{"report_id":"17789811-6758-4085-bab1-5ce196fb6d13","version":0,"status":"done","tags":[],"date":"2026-09-17T18:34:51Z","url":{"schema":"http","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":0,"asn":399250,"as":"Name Hero, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"title":"RedShield AI | Autonomous Security Platform","dom":{"size":160165,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27669)","md5":"16534f3122834f0455032154758e9d08","sha1":"366cd3daa35f44679a540f7e4255c3955f511d03","sha256":"ea2551da05ad12a5cabea75b10c7fb45476606b6e33543f3bb229d6f5a31857e","sha512":"db3d2ec6cf06fa10762b45d7490cdf880bbb78f48b4711b3797a9e744c1f4c812d6db0485af0aa7144db0238839fa22d8083fd8bb1e0c704ac85cfa49b89d303","ssdeep":"1536:Cypj9dQiwU0o+tylebZiEaGbZiEaZfz2D1TCaZtUO9wGX2zwwl2:7RwLtyYPrPa2D1TCaZt59w02zwA2","tlshash":"4bf3f79ea7b2343972138666f8d17328e5a8d003db064de5bdb5e2648fc16e304f724e","dom_hash":"domhash315135652266a1b7ec2f6f99ec970403","first_seen":"2026-09-17T18:35:13.236798Z","last_seen":"2026-09-17T18:35:13.236798Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":0,"asn":399250,"as":"Name Hero, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T18:34:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":6,"received_data":241972,"sent_data":3420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"redshieldai.net","ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":18,"received_data":508368,"sent_data":9229,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Divi:5.2.1","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FitVids.JS:5.2.1","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":107838,"sent_data":759,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef5cf85f5319541b973cec298560e3db","sha1":"4e6b7bbc4d565b965a1db971597f340464e99577","sha256":"54354334d453444ba9c144d69eaea2b5a35d7354c511515b5d5e319404bb1a8c","sha512":"ab47f12cb8484093d5b53c17e866e3a465c669218749d05f31cb28ca3f6bbfb3281b81d9ae267a164d455a5a55221c90785a873f4f57ae2c65e25350819a06e9","ssdeep":"","tlshash":"1390047170114c34074d100d713cc3d43cf4405077433c00c07c504c0070dc34400d4c","size":42,"data":"","first_seen":"2023-03-07T01:16:43Z","last_seen":"2026-09-18T07:01:26.732269Z","times_seen":10471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"89125ad04aa60b44b078bda9f3a1ca29","sha1":"9c277746a57e669b793154fd2a4291fbbd4b5ace","sha256":"82fdf6f7dd07c87fa7c1455e2a0029f9c18aa81ba304576d2f689d5d55480f5b","sha512":"8bc579d1bc746de32705e5ae88861ec14705bcaa47e75b6b42ac1382a6874489fbd761460770b715c16715c40ddc4b19ad343088cb4d4be90189c215994f8e99","ssdeep":"","tlshash":"96011e195e12e2dc55b2652ef13b43b879ff770730d6909da90c645d1c1ce1974226fc","size":735,"data":"","first_seen":"2023-03-07T12:56:05Z","last_seen":"2026-09-18T07:01:26.733936Z","times_seen":7168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cb0435fb6ba10869497f9fd09d72b10","sha1":"42ef3655cbf2afe82fbce6427a2d7540dd2f7d29","sha256":"27f1693733f6e44cfeb8f73c98537a3ad33bc45c3c82f3ac352f57eb7657fd71","sha512":"a80c89849ade3a8428b5666ae9dfa76d3004418901e18b20bee9fb4ba46b9cc7ea8f8ad87a2c643646b093d1bc1b0f0aed0cf10cfd6f19b32fafa34a03251efb","ssdeep":"","tlshash":"07d0231d324cbfdd00f31814e43f5329507f673175564054514fe4542c3ed191153b80","size":208,"data":"","first_seen":"2025-12-11T13:04:04.267229Z","last_seen":"2026-09-18T07:01:26.740831Z","times_seen":4200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f793b62e5d1c19a14227216dcd4846f","sha1":"341fb77fa941c0f1e0e6c95f34677423e26999eb","sha256":"3f5aacd9f32f512d23ac29c3e621eac8f705da795e2f7a669c85f32ff39bbcc3","sha512":"dd49a0a10edd739c401cd9db2d80bd722f1f413011ec46a08cc12a0f64b3442bf3540405ad602d17485d0c17d374f887594afd890d63d4601182c28dfa42c9f9","ssdeep":"","tlshash":"24b01215acdd0e300ba26c16a366cb3334018f44c101b574e7c890931134b8e25b4915","size":103,"data":"","first_seen":"2026-06-06T18:52:52.687849Z","last_seen":"2026-09-18T02:58:24.131368Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc32dc4dcb1ece2ee3e59e4d631bac43","sha1":"60c952f3ae3962c950d296484d0efccddb2a1728","sha256":"16138b420cbfc824596a00e223d4f6a8026890a3407ef2b62f29e608a42970ba","sha512":"e1772bf65d7f6a6fc21b5fb2dc651bb6e457812f0e92e07e151d44e0f3e239071ca64c4a1e2758f1bcf33ca6071cedef1e050a768b756051265b7138837c7fb7","ssdeep":"","tlshash":"0e3111b688855e315ff344dd582dbb02d47910a6e6c4ac18ea9c581943cee617673708","size":1523,"data":"","first_seen":"2026-09-17T18:35:13.287536Z","last_seen":"2026-09-17T18:35:13.287536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad5bf9e5b4c677fcbe1607dd780bf057","sha1":"1653f3876909cc933b0c35b4a64f8e039814564f","sha256":"2ec313110bcd1ea30758e65a4c0b5767f50fa4cf53f0fe52b5ce4286933d1349","sha512":"711d1843f2f145e2f041f2c34e1d4d725561debf3bfdf0c5e04d488d3f17608f009e3d2c211b446ebcb115a9e21dbfd09148ecf009c86164b366ea093de9128d","ssdeep":"","tlshash":"e3e0ab19a6280