{"report_id":"0e35e016-faa1-46c9-b6dd-ec5f94947400","version":0,"status":"done","tags":[],"date":"2026-07-12T21:23:25Z","url":{"schema":"http","addr":"situerclasse.com","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"situerclasse.com/","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"title":"Fiche Classes 2026-2027","dom":{"size":37228,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fdf8c4a4c19f16415d4fecd77bf439d3","sha1":"5be6680e3728ab3089ff9c5479b97b96eb0672a5","sha256":"ada87210a2b9b19c46cc6b7e3222cdefc013541ffdfecf37543fa5acb2cbaee7","sha512":"0c713b020778dcd1c5544d52f79f184ee737fcfb35d9554f040a54ed71ccaac8c2f3f64fd41e35b89a6a18cd8bcd7990325dc1d25d656b3a89c4002034b7b72b","ssdeep":"768:AeOwykMjLPbzGoNdSDAP0Yz5lp8WrR2YEPv:A9wykMDIDAP0YVlp8WrR2YKv","tlshash":"45f2957971f7213306fb70b627d75306be248107e806c408baac4b589f9ed96d5e3ad8","dom_hash":"domhash88c3d81468768c65f9a30800831aa759","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"situerclasse.com","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":0,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:23:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"situerclasse.com","ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-07-09","domain_rank":0,"first_seen":"2026-07-11T19:53:30.035617Z","last_seen":"2026-07-11T19:53:30.035617Z","alert_count":11,"request_count":11,"received_data":788034,"sent_data":6606,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-07-09T01:04:15.221232Z","alert_count":0,"request_count":1,"received_data":2493,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipwho.is","ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-07-07T01:48:26.345213Z","alert_count":0,"request_count":1,"received_data":399,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"situerclasse.com/","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"4435b2b8b37e7aee115ee3df1b150acb","sha1":"808d979c11a505e465abf5c7b26bebc840bb3900","sha256":"0015fc3c59c77233fcb4f663cd921ba39c85a36b5a7bd46b1b7dee516363c6f0","sha512":"b1bbe2b435cb7e33c1f7a7f06a3516e38f2c3687e7f2201fe0c4fdf489ad6f87a4e96c69830ff35e7230c776d527eede93f17848aec3eb8a5ad8ae4286e635bf","ssdeep":"384:0YWldlV1GodxkWdS5JA56oz0Yz5liOmvcpxhUJQ93nw4AhV1eRmrodrs6fR2v4G0:0PbzGoNdSDAP0Yz5lp8WrR2YEPO","tlshash":"1dc2967a31b3213346fb307a2bc75345ba2880076805d849be5c9718af9dea595f3fd8","size":26314,"data":"","first_seen":"2026-07-04T11:10:22.910264Z","last_seen":"2026-07-12T21:50:20.913751Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/geo.js","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"99b53601f43d901962c9c07a01c2bc6a","sha1":"bb7d00f6066886114e8d3b36a0ea375a98889812","sha256":"764c54237109f7ed67e546ad0b23fcba678a5a9b485588b28159b964aca07904","sha512":"89c7d612634c9bba9b4cb6ae3cee5b65c1b8f92d8ba54b83d8bad52fc3bf8dc1f29272ff956627b505afb53ed903513eb25e5b6328aec5286eac830d8213b8da","ssdeep":"96:3cnn/bm0Zfj44Q1C63cI4p3KSGjhNvyNvfUl55I+YiXWGdunTc0t:w/b33xp3KSGDvyNUlDYiXzdunNt","tlshash":"a6c1946876bb722d06a3b1a9039b91452234f40bba8acd54be4d4340bf5543893f2fcc","size":5855,"data":"","first_seen":"2026-07-04T11:10:22.908249Z","last_seen":"2026-07-12T21:23:27.613541Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"situerclasse.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13145799\u0026pdata=https%253A%252F%252Fsituerclasse.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783891379","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:23:00.610Z","timestamp":1783891380610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=13145799\u0026pdata=https%253A%252F%252Fsituerclasse.