Z","times_seen":51555,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.473Z","timestamp":1790344582473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10079\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43922,"size_decoded":10529,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43879)","md5":"c6b7c3763e0b6f4d04227afb7ce691bb","sha1":"d58bec53426d935f54068dff53355527936b57a4","sha256":"749c1a5408410a742a0ee480b87ac2622c90c62f7c378e2480d60435bd4ff52a","sha512":"56e1c53d4b9868cd988b5aa359f0826641e1a847bc6d85ac2d7d4cb9084f2f42158ca4295e391a24749774e7742172a20baa07e371384f79e8737b437edc78af","ssdeep":"768:S/XscBD1+WE9A5yLce/gvd4dedEdkdPd2d4d5dqd1dIdMd/dpdedUdUdojPm7L+r:osOD1+WE9A5yLcWgvGEeSBYWfQfOCZvf","tlshash":"4313b55171aaca2941cf84abf463164fb7215c9cf413f0d67afc8d82a564ec7a354731","first_seen":"2026-04-28T15:37:47.203277Z","last_seen":"2026-09-25T14:02:17.038267Z","times_seen":8219,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-slider.css?ver=2.9.3","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.084Z","timestamp":1790344582084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/tiny-slider/tiny-slider.css?ver=2.9.3 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 630\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2180,"size_decoded":1064,"mime_type":"text/css","magic":"ASCII text, with very long lines (2123)","md5":"c354d4e1a54243a87a60447ad6167fc2","sha1":"ddd6802aa2e093e29c3db1ec43d8335f301881d3","sha256":"3dcbb2c76f27454c5f0827c5f8150844f19db010eaf01eda252696692d704dd5","sha512":"3eb44bb357e8d43d33376cd15ddbbb36b90d6f4f710b75dcf11110d020d899dd69f755bf4e55cfe556cd7a120591d48cd90839def7b695511cc1475e8211c793","ssdeep":"","tlshash":"3141882983603648d5e7d7207af89a298639fd95fe334cde264dbb024342b5a1412ed8","first_seen":"2023-04-06T16:55:42Z","last_seen":"2026-09-25T14:02:17.067441Z","times_seen":1166,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-46114.css?ver=1778203113","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.106Z","timestamp":1790344582106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-46114.css?ver=1778203113 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 909\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6484,"size_decoded":1343,"mime_type":"text/css","magic":"ASCII text, with very long lines (6484), with no line terminators","md5":"8c2715df046a412d1364d7782c0213d2","sha1":"2b494db126f6928ddf0008cae269f779dcc012c5","sha256":"6d06f79d21f1d2a82872fd82503f2aa0b9f976c86c5b922f66059e8c6b70e9d6","sha512":"ebd495941fc514c39b65acc0afc509da75454b5bc0cf2c06b42cf1b245f0ebbbaa0835f7728b30776e7049a0cdf449a3ec8cb779a0bf948cb34deafef1e1ca59","ssdeep":"96:ZfCoaYMfmW1CMahDC/Eilr0HzLCwESuAfhv4JaExaoRRiQuqAv3r:RX6mW1CMahDC/Eilr0HzLCwEUZh","tlshash":"c9d1b1903d2bd11ab02f08ef6587f45c5418a8cc9d6e97e2f8284857e7fbe663360746","first_seen":"2026-02-20T09:47:51.515234Z","last_seen":"2026-09-25T14:02:17.091918Z","times_seen":4,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.329Z","timestamp":1790344582329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 13:56:22 GMT\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":3497,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-09-25T15:51:45.178911Z","times_seen":20273,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":52,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/2025/03/agency-for-restaurant-staff-694x1024.jpg","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.379Z","timestamp":1790344582379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/agency-for-restaurant-staff-694x1024.jpg HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 23 Mar 2025 23:26:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 81179\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T15:27:37.577716Z","times_seen":18654009,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.457Z","timestamp":1790344582457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2280\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5722,"size_decoded":2729,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5722), with no line terminators","md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-09-25T15:50:12.69249Z","times_seen":51696,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.461Z","timestamp":1790344582461,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10050\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31928,"size_decoded":10500,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31928), with no line terminators","md5":"070048edd0950b156f2884cc6be49958","sha1":"f7df7a3692aae24b0d9bcfce4f436f9154fc4478","sha256":"a06367414e21ca690b7be3bad14cd62dcd8c35683b88cdee2050aaea11f703db","sha512":"aea4a92b1164697d2d808b46fa87d5dc35a4237afd7b4adee7f92da9b51f3ab1119a9375ca7ec62f2624d7fbb89d4cc77fb034486f80dc75b42e0f8c6d9b15b9","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5GlT:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnp","tlshash":"69e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","first_seen":"2026-03-03T15:30:23.234129Z","last_seen":"2026-09-25T14:49:23.098942Z","times_seen":48525,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/jeg-elementor-kit/assets/js/elements/testimonials.js?ver=3.1.2","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.468Z","timestamp":1790344582468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/jeg-elementor-kit/assets/js/elements/testimonials.js?ver=3.1.2 