d37560acbd3a074bc8a347b5097cee78c48e54c0f61968764b32c3b0e","size":409,"data":"","first_seen":"2026-06-15T18:56:44.525049Z","last_seen":"2026-09-17T18:35:13.288846Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"136823261a754f11830710f82ac86e5b","sha1":"5f448da2fb0d0aeaa1f26d3eea0c8e8387f26feb","sha256":"721b79acfe93e1bc20bc5d6f16de433947c8a5d5a9a1254153179f710c289577","sha512":"b734b18b4fb31ced7e877094047efb0b20a8efa18241fade4b7b96503540d48b5bc86e1d6e974f8967bd9ddcd77d71bc16553cb0644d462ef45f29545f1368db","ssdeep":"","tlshash":"0fe02b4faf0939729758d608b43bea66782f0c0e82da6d6290dc84b8d97264217a1b43","size":422,"data":"","first_seen":"2026-06-07T01:27:24.109882Z","last_seen":"2026-09-18T02:58:24.135764Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"87b659c90b81604997dd06a67e8b773e","sha1":"bc13329ca575a3e32c93e0e1cf791f47f91b0c2f","sha256":"1ac445488ebead2ed0b74a9c86ad76fa1a81f363806218afb2ae4aae5f127448","sha512":"a2f82c520753c0b9093fec4ee7b367523cb2d7156efd5587b0c15b385661beda71050b73710a80f4d4ccc38d7921d5f01a590fa7744f204468dd63411d16509d","ssdeep":"","tlshash":"db90000c0a20c0882b00af00e000c202a0c2202f0220a38ce823bce2a83c888808fea0","size":39,"data":"","first_seen":"2023-04-11T03:58:47Z","last_seen":"2026-09-18T06:50:42.834576Z","times_seen":36586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/jquery-js-after","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a7c7758939ea4667d57a1640424664e","sha1":"b178bd30d08f912c5de6bbfd79d3288e9c8d2684","sha256":"483827e2447b7e43dfd5276ed852b30767876b9ef0e117a9aab860e7f647e2c8","sha512":"d3fae087dc3d649dbc38c98c4901f2d6e30088f41e845eeb194f42ec32c77e98bce398c33f1ecd6f77a948027b6ba1f474d69b6bb3191b79d3ff0bde7ed996f5","ssdeep":"","tlshash":"7ef0a75df248ab9d10b31834a42b5329607f7731f5564058914ee464283ed191153a80","size":596,"data":"","first_seen":"2026-07-13T13:09:45.97621Z","last_seen":"2026-09-17T18:35:13.291085Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/divi-custom-script-js-extra","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"376f1c912604eb77dd11e91ca1444a2e","sha1":"8f6eadc25a467254322b63c7aa962dcf1c8971fe","sha256":"bd114c3f840bcee2ed2832b8e6067376428c4dbae8573a7b58c7c5956a54e15f","sha512":"50abd1d54784ecf0b79f5fc3aee01e9d82112bc53b3b129d2167a59296f7ebed309592818d3175722651bb279cae848138fed0a05910defae233436f5a2b87d6","ssdeep":"","tlshash":"e5f01215ecdd0e300ba2ac36a76acb3334418f44c101f574e7ccd0931174b8e25b4915","size":495,"data":"","first_seen":"2026-09-17T18:35:13.292055Z","last_seen":"2026-09-17T18:35:13.292055Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/js/theme-scripts-library-base.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb00130ea8547562dd9d18153f4f7361","sha1":"a1562948bb39d3dc827c70435b37784291e5eeb4","sha256":"cfa2670256de9653087def047fdf5f52fee80db539e481a5f36024a839fc8457","sha512":"23796d1d156cf4cdb38f63b9043560559870d647f816d01eacadf90b1b287460c86627930b9b72e17e47c36908f670f0ed744aa992bf248ab25c9b85ad2ecb22","ssdeep":"","tlshash":"8171b7de7264b47603f76075923f6209f3b39817415988e0e27489b03d7c28e9162fee","size":3599,"data":"","first_seen":"2026-02-18T13:33:37.839769Z","last_seen":"2026-09-17T18:35:13.282633Z","times_seen":608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-multi-view.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb9e9e33a7921c6554f59c686cb3871b","sha1":"fff617601ff4d6fc6d3d7c776b81013c8e913525","sha256":"4838fcda396a020cda6394686e0fd15e9cc14351aa5cc186fe85e929a02f03b5","sha512":"388b38531e8b0fc2320e7b263ea9fb3138dd8cf0a7dc3f88b45491e26e3a65da883fe463015e4cf96ac4c3df05c1250d14356443f523ca9d11c6743caaf120f4","ssdeep":"384:Xe8pJrL+katFHsrzBy3C+hVVyQ3oRYqVedbjOfB/8Hmetl7cB7/7lzcpz/jlPcp/:Xe8pJrL+kaUz4S2V4QYRJed/dGetloBx","tlshash":"7392b84fb682707111eba2a4222f6609b2338c58f085d4d1d1f8dad4dd3954f6ab6f2d","size":20244,"data":"","first_seen":"2026-03-22T00:30:14.515764Z","last_seen":"2026-09-17T18:35:13.279269Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-18T07:41:26.40196Z","times_seen":1060175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-18T07:41:26.398604Z","times_seen":969306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-frontend-scripts.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a05ad5f4feee8cc83ab6085ec765807","sha1":"7a35aebe49dfd9181b09d58765afdb0638f4f642","sha256":"5b6a05cd411787a8faf64bb7806d5952c2b8ad4c9f4e8d6f7e870a1dbfd534d9","sha512":"29066eb0a29de0c5e49f0fceeb138f386eda8265a299f6e82ac1156b5ca7386e59025d4949aac8aa23086212d69b742f95f481b5d6d4ad09897c5842a579dd07","ssdeep":"768:A7wwsY32/4IayXJTAPadUeLcx3ZI0o5xn/tOiOjYjpa7kmzLRkaVq7K:1wsU2Q5adUeLLr5ZkzZR7MK","tlshash":"81b2938df3a5b4a622bba4a1423f770eb176541ab504c0c4f17ae4e46cb960f5063f7d","size":25230,"data":"","first_seen":"2026-03-22T00:30:14.511893Z","last_seen":"2026-09-17T18:35:13.256271Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-sticky-elements.