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1783891379 HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-length: 0\r\nlocation: https://situerclasse.com\r\nset-cookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1; Path=/; Domain=situerclasse.com; Max-Age=3600; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T10:17:50.754787Z","times_seen":17210635,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/s/sourcesans3/v19/nwpBtKy2OAdR1K-IwhWudF-R9QMylBJAV3Bo8Ky461EN.ttf","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:00.813Z","timestamp":1783891380813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpBtKy2OAdR1K-IwhWudF-R9QMylBJAV3Bo8Ky461EN.ttf HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 96680\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 21:23:01 GMT\r\nlast-modified: Thu, 04 Sep 2025 18:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":234708,"size_decoded":97219,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"BASE\", 11 names, Microsoft, language 0x409","md5":"61aa597170ed44bfae5a16e1c432205c","sha1":"1a08a5a31ad1207b4680a67d0a0a85a1ec512dbd","sha256":"b6f2cc8d9905e97b5cd7a294367bb529814385f299fb23057060394cbd6bbffb","sha512":"db988f8db336f2b033153295bda523b9aba7c96bfa1a42e73ccd8ee78336fe083a800b23598b9045b831fcbf8f5a555aa3ea846a38be527a904b458f1a8ba153","ssdeep":"3072:IqB8NjSF7ZWaLUolE6TJ391pMsmBfLGcz/iS9UJ8KUzz:IqBYSF7/LUoNTJjasmxLGcz/iSe8VP","tlshash":"91345c43f313d74dd503bdf49be2c3e07366bca4aea6474bb1676a69d48b6a44c81380","first_seen":"2025-10-08T22:53:06.225483Z","last_seen":"2026-07-12T21:23:27.6073Z","times_seen":16,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:01.168Z","timestamp":1783891381168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://situerclasse.com/\r\nOrigin: https://situerclasse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, POST, GET, OPTIONS, HEAD\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://situerclasse.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXtTeZ17xOBlVoFqStHGZe%2FlRVwLr0sPOK4O73OnVOCyLXKp0utBY8bFpNP162xj4oJbz4zDOSv%2Bzi3aGyZrtLPkY6PnrEpA9iKc%2FZf1D801P7qOBW0g3ABg\"}]}\r\ncontent-encoding: br\r\ncf-ray: a1a31b4c5e3d0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":2104,"mime_type":"application/json","magic":"JSON text data","md5":"56fa0cc157befab41f7ca09bcbcf6ba0","sha1":"218ffc9c9caa468ff56f9abdec6fa8b77eea1362","sha256":"56ae1d62ced9e47f11decc4556f9a81def550c64ba66d466f3e5e979b7c7f43f","sha512":"0b3072e63f5c820a9042ed809be9a4ab9d051727b474a7eaf65a3e2e4275d724dce3bc3f55b7179634fa1907bebe0f1e7b302af0ae737104e53a8517fb028323","ssdeep":"","tlshash":"3c01df68e4780f7b9cb8135870786817113462175e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-07-09T15:47:21.439328Z","last_seen":"2026-07-13T10:47:29.72921Z","times_seen":187,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":213,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:23:00.638Z","timestamp":1783891380638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://situerclasse.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 9420\r\nlast-modified: Fri, 10 Jul 2026 11:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":37891,"size_decoded":9880,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"6fe112e0fec7fb097338bf4fdcae7f5f","sha1":"df15019933d41549f7a95e3d9650964f334729df","sha256":"d7cfbfa2b7d7a09b3b8cb14c8e7aa71bca9a3727f839b02adebf754ebd6d2aaf","sha512":"b72a58e1bbb232311e508fb7f204f521a13b41778b55c8bbf70be1351315c3a7f38857716dfada134438001587375c52e176a4df00144490ea6e323f62e1677a","ssdeep":"768:4O4TbPB6ebFbuwWES+Y3RfM+spK9o0OuAX:H4TbPDXY3RfNspK9o0Ous","tlshash":"2603917a3091213746fb62b66b935305ff188207d506410ababc974a6fbed40d5e3edc","first_seen":"2026-07-11T19:53:34.007747Z","last_seen":"2026-07-12T21:23:27.609154Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/site.css","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:00.720Z","timestamp":1783891380720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /site.css HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: text/css\r\ncontent-length: 4295\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 21:23:01 GMT\r\nlast-modified: Sat, 04 Jul 2026 03:26:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21241,"size_decoded":4833,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (391)","md5":"a47158d926f0aeade73ea787724ad20a","sha1":"46c7bd599540012304814ed71f891fa4ee2b5f4e","sha256":"d3891bf45605028a9fcd11294dc105699761beaf35fe229b581a9a8b96ae6fbc","sha512":"8372316e67527bf1c0aac11ccddcdd4bb4859d960f8636451526b4dd2aa190259d9b16a0fbcae4513fa0b8cb311ff6f8ca916de7dcdb4bf1f8f67344cb793959","ssdeep":"192:sKVHnG3hYtOoxefqhfqAtptG/hMTCbNl0JXM9mgWRuwk9mzzFrOsGxOKG4nc0Jbe:sKVcf8fRXl6RpPill","tlshash":"e29232296a630494bc6785657bfb6bc8334c60038c0ad77e7ad66254cfc83f4b691b8c","first_seen":"2026-07-04T11:10:22.905958Z","last_seen":"2026-07-12T21:23:27.610481Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/s/sourcesans3/v19/nwpBtKy2OAdR1K-IwhWudF-R9QMylBJAV3Bo8Kxf7FEN.ttf","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:00.812Z","timestamp":1783891380812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpBtKy2OAdR1K-IwhWudF-R9QMylBJAV3Bo8Kxf7FEN.ttf HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 96544\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 21:23:01 GMT\r\nlast-modified: Thu, 04 Sep 2025 18:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":234640,"size_decoded":97083,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"BASE\", 12 names, Microsoft, language 0x409","md5":"7b50df116e2e351d8ea938fc8e152074","sha1":"bbd6169a86719c1896373f7b40a0fc8654ca6437","sha256":"e53acf3eb590b2ff183288401da9f3b829703e9716bc88e0da821e3a2ce9c175","sha512":"3cf35d3d729d9d4e62b37b704907928108728ff92f12138fd2d1f262fa7e3e40664c8137b0e82f6e3d7c165ae474d83f3d2b76e3069554795a115fc54dddf11f","ssdeep":"3072:xztNjSF7ZW3erDPi6OfZVjur4KmxHs/FxdFzoJaj3tI:hDSF7HDPOZFur4h0FxdFEyI","tlshash":"2d344c43f353c74dd5437eb49be2c3f06635bdb57daa824ab1672e69e84f6a04881380","first_seen":"2025-11-21T09:20:36.729875Z","last_seen":"2026-07-12T21:23:27.611095Z","times_seen":11,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:22:58.927Z","timestamp":1783891378927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 21:22:59 GMT\r\ncontent-length: 11923\r\ncontent-type: text/html\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncf-edge-cache: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11923,"size_decoded":12168,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4830)","md5":"118da209eadde10c9d1424e57e972240","sha1":"46415a3e52750565f46d13784018afa810d4f778","sha256":"6e65b96d1884a36a957b613454f61225dd7ab3c227596dc8ba6aeef00cb44123","sha512":"b4627dc22a0f005ff9b220d1936810f83f1b0c512bfb8cb90d1ce339007820c382a6b51141ce1057f2efb73e31bbd4ab93609314b46239900fcc4f4670272ba7","ssdeep":"192:sXHNsGeTHQpD+da6+888+UV7tDoj/pxz0jDkJe4sM0t50nAjysDqLLN3hwM:sXX+/DV7k/3/XsBt+nAOLN3hP","tlshash":"6332194ddea062b4f21703cd27ef295d2224a5c3640cc489f54d6de0ef4e68d4a57fa9","first_seen":"2026-07-12T21:23:27.612573Z","last_seen":"2026-07-12T21:23:27.612573Z","times_seen":1,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":59,"connect":19,"send":0,"wait":58,"receive":0,"ssl":282},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/geo.js","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:00.722Z","timestamp":1783891380722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /geo.js HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1891\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 21:23:01 GMT\r\nlast-modified: Sat, 04 Jul 2026 03:25:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5855,"size_decoded":2443,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"99b53601f43d901962c9c07a01c2bc6a","sha1":"bb7d00f6066886114e8d3b36a0ea375a98889812","sha256":"764c54237109f7ed67e546ad0b23fcba678a5a9b485588b28159b964aca07904","sha512":"89c7d612634c9bba9b4cb6ae3cee5b65c1b8f92d8ba54b83d8bad52fc3bf8dc1f29272ff956627b505afb53ed903513eb25e5b6328aec5286eac830d8213b8da","ssdeep":"96:3cnn/bm0Zfj44Q1C63cI4p3KSGjhNvyNvfUl55I+YiXWGdunTc0t:w/b33xp3KSGDvyNUlDYiXzdunNt","tlshash":"a6c1946876bb722d06a3b1a9039b91452234f40bba8acd54be4d4340bf5543893f2fcc","first_seen":"2026-07-04T11:10:22.908249Z","last_seen":"2026-07-12T21:23:27.613541Z","times_seen":3,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/images?q=tbn:ANd9GcRUEvVjHUQKJpEejGHMWrANmwVd27dl5xDcmACwUleyMQ\u0026s","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:00.725Z","timestamp":1783891380725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcRUEvVjHUQKJpEejGHMWrANmwVd27dl5xDcmACwUleyMQ\u0026s HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-length: 293\r\nlast-modified: Fri, 24 Oct 2025 00:37:48 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":293,"size_decoded":682,"mime_type":"image/png","magic":"PNG image data, 250 x 167, 8-bit colormap, non-interlaced","md5":"49fa7defe3200763bf17e6730a6e4f52","sha1":"4d0e725d7d359c8a6eb5cd300a8125ab92798884","sha256":"5ba3cc5eaed3444c7902572b4857dca590bef80a2478f5b2de8ceec8f3264b4f","sha512":"ac2c9dbea28cc814f8d4e502714e12f1cdc26fe29199b6285a720c3645205b2b7c360d11e041560451e3ed4e70c9c76b58acade8e1757d7b9e30e01e12901784","ssdeep":"","tlshash":"38e02bf41681fc3cd73940a2390814b8449f4bd81c17cb53408c8c201a8571301f8343","first_seen":"2026-07-11T19:53:34.018407Z","last_seen":"2026-07-12T21:23:27.614138Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/s/sourcesans3/v19/nwpBtKy2OAdR1K-IwhWudF-R9QMylBJAV3Bo8Kxm7FEN.ttf","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:00.816Z","timestamp":1783891380816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /s/sourcesans3/v19/nwpBtKy2OAdR1K-IwhWudF-R9QMylBJAV3Bo8Kxm7FEN.ttf HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 96427\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 19 Jul 2026 21:23:01 GMT\r\nlast-modified: Thu, 04 Sep 2025 18:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":234680,"size_decoded":96966,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"BASE\", 14 names, Microsoft, language 0x409","md5":"ea6e93d3bd6bf00fdd2fcf59eb138f4a","sha1":"f7f37956ba9903ce4684b2b3f282c643c9967208","sha256":"26efb7fbad9540df2595fe867a37e454d22973b9e37816d263fdc5295cb084bb","sha512":"34390d42c77e0bb773de62d9d0b319995bbb75e2160c7dab062865310ab180adc1bd3b45daa028a99d35791a34a7cf7b7b1c7bcad3cd0a7956bb32c6f45718ae","ssdeep":"3072:tavNjSF7ZWNDh+rIJrCpj+F0t+GNWwWrtPjj1Vj+EGHs621WPs5A:t0SF700rJRNNWwWtPjnGHmGs5A","tlshash":"26344b03f313d74ed5837eb49ba2d3f07665bca57d9a824bb0663b79e48b6604c91380","first_seen":"2025-10-08T22:53:06.30142Z","last_seen":"2026-07-12T21:23:27.615179Z","times_seen":14,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/favicon.ico","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:01.322Z","timestamp":1783891381322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: text/html\r\ncontent-length: 