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:15:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1078\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2691,"size_decoded":1527,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2691), with no line terminators","md5":"981664b4dafb2a5047d62b6efd2f7b09","sha1":"026cb7e39f7767e182864078cc818fc1d1fa2c72","sha256":"0d6b2234f4a31eec88be1a10fde85fac1c784444b60efba4363d63a298ef3831","sha512":"288b2f7cf1cfd4d631939aba3e52a5f657571187846d4b3734120493f19dfecc5b86196324544779f4731f14ec6e160eb7c0143f6b558cb955c9dc246fd62ae8","ssdeep":"","tlshash":"2151a5863062b483135bb23b266b401eb3374c29d42579d9a3b5c5635eb5c832336f71","first_seen":"2026-01-11T20:27:51.188461Z","last_seen":"2026-09-25T14:02:17.10055Z","times_seen":317,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=4.0.4","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.469Z","timestamp":1790344582469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=4.0.4 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 08 May 2026 01:18:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2611\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6242,"size_decoded":3060,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6199)","md5":"b9cd9d3f63593cb888bba6763bc27c6c","sha1":"d663abcd476283f18eb2294308ef517a33567375","sha256":"94514b098a447abf749743e3eebe1b76116bc86047643eec0521dde4af89fab6","sha512":"3c9d6cef5922147ac18c0f74b6a9ef73ee77c8fb8a4910a0ddfad102c06685735657691450da39e08cb972aae8f8f7a9bcea76898f3be3cf2ed3f5eeb1b689b3","ssdeep":"96:BZpx3DT76mc5Ro2Fk7LJPqkho4KYXh7NMCl2oOVXLyVqOWeYuGXhqnuvV8k2:Lv7yo2FmL9PhPXx6EOVWz0uI2k2","tlshash":"92d1449806949e1b26e03ad8b09b6b741f3dd0723c16ea41e651eddc18fcfd147e6532","first_seen":"2026-04-28T15:37:47.110676Z","last_seen":"2026-09-25T14:02:17.061519Z","times_seen":8177,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInRight.min.css?ver=4.0.7","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.094Z","timestamp":1790344582094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInRight.min.css?ver=4.0.7 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:15:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 139\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":139,"size_decoded":528,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3275f888e6b23c5a6e2b79dc95663ae2","sha1":"429ec7db5d25b8312bd88150c638293b1b3fd309","sha256":"80a88126612557f5c61f6cc39ca0f8770127d55b477ed38933ebbb2f385ea214","sha512":"ee49abbe2e237946f865047d31c2d02b67bd02a65a6afa3ba23a9c9263fcddf05c4384c2b71ddf4b154bb03de05f162c51691309e1ba05ef00d1d4e4a8cf98f8","ssdeep":"","tlshash":"c8c09b988964010701b115d394e47551d435c7f5e4f32dff71445d464d97dee2385153","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-09-25T15:17:36.435854Z","times_seen":27404,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geckotristate.com/wp-content/uploads/elementor/css/post-10.css?ver=1778203113","fqdn":"geckotristate.com","domain":"geckotristate.com","tld":"com"},"ip":{"addr":"68.66.226.89","port":443,"asn":55293,"as":"A2HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://geckotristate.com/","date":"2026-09-25T13:56:22.102Z","timestamp":1790344582102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.geckotristate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 05:42:59 GMT","end":"Fri, 04 Dec 2026 05:42:58 GMT"},"fingerprint":{"sha1":"12:B2:92:42:3D:61:C9:26:C0:71:36:A3:AC:D9:93:1C:27:21:A8:90","sha256":"57:86:2B:74:19:58:31:9D:0A:93:BB:DD:37:83:9B:ED:2A:38:60:EA:4E:02:19:FC:C0:8C:5E:6B:3C:F4:40:75"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-10.css?ver=1778203113 HTTP/1.1\r\nHost: geckotristate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://geckotristate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: max-age=604800, public\r\nexpires: Fri, 02 Oct 2026 13:56:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 08 May 2026 01:18:33 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2014\r\ndate: Fri, 25 Sep 2026 13:56:22 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20079,"size_decoded":2449,"mime_type":"text/css","magic":"ASCII text, with very long lines (16076)","md5":"52119afc2836237e7e71d39a15a92fa2","sha1":"2fb6c6aba5e4089321aabb6d222852eeb8845231","sha256":"8bef266aae1df53cc312ab3c314f99986462f92d8b2fa0424bcb117eb85fcb34","sha512":"886252e13d5e6ae0b0d201749ee8db8061eb7c212a76d5e50cf4a6d8daa16d8cf013fd710788852b577c9360bb6723682be7fe9a1aadd634159f3efa0cbdb494","ssdeep":"192:IJX08cxJmADsUhF4CcnsHWRRJm0OAQHpsZklLbrUJMyfJJ7Pyp6/l6It043faf0h:IJk7qdJApFbrUJ5VANFRJDZJcj","tlshash":"b99246503d93d126b63f106f9107f99c35a89ccee979a7c2f862501bf4f9e523790a28","first_seen":"2026-09-25T13:57:14.235319Z","last_seen":"2026-09-25T14:02:17.098576Z","times_seen":2,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"geckotristate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}