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4a4f5a5962a083d6a05f1b45a199b61","sha1":"8abe1c2095763480730538a6b76964e6c4dc405e","sha256":"45320c2c6d9de498fe0b30d5a885325d2b32eaacfd9fff4c82fd67a60ca11823","sha512":"e7cafe85473d5f03a6a69d4cc6d529c709c15143dc596e69671f6f89203cde39fa46d2de55d01a40d0ceb2a0957fec72f4dc8729c64f6b774e4989e1e1238f6f","ssdeep":"1536:153PF8aGbxoyVHV8akWywHkdx2MiHGFNca98B09zFLdu2v5UchCE3vY5xTZpYUqK:bx4oyVYWywHkLsGFsqHIE1dG","tlshash":"c4a3d68ab3c1f87542eba099642f1a0ab07a586c7445e4c8f668d8e0ec7d54f6073f7d","size":100720,"data":"","first_seen":"2026-03-30T07:25:43.310613Z","last_seen":"2026-09-17T18:35:13.257985Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/core/admin/js/common.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","size":1343,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-18T05:47:18.991452Z","times_seen":68864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-frontend-global-functions.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9293ef513853f3da7b60539af94cf26d","sha1":"d6a4ed1fd00978a8fa3e3ca7c6aee6f1a16f4b68","sha256":"ecb89ba0f98aec2c00d268684d5d28f709d7b2f0968a3023b05420944c465b42","sha512":"1ce13f827dd97e522c0d628bc1a986c7fc6ee30597fc36d16e239c4f505ba1fc35e5f7422449e2bb3fd19a25d42b2750198a5768fdd0f0736deb3256b2b33964","ssdeep":"192:AwMw+3BL4oo4U0XfNF/YyDuAdFt1n65YwEWlYxYnAevPsSGOgPPw43G47W4:AwKL4oZXFF/YHAt1n6mwEWlYxHeHslO0","tlshash":"9e32a38df360b4f021ff29a552777305b272092be51ac88060be48781db6e4762e7f6d","size":11062,"data":"","first_seen":"2026-02-18T13:33:37.850029Z","last_seen":"2026-09-17T18:35:13.260879Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-menu.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bdc06dc411ba8b42b2269d950faf05a","sha1":"f84b0f0637a12dbcec7d2d3cbd283ac851b66371","sha256":"fc0a63e16d22f833d520ff1bdd659c0616dcbcde81361323728327cfa245792b","sha512":"82deffb5452d0fb17b3d5df74dba4861dc80435b70ca9316e21f1ca85f51cd68345752307ff9b99b916d1e95be5920284245a7079a7e550418025c065f4cf27b","ssdeep":"96:g9dw7WydpHM9V/4463k1XTac6bCbQOiVQJFS9x3Cr16zqHsU6sw74yU66:zZM/sU1AC87VmSK16zqV6sw7n6","tlshash":"33e1dfcc6730b4f5b1bf1af5717eb2045f1118679a895c9831b948b81aa2cc223f6e3d","size":6941,"data":"","first_seen":"2026-02-12T23:20:47.67441Z","last_seen":"2026-09-17T18:35:13.255629Z","times_seen":541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-jquery.fitvids.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5593a165ce98626d6d10f4e8ae50fad8","sha1":"e4db5b5b042d309120ec032b2c77e0af28dfb40b","sha256":"90a4c3e8853a629bc6aab7a39aa8da8f52c9fbd78f3349ae5d6e87c86c81f3cc","sha512":"606bf2eed729b12467a75be97a82b994b03b20ecb955eae9fe2cfb8485f69b09fc1c06a8d5dae7d0e463ba2ad7fcb05a09d90ba6bc2350ff36d0f1f56c9f8688","ssdeep":"","tlshash":"a241c6656b14f43c52da30fe6538414e7a9bc0590397ec0831f9e69e192ce8a18369fe","size":1968,"data":"","first_seen":"2026-01-08T13:23:33.600475Z","last_seen":"2026-09-17T18:35:13.278004Z","times_seen":537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-fitvids-functions.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c52db6e82056433bd12f63c1901bc0da","sha1":"d3d9bdd4833ad5d6552c705561a4029fdb991ac8","sha256":"44ca7076ac80c5b2c2389405fdc289ebcc14293e9a02d0e1225c1358aaf5d4ef","sha512":"269fdbc21accd7270444c62c0c25cbe648560ea9e1d8950bcc9a8bbb93ea1bb49af6d676bf9f6f0df671466d2c0dae7d3c143bf19a63b82d37362f61f66a68f7","ssdeep":"","tlshash":"f61180ee163ef96a613b5521f37bf32da3a1548528809ca0c1f483607499206d182fdd","size":1047,"data":"","first_seen":"2025-05-05T15:08:03.042687Z","last_seen":"2026-09-17T18:35:13.284622Z","times_seen":937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/divi-script-library-multi-view-js-extra","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8abfe1e47d416bd27c74f3b229fba5e","sha1":"a1ce94f55ae527a865161efae2b0b2f71c221e83","sha256":"35a695f213dddf03c26c9ba469ec56d13c1e3b385aae95b7aa4d1d45fb59b0a0","sha512":"bf758c9a3782d87848f3e47cc67f42fa53f5625ae4b1f20d8a23743ce5974d54b037c8437b40481198fc121bc38c8d99ce00f9f93333c0a9ed33617b592a8772","ssdeep":"","tlshash":"3501234fef0539729754d538b43bd967782f0c0ec2da6d6290dc8474d97254117a1b43","size":837,"data":"","first_seen":"2026-09-17T18:35:13.293027Z","last_seen":"2026-09-17T18:35:13.293027Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-ext-waypoint.