{"report_id":"188ad077-3fc3-4fcd-b9ef-a60b26caf6a9","version":6,"status":"done","tags":[],"date":"2026-03-05T18:41:54Z","url":{"schema":"http","addr":"globalrefundsolutions.com","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"globalrefundsolutions.com/","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"title":"globalrefundsolutions – globalrefundsolutions","dom":{"size":263261,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16002), with CRLF, LF line terminators","md5":"dcc42345a71a5f6b7e507e5bc5f24703","sha1":"77f3637a3d9de581312a06b58a81244d4f1c2426","sha256":"1cd30528fe419daf85a5417b77ac1ccd15fd3a53ef971a55598a6a4810e22c6a","sha512":"f09ab30a69c6cc06543424e87773d3d036de38d58edaed46443d049e0d384fa69e5bac297d93495b9b0bbd0815eeaf8309876aa09ecc031f6c92d2f57e905c40","ssdeep":"3072:tEwcRxbENDY+4INepYBlCGi4r+LLbyzWoekPhpGxDnPoLz:vDY+4INepilCGi4r+LLby","tlshash":"99449573350a2426113f83ce6067673de18adebffa924ac07af983a563f5c903297155","dom_hash":"domhashe7b5ae3043d95b06e457e1fe401f976e","first_seen":"2026-03-05T18:41:59.034987Z","last_seen":"2026-03-05T18:41:59.034987Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"globalrefundsolutions.com","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T18:41:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"globalrefundsolutions.com","ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-11","domain_rank":0,"first_seen":"2026-03-05T18:41:56.135208Z","last_seen":"2026-03-05T18:41:56.135208Z","alert_count":72,"request_count":72,"received_data":72540354,"sent_data":36371,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.20.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":116458,"sent_data":807,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":120980,"sent_data":2195,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"globalrefundsolutions.com/elementor-pro-frontend-js-before","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"061b0072d78402cd76eec0f4ab729cb9","sha1":"2a29d6676d718ad792846beb0d84fb1ccc495da1","sha256":"bf70fe3f48d15620a9b99af0cf4fb07503532797391d9d0f1b6738e8b8f33e3e","sha512":"a4c103d1ed5f1bb3261bd41d73028bf6fcb9326c36ce24693453515bb192a8b52cc311379ba6e4af18f5184c69d9f029894737249554eb55c804cccb7891fe29","ssdeep":"","tlshash":"c5519d96ee210e2487aaa7fc72c63e6f44d04632d5c8f54d1599e06811f3d9ef14d2e3","size":2592,"data":"","first_seen":"2026-03-05T18:41:59.135613Z","last_seen":"2026-03-05T21:36:23.972695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d52ea81c246ceeeccef8559b1dc418bf","sha1":"8b970cef491e163b217b74afbe11fca53870270b","sha256":"5b5e531d035c2238fab0c108857437933cb4dfc3bcd83859153f4a05220f51c9","sha512":"0ec3a2ff5bad092a5cab711b6902387fdebb924df06382dcb520c8168e13c94752e1f5a6dbd42ff571c5b49170167e6f1734f6080f81e3aa55767f9ce34e047b","ssdeep":"96:kvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SY:xN0LE0+1lfYsvSh","tlshash":"dd91979ae77638dbb2f900f2697a0d47e7614435d6c8d438c9bda3141cb5893c274a46","size":4338,"data":"","first_seen":"2026-03-05T18:41:59.137567Z","last_seen":"2026-03-05T21:36:23.971405Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"24e1daf2317b18d289692bdfefcbce20","sha1":"4b622e724a499b39a0299675fca838f455c3a1ca","sha256":"8d57efa4d85be2a381de9a2beeef02e49cee3c9ada58908467f80fbed8dec281","sha512":"08e40434c41a28e62e544aa699943c63e7fa7aed966779041b2f6614c12c1607aecf0c2bf68f1df7b18bed0b5b004b14d706cf7caccb1ca2a852933dfb2587c7","ssdeep":"","tlshash":"e1e0e51de084041446fa603ac4bf7757b40779faa62b00cb94cc5e792a68b744c63885","size":432,"data":"","first_seen":"2025-12-03T07:10:33.678103Z","last_seen":"2026-06-25T15:46:18.785234Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