1238\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1238,"size_decoded":1675,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"0bde7d4b3da67537eaf9188e6f8049cf","sha1":"64300fc482d01d38b40ab20e15960b6509665e5a","sha256":"5dc1ae0b875dc0d78dbc5532226f5f31b762b4d1229984f605d27bf895ab6807","sha512":"2d4d27ab5b3dd2a701a944e9b5372b40ee4f8b3267f133be7ad0d4b42528302aaa002b6132722e2ad1fe629fc3e8baf1011c8dad326062e9c0946d6f1b6eafb4","ssdeep":"","tlshash":"8d21423ec1c1150a80271154fb81e2942619825192470fa1379e7167f6cc0f756937c8","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-07-13T06:34:34.298214Z","times_seen":41160,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"situerclasse.com/css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap","fqdn":"situerclasse.com","domain":"situerclasse.com","tld":"com"},"ip":{"addr":"77.81.120.26","port":443,"asn":200514,"as":"KnownSRV Ltd.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:00.719Z","timestamp":1783891380719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"situerclasse.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 09 Jul 2026 20:25:15 GMT","end":"Wed, 07 Oct 2026 20:25:14 GMT"},"fingerprint":{"sha1":"03:17:48:FB:DB:5B:B4:98:4D:8B:01:D4:94:92:AE:6A:77:3F:65:62","sha256":"EE:32:6D:35:1F:A8:A2:1B:D5:83:3B:4E:BC:EE:2C:67:22:91:C8:40:A6:DF:69:03:E2:3C:09:C4:96:A0:6C:3C"}}},"request":{"raw":"GET /css2?family=Source+Sans+3:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: situerclasse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://situerclasse.com/\r\nCookie: wssplashchk=fb6767f60c9c93717a922410404b10f1e64f3e5b.1783894981.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-length: 633\r\nlast-modified: Thu, 09 Jul 2026 21:58:34 GMT\r\naccept-ranges: bytes\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":633,"size_decoded":1022,"mime_type":"text/css","magic":"ASCII text","md5":"f96f9f03877c4a6a00ab327135a3382a","sha1":"ca3084dd061a0a9c77459332b108145d8d8c9245","sha256":"9a72acbac4d78233b6a0a6a9b12188f0ec2480abc7c9f378025ae54aa948713c","sha512":"be54f0a1a45de0de1020d0a1058a2598509e45140f5745845f6f87ad3cd0acd807145c5f1204b1832110e53cf5a6150988835ab4dd89631971e6c0d1a19a5df6","ssdeep":"","tlshash":"bcf02860400e2064da631c9c3bcf2f782d9c08052199c22c8b725c2c5cfb82d42c2f6e","first_seen":"2026-07-11T19:53:34.008824Z","last_seen":"2026-07-12T21:23:27.61777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"situerclasse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/?security=1","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://situerclasse.com/","date":"2026-07-12T21:23:01.079Z","timestamp":1783891381079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 12:07:03 GMT","end":"Fri, 04 Sep 2026 13:06:46 GMT"},"fingerprint":{"sha1":"77:EB:7C:CE:78:4C:26:90:A8:02:71:42:3E:74:A1:DB:8A:36:DD:FA","sha256":"75:C5:CE:FB:6A:02:03:43:3D:CC:04:28:F2:A6:3C:70:0E:CE:87:98:A5:3C:76:CB:C9:1F:1D:A4:1B:40:DC:99"}}},"request":{"raw":"GET /?security=1 HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://situerclasse.com/\r\nOrigin: https://situerclasse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\ndate: Sun, 12 Jul 2026 21:23:01 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nretry-after: 62944\r\naccess-control-allow-origin: *\r\ncf-cache-status: EXPIRED\r\ncf-ray: a1a31b4bddc056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":399,"mime_type":"application/json","magic":"JSON text data","md5":"c38e5d490b5119032416cb7a9eb888ed","sha1":"0eb9f0b95da30848a1d75e16d5430f362a8d6668","sha256":"9caa31c86c15af4e5b47206e234b4625d15abeb65c5ca1ff689f0051d703086e","sha512":"1f103c30f98b38e88489c0cbbd9bf7adc64e8cc807401691db27b20fad7f475a9f5d4baa99d1c40203e483d795b3d1fe63fa3aa125f51b09b496b36823a843c1","ssdeep":"","tlshash":"28b012a32214387603002199a1282500219191e2d4c06415f49a40e891c47c420ab206","first_seen":"2026-06-27T19:43:00.88267Z","last_seen":"2026-07-13T06:48:18.158402Z","times_seen":22,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}