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1057b6e494911385d1dd054f466c9a46","sha1":"5463e558a1d0ddefe2688a16aefa9eb9c0164348","sha256":"bf38fe9596484eddfaf0cb1def2faa78e07ab83a2931bbc032d90b2f58f71ecc","sha512":"1c06f4195758b3cca9042db72fd3577d0a47c7494684b89e7b1f434d11edf753a89d04a2eb4e8c61b9e15655322ec468a05bc81b8d0918250f71abdf05136625","ssdeep":"192:7FxikCm1dJDl6hj8f6PQpkvfikUaLkYluY/pCyWFvE7RzyzIjkrFKb:R+IJDlC8SPUkv9LkYluY0ya0RzyzYb","tlshash":"c8027289761574231b9f90bad91f434ab3371828b40680bdb0c8d4ed28f652d673bf7a","size":8750,"data":"","first_seen":"2025-04-06T14:39:11.452469Z","last_seen":"2026-09-18T02:58:23.977975Z","times_seen":1415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/divi-script-library-frontend-scripts-js-extra","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd804b46d691b18cd800d396cdf1703","sha1":"930e10b17494ae3e470736057b71befff95dfeed","sha256":"1bb6b1aa10d364e1445c46d78e4e7c5cd744a4489bacf10b6efd203d3be315a4","sha512":"33f499aa36e8ef0086d16d30ae99992f01bccf7094796212535673474fa3f5e872db9b9c316ea6f84af32d697496d910915d3312f0c2d0ead5fa6c69594141c5","ssdeep":"","tlshash":"cb4111b6c8855e315ff344fd582dbb02d4b910a6e6c4ac18ea9c581943cee617673708","size":1923,"data":"","first_seen":"2026-09-17T18:35:13.293834Z","last_seen":"2026-09-17T18:35:13.293834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/et-builder-modules-script-sticky-js-extra","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6bd072556d898a954efc3cce48793e9d","sha1":"39a57fe8f4832a8fa5a52cd6f35569d68c98f821","sha256":"0901aca8d480257e3c93af33718bb5ca8c86d7652ce456f9cb422bd8e0c3dda1","sha512":"0ea834a5c4befd064025006c3dcd8103ba14c9c0b9c567c607ff944b27550f74bcd58ef4f2e4e2f30d588ffe902f50c49d2681274a1299b8be6a10ea215047dc","ssdeep":"","tlshash":"3301ab19e6280d37560acbf3a474bc8a34bb5097cee78c48e54c0f61968764b32c3b0e","size":816,"data":"","first_seen":"2026-09-17T18:35:13.294878Z","last_seen":"2026-09-17T18:35:13.294878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://redshieldai.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.329Z","timestamp":1789670061329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redshieldai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 13:02:27 GMT\r\nexpires: Fri, 17 Sep 2027 13:02:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19914\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49132,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-09-18T07:40:32.422895Z","times_seen":342762,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":6,"connect":26,"send":0,"wait":18,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.337Z","timestamp":1789670061337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redshieldai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:37:59 GMT\r\nexpires: Fri, 17 Sep 2027 10:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 28582\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-18T07:39:18.119535Z","times_seen":561562,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":33,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/uploads/2026/05/RedShield-AI-Logo.png","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.342Z","timestamp":1789670061342,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/RedShield-AI-Logo.png HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 May 2026 23:02:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16837\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16837,"size_decoded":17123,"mime_type":"image/png","magic":"PNG image data, 1075 x 222, 8-bit/color RGBA, non-interlaced","md5":"69cf3821914205c3c38a37fed10c9010","sha1":"6961eb98271dd59cae430cb9dc63bebf0b2dea33","sha256":"f5b70cd938f85eea7f1562b0bc00f75345259d533bc6a234f2682a41aa897413","sha512":"3dbc36f61309606164649f8c436da6b35bf920bc71776b38bbb6cdcb51076fc7d2631c58708df6456d399968e759fee6561d7e39997e2ba709303e89f03636e1","ssdeep":"384:zmKBC6MplVs+5fjhKuNuMfvmW9LVt83yW3NLsqvshX898TX4F:zmKCU+5LhnuM3m+Lr23Vsq0h88X4F","tlshash":"1b72d16d88368973e7e3d3f6fec597362a652601545c43929a31ec1e46f70cbc1811ec","first_seen":"2026-09-17T18:35:13.252737Z","last_seen":"2026-09-17T18:35:13.252737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T18:34:19.526Z","timestamp":1789670059526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.0.30\r\ncontent-type: text/html; charset=UTF-8\r\nno-vary-search: params=(\"PageSpeed\")\r\nlink: \u003chttps://redshieldai.net/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://redshieldai.net/wp-json/wp/v2/pages/31\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://redshieldai.net/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 18:34:20 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Divi:5.2.1","description":"Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder.","website":"https://www.elegantthemes.com/gallery/divi","common_platform_enumeration":"","icon":"Divi.svg","categories":["Page builders","WordPress themes","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"FitVids.JS:5.2.1","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.0.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":159203,"size_decoded":27762,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (27669)","md5":"33cd6c7ae0bbfa1a1344e51f9e64e676","sha1":"98a6733a4212c40d600e31cb80f4a3b0c27314df","sha256":"7badbfccb9886b25e09fa6f93d1c11e513971c2d455ef9782e711754fe608f36","sha512":"17a7117055a5c60b4867c3948ab9a0901a0a3f6e8751c0b0df95989c677bd9317c6a88b2de627cf586ba55aa721055d58a9f435d9f89a9418083278ee08580b5","ssdeep":"1536:Typ89dQiwU0o+tyEebZiEaGbZiEaDftDD1TCaZtUO9wGX2zwwlO:+ewLty9PrPmDD1TCaZt59w02zwAO","tlshash":"e3f3f79ea7b2343972138666f8d17328e5a8d003db065de5bdb5e2648fc16e304f724e","first_seen":"2026-09-17T18:35:13.254143Z","last_seen":"2026-09-17T18:35:13.254143Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1209,"timings":{"blocked":0,"dns":365,"connect":130,"send":0,"wait":454,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-menu.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.167Z","timestamp":1789670061167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-menu.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1780\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6941,"size_decoded":2123,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6941), with no line terminators","md5":"1bdc06dc411ba8b42b2269d950faf05a","sha1":"f84b0f0637a12dbcec7d2d3cbd283ac851b66371","sha256":"fc0a63e16d22f833d520ff1bdd659c0616dcbcde81361323728327cfa245792b","sha512":"82deffb5452d0fb17b3d5df74dba4861dc80435b70ca9316e21f1ca85f51cd68345752307ff9b99b916d1e95be5920284245a7079a7e550418025c065f4cf27b","ssdeep":"96:g9dw7WydpHM9V/4463k1XTac6bCbQOiVQJFS9x3Cr16zqHsU6sw74yU66:zZM/sU1AC87VmSK16zqV6sw7n6","tlshash":"33e1dfcc6730b4f5b1bf1af5717eb2045f1118679a895c9831b948b81aa2cc223f6e3d","first_seen":"2026-02-12T23:20:47.67441Z","last_seen":"2026-09-17T18:35:13.255629Z","times_seen":541,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-frontend-scripts.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.168Z","timestamp":1789670061168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-frontend-scripts.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7265\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25230,"size_decoded":7608,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25141)","md5":"2a05ad5f4feee8cc83ab6085ec765807","sha1":"7a35aebe49dfd9181b09d58765afdb0638f4f642","sha256":"5b6a05cd411787a8faf64bb7806d5952c2b8ad4c9f4e8d6f7e870a1dbfd534d9","sha512":"29066eb0a29de0c5e49f0fceeb138f386eda8265a299f6e82ac1156b5ca7386e59025d4949aac8aa23086212d69b742f95f481b5d6d4ad09897c5842a579dd07","ssdeep":"768:A7wwsY32/4IayXJTAPadUeLcx3ZI0o5xn/tOiOjYjpa7kmzLRkaVq7K:1wsU2Q5adUeLLr5ZkzZR7MK","tlshash":"81b2938df3a5b4a622bba4a1423f770eb176541ab504c0c4f17ae4e46cb960f5063f7d","first_seen":"2026-03-22T00:30:14.511893Z","last_seen":"2026-09-17T18:35:13.256271Z","times_seen":430,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-sticky-elements.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.170Z","timestamp":1789670061170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-sticky-elements.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27922\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100720,"size_decoded":28266,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65344), with no line terminators","md5":"f4a4f5a5962a083d6a05f1b45a199b61","sha1":"8abe1c2095763480730538a6b76964e6c4dc405e","sha256":"45320c2c6d9de498fe0b30d5a885325d2b32eaacfd9fff4c82fd67a60ca11823","sha512":"e7cafe85473d5f03a6a69d4cc6d529c709c15143dc596e69671f6f89203cde39fa46d2de55d01a40d0ceb2a0957fec72f4dc8729c64f6b774e4989e1e1238f6f","ssdeep":"1536:153PF8aGbxoyVHV8akWywHkdx2MiHGFNca98B09zFLdu2v5UchCE3vY5xTZpYUqK:bx4oyVYWywHkLsGFsqHIE1dG","tlshash":"c4a3d68ab3c1f87542eba099642f1a0ab07a586c7445e4c8f668d8e0ec7d54f6073f7d","first_seen":"2026-03-30T07:25:43.310613Z","last_seen":"2026-09-17T18:35:13.257985Z","times_seen":78,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/uploads/2026/05/RedShield-AI-Favicon-150x150.png","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.564Z","timestamp":1789670061564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/RedShield-AI-Favicon-150x150.png HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 May 2026 23:00:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10427\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10427,"size_decoded":10713,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"041fcbd69e473c61b77ed2b434db72d9","sha1":"2a85462adcdd1237d98588e9aa137fae2846065b","sha256":"b9c067bcddaafd525c9111cbaf5a3f218c931aae2f908df371702b5848ea2a18","sha512":"841dea0235c855dc2c2682415abc67308946ecbc9852645547744f01be670ce85867f1a39a82818f53ffae60e0d2284cdacfde48793c0e8f70b80ba6eedd6930","ssdeep":"192:6UUxbe1YGnhrwetSY+olXUMx8cIOETRoC3Tz8ALIePTcYwrZBLg+l9FLlZWIE:6UUqPhUeP+o5UitU2Cj/LIkdwjx9FLBE","tlshash":"9422cf86955b263c4539469709f8af5cebe8d8c24f00fc624443abae45c3493790dfbb","first_seen":"2026-09-17T18:35:13.259229Z","last_seen":"2026-09-17T18:35:13.259229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.161Z","timestamp":1789670061161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 09:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":5021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-18T07:41:26.398604Z","times_seen":969306,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-frontend-global-functions.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.164Z","timestamp":1789670061164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-frontend-global-functions.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3793\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11062,"size_decoded":4136,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11062), with no line terminators","md5":"9293ef513853f3da7b60539af94cf26d","sha1":"d6a4ed1fd00978a8fa3e3ca7c6aee6f1a16f4b68","sha256":"ecb89ba0f98aec2c00d268684d5d28f709d7b2f0968a3023b05420944c465b42","sha512":"1ce13f827dd97e522c0d628bc1a986c7fc6ee30597fc36d16e239c4f505ba1fc35e5f7422449e2bb3fd19a25d42b2750198a5768fdd0f0736deb3256b2b33964","ssdeep":"192:AwMw+3BL4oo4U0XfNF/YyDuAdFt1n65YwEWlYxYnAevPsSGOgPPw43G47W4:AwKL4oZXFF/YHAt1n6mwEWlYxHeHslO0","tlshash":"9e32a38df360b4f021ff29a552777305b272092be51ac88060be48781db6e4762e7f6d","first_seen":"2026-02-18T13:33:37.850029Z","last_seen":"2026-09-17T18:35:13.260879Z","times_seen":473,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/core/admin/fonts/modules/social/modules.woff","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.340Z","timestamp":1789670061340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/modules/social/modules.woff HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: font/woff\r\nlast-modified: Tue, 21 Apr 2026 02:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10440\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10440,"size_decoded":10726,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 10440, version 2.4","md5":"b55162e3397f6ba96b7ab1fd1ce74cd5","sha1":"2c6235b40f893ac5e00d365b4ff39312ae66a9d7","sha256":"0fe6b4492dd0679fa027aea33d34af7daf21f0e7b55deb1266f7f4d8a1da1365","sha512":"126144396033453126521d31cdb963b25da4a67d1e0cdd8427a90b9b8aacb98fe014df964dbd7d7598cc15d5d8a3adda508c54e8a582289c8c972d63f3c9107e","ssdeep":"192:1uFfGD9YeKi3j1iaiU9qceE3KhFm87KUy/riGHdZ2kvq9zAhndL+mq5DIiJ1Y:1uFfANTlkceEa+5f2dzA5dM8iv","tlshash":"6f220817c38bcbeed92487311cab46156efacf25d26ed34e09899d84e800ef84d35b95","first_seen":"2025-10-27T01:46:20.802927Z","last_seen":"2026-09-17T18:35:13.261434Z","times_seen":155,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/uploads/2026/05/RedShield-AI-Favicon-300x300.png","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.563Z","timestamp":1789670061563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/RedShield-AI-Favicon-300x300.png HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 22 May 2026 23:00:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23298\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23298,"size_decoded":23584,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"4224d140169ec68f95be72545f1d10a8","sha1":"57111b5215dc2d7d00aa8597ad692a2c2587d833","sha256":"aa789276ea120c790de2912403f86dcd5b8b43f5cc1b141a0197335e7c3024c0","sha512":"0eef9ec5a4a27176f2aaa099f54a5a94b817645870ebda7b4aa12fc38c6524b033b9f7f7cd5d0943fa089b501af06064dc25ff781ee8ca0e770c56e4c93c542b","ssdeep":"384:pCOKqhS2j6R6Ifwo0/ZOvW5mhHimL+FPD29mI6ZhFokP20A20hv:pCO1dIfwo0/ZOp0LPDSKY","tlshash":"fea2d1f19a663166f64bfc4e304025565f08b4a90f35faaec949076e6b1de4e348b8f0","first_seen":"2026-09-17T18:35:13.262786Z","last_seen":"2026-09-17T18:35:13.262786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic|Open+Sans:300,regular,500,600,700,800,300italic,italic,500italic,600italic,700italic,800italic\u0026subset=latin,latin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.156Z","timestamp":1789670061156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /css?family=Montserrat:100,200,300,regular,500,600,700,800,900,100italic,200italic,300italic,italic,500italic,600italic,700italic,800italic,900italic|Open+Sans:300,regular,500,600,700,800,300italic,italic,500italic,600italic,700italic,800italic\u0026subset=latin,latin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 18:34:21 GMT\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107154,"size_decoded":3878,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f7c23446cee89abed40397e3c90e3e37","sha1":"d329e921be4b45a9e30fe4233fd69ae44cbe631f","sha256":"bf7efde4ea6b97b376441735a6c4fc0bfeb7ef7b34ec3d3f08ecbc05bdec9a72","sha512":"49f2271a2fdfc92a0530827c09f2077cdf6182934160d8f04d347d04cc3b2b2c7c59efbb6c9f71dc46f9f263a3c1c855004a36e5df96ed2f4269dd29666c1c8d","ssdeep":"768:0Zds8FdCWQadBIM8Av3keKcZd4oIp+6hnwYzFCuVh:yPIZAPkFc34ZpVRNR9f","tlshash":"9da32f9100176540aa432cd633cf7e35ee0fa6617084c07aabfd5adaeedac26537476c","first_seen":"2025-09-19T04:42:32.528966Z","last_seen":"2026-09-17T18:35:13.264446Z","times_seen":386,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-jquery.fitvids.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.171Z","timestamp":1789670061171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-jquery.fitvids.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 728\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1968,"size_decoded":1070,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1881)","md5":"5593a165ce98626d6d10f4e8ae50fad8","sha1":"e4db5b5b042d309120ec032b2c77e0af28dfb40b","sha256":"90a4c3e8853a629bc6aab7a39aa8da8f52c9fbd78f3349ae5d6e87c86c81f3cc","sha512":"606bf2eed729b12467a75be97a82b994b03b20ecb955eae9fe2cfb8485f69b09fc1c06a8d5dae7d0e463ba2ad7fcb05a09d90ba6bc2350ff36d0f1f56c9f8688","ssdeep":"","tlshash":"a241c6656b14f43c52da30fe6538414e7a9bc0590397ec0831f9e69e192ce8a18369fe","first_seen":"2026-01-08T13:23:33.600475Z","last_seen":"2026-09-17T18:35:13.278004Z","times_seen":537,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/core/admin/js/common.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.174Z","timestamp":1789670061174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/js/common.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 490\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1343,"size_decoded":832,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-09-18T05:47:18.991452Z","times_seen":68864,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-multi-view.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.174Z","timestamp":1789670061174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-multi-view.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5363\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20244,"size_decoded":5706,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20244), with no line terminators","md5":"bb9e9e33a7921c6554f59c686cb3871b","sha1":"fff617601ff4d6fc6d3d7c776b81013c8e913525","sha256":"4838fcda396a020cda6394686e0fd15e9cc14351aa5cc186fe85e929a02f03b5","sha512":"388b38531e8b0fc2320e7b263ea9fb3138dd8cf0a7dc3f88b45491e26e3a65da883fe463015e4cf96ac4c3df05c1250d14356443f523ca9d11c6743caaf120f4","ssdeep":"384:Xe8pJrL+katFHsrzBy3C+hVVyQ3oRYqVedbjOfB/8Hmetl7cB7/7lzcpz/jlPcp/:Xe8pJrL+kaUz4S2V4QYRJed/dGetloBx","tlshash":"7392b84fb682707111eba2a4222f6609b2338c58f085d4d1d1f8dad4dd3954f6ab6f2d","first_seen":"2026-03-22T00:30:14.515764Z","last_seen":"2026-09-17T18:35:13.279269Z","times_seen":246,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.331Z","timestamp":1789670061331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redshieldai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:37:59 GMT\r\nexpires: Fri, 17 Sep 2027 10:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 28582\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-18T07:39:18.119535Z","times_seen":561562,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":25,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.333Z","timestamp":1789670061333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redshieldai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:37:59 GMT\r\nexpires: Fri, 17 Sep 2027 10:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 28582\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-18T07:39:18.119535Z","times_seen":561562,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":21,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.334Z","timestamp":1789670061334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redshieldai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:37:59 GMT\r\nexpires: Fri, 17 Sep 2027 10:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 28582\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-18T07:39:18.119535Z","times_seen":561562,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":13,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.336Z","timestamp":1789670061336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://redshieldai.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:37:59 GMT\r\nexpires: Fri, 17 Sep 2027 10:37:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 28582\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-09-18T07:39:18.119535Z","times_seen":561562,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":30,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/et-cache/31/et-core-unified-tb-207-tb-208-deferred-31.min.css?ver=1780602491","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.159Z","timestamp":1789670061159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/et-cache/31/et-core-unified-tb-207-tb-208-deferred-31.min.css?ver=1780602491 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 19:48:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":73,"size_decoded":355,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"210c20a59cc17e91c0546ebd76ba101f","sha1":"7792e4ce7c6af434ba49c20a4b75b1ffee2f4e27","sha256":"7f10ee51ccbfc338c23873ad78269f7c6054d5811f907bb0dc4ba0e9428b0e2c","sha512":"6ac5f8dd741337129ee37b99d508ccfb5c3a323af9ee843f311eccd831432edb03747cdd4e042df76d05c54b43db98ce10ef40e7fb448080bc7470f9145bd941","ssdeep":"","tlshash":"faa022383808282c0c83e2af0230ff8ae8be80f8c03000f0000e800802cb30000ec328","first_seen":"2026-03-07T21:07:45.059751Z","last_seen":"2026-09-17T18:35:13.280747Z","times_seen":21,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.160Z","timestamp":1789670061160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 21:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30088,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-18T07:41:26.40196Z","times_seen":1060175,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/js/theme-scripts-library-base.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.163Z","timestamp":1789670061163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/theme-scripts-library-base.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1432\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3599,"size_decoded":1775,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3515)","md5":"cb00130ea8547562dd9d18153f4f7361","sha1":"a1562948bb39d3dc827c70435b37784291e5eeb4","sha256":"cfa2670256de9653087def047fdf5f52fee80db539e481a5f36024a839fc8457","sha512":"23796d1d156cf4cdb38f63b9043560559870d647f816d01eacadf90b1b287460c86627930b9b72e17e47c36908f670f0ed744aa992bf248ab25c9b85ad2ecb22","ssdeep":"","tlshash":"8171b7de7264b47603f76075923f6209f3b39817415988e0e27489b03d7c28e9162fee","first_seen":"2026-02-18T13:33:37.839769Z","last_seen":"2026-09-17T18:35:13.282633Z","times_seen":608,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-ext-waypoint.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.166Z","timestamp":1789670061166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-ext-waypoint.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2451\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8750,"size_decoded":2794,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8750), with no line terminators","md5":"1057b6e494911385d1dd054f466c9a46","sha1":"5463e558a1d0ddefe2688a16aefa9eb9c0164348","sha256":"bf38fe9596484eddfaf0cb1def2faa78e07ab83a2931bbc032d90b2f58f71ecc","sha512":"1c06f4195758b3cca9042db72fd3577d0a47c7494684b89e7b1f434d11edf753a89d04a2eb4e8c61b9e15655322ec468a05bc81b8d0918250f71abdf05136625","ssdeep":"192:7FxikCm1dJDl6hj8f6PQpkvfikUaLkYluY/pCyWFvE7RzyzIjkrFKb:R+IJDlC8SPUkv9LkYluY0ya0RzyzYb","tlshash":"c8027289761574231b9f90bad91f434ab3371828b40680bdb0c8d4ed28f652d673bf7a","first_seen":"2025-04-06T14:39:11.452469Z","last_seen":"2026-09-18T02:58:23.977975Z","times_seen":1415,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redshieldai.net/wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-fitvids-functions.js?ver=5.2.1","fqdn":"redshieldai.net","domain":"redshieldai.net","tld":"net"},"ip":{"addr":"165.140.68.129","port":443,"asn":399250,"as":"NAMEHERO-KCDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redshieldai.net/","date":"2026-09-17T18:34:21.172Z","timestamp":1789670061172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.swarmshield.io.darastuff.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 20:46:02 GMT","end":"Wed, 11 Nov 2026 20:46:01 GMT"},"fingerprint":{"sha1":"34:8F:84:AA:12:42:39:E9:08:5E:F4:44:17:B2:94:C4:26:C2:F4:56","sha256":"14:6D:33:31:42:D2:4D:09:AA:F9:13:81:A0:FB:E5:42:A2:D9:AF:84:01:28:A5:84:7C:CB:E9:3B:05:4B:0C:5D"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder-5/visual-builder/build/script-library-fitvids-functions.js?ver=5.2.1 HTTP/1.1\r\nHost: redshieldai.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://redshieldai.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 24 Sep 2026 18:34:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Apr 2026 02:27:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 433\r\ndate: Thu, 17 Sep 2026 18:34:21 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1047,"size_decoded":775,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1047), with no line terminators","md5":"c52db6e82056433bd12f63c1901bc0da","sha1":"d3d9bdd4833ad5d6552c705561a4029fdb991ac8","sha256":"44ca7076ac80c5b2c2389405fdc289ebcc14293e9a02d0e1225c1358aaf5d4ef","sha512":"269fdbc21accd7270444c62c0c25cbe648560ea9e1d8950bcc9a8bbb93ea1bb49af6d676bf9f6f0df671466d2c0dae7d3c143bf19a63b82d37362f61f66a68f7","ssdeep":"","tlshash":"f61180ee163ef96a613b5521f37bf32da3a1548528809ca0c1f483607499206d182fdd","first_seen":"2025-05-05T15:08:03.042687Z","last_seen":"2026-09-17T18:35:13.284622Z","times_seen":937,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"redshieldai.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"redshieldai.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}