e248abcc529a4b86e24164d773b0edc","sha1":"0b2a9e3321382ffede33592de9a0b1815270d527","sha256":"cd14de9765963d1d87bad7b820ed1449f7f93b7680c4e6c5182258ea8f4903e3","sha512":"cd027fd03f12bdba56d17d4f665254a4a68bb3d95fb2261b0820956c61e0b3957a8c77525d371d81053ef8ae2817371b7fda1c0ee5991331c6e23c60902134dd","ssdeep":"768:/RPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9KEAzBc5GETSebsvTilauUHTSX5aodX:/RP/LRkRQx1QEa3GfV9JREAzBc53TSe1","tlshash":"6003071271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","size":40306,"data":"","first_seen":"2024-04-11T16:07:56Z","last_seen":"2026-08-02T17:43:01.247562Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/gtranslate/js/dwf.js?ver=6.9.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c353d2960c13ee5c55e45e8735b702d3","sha1":"b6354145ca8bc58084361622be0b0c1c3df86458","sha256":"0d64e26d65304fd2b63c6e761b404ba503e3b0d3806bfaa8fcf6bc84bfd88aae","sha512":"677d4266101db5a0fa5f44c943bef71923e3a6d7c7d2aa4cad45cab0a8683d1a809bcbb5da620a1d1af3ceddd394131c1a247467b7da5e4aaa5a10c02834a923","ssdeep":"384:vzCKMPZATN09o0mtYo8XgV8lvSdDswFi2hS4DMbH:vVMhAh060sYo8Xk8lqdpk","tlshash":"5b92f96611f7003e9917036aefbe4b1c60b902774004e920bfaedd829fc199cc677ad8","size":20857,"data":"","first_seen":"2025-04-23T03:37:50.359151Z","last_seen":"2026-08-03T21:28:43.246106Z","times_seen":3865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.d43af66e5000fd109c04.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5aa84a359268fbf7a98d521f3d47f7d","sha1":"4686f2b5002072b77c9fd83225c95fcd405ae5fd","sha256":"3afd5ca52be2cdf92e6f60f746b2c08fd1a546e172144e26a83382ffc6cf9c71","sha512":"0bb9ef1b78dbc350290fc3d1cbc015cd42ef71543a52146f3e8d8b805ae8b17a3d2a94bac46f95e0acf02d1f0fee1feb98a62470b845498666d38aa2e8fbe732","ssdeep":"96:B5M92EVN54zajUkkRk7PA2goL/V2VsVQKSGffr/xZdUyKfKAtZ2JWEfPvkhh2iQ/:PdEXNUTW7vgoL91SEj/xZdUyKfP2JVv/","tlshash":"f2a151a373931ab6858f405b7a434a2df23219ac744665997a796cae21f0fc033f5b34","size":4647,"data":"","first_seen":"2023-12-07T10:58:20Z","last_seen":"2026-08-01T08:09:40.846096Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/gt_widget_script_12423436-js-before","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeca0ff8e164b2ef2c94e19dca14d6e6","sha1":"526fb3c1743b08593e1096e5414483df7671bd9c","sha256":"8f6b25867b7897f94b9df0d26065797621955d29e4b6d62e2d128f826f72ec5e","sha512":"2cc8a3510b627286dfdc0bd69fd6a94883d94751f16cfd46db2740a23eb0cdea8746e3537dd8aab4bebf0c3bcadb3d5edb3f75176848a618377600eb637a8f49","ssdeep":"","tlshash":"48510d24c7a8147d57ca073cba96efa8412da075f18c4f187a5ecc38f7d65874a0374a","size":2466,"data":"","first_seen":"2026-03-05T18:41:59.140616Z","last_seen":"2026-03-05T18:41:59.140616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-i18n-js-after","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5d11cf60a33bcfc267e087f663b6d35","sha1":"32a10370967b1587480e1a63f2123c645d5442d9","sha256":"49c6b11d6efee274e446dd1fa5cfd63c0cad6be7c70f643e6e83cf8d711da497","sha512":"cfd26fcd37ab252a76e592554665bb6950a638558e394f222c59c7332f175b1a95e49695888aef52d615108e32f1333d0d8850c2354fa228b60de285e7a9ec87","ssdeep":"","tlshash":"b92112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1439,"data":"","first_seen":"2025-12-20T11:33:31.592081Z","last_seen":"2026-08-04T08:06:26.516343Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-04T09:49:45.856014Z","times_seen":203533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/elementor-frontend-js-before","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1970368ad9839574118cd0f94b5ae44","sha1":"d275d8ec48ba95872cd07d356fc5a5b70bd3f5d7","sha256":"6282b8ac448fe04a7551b8cba36e79c7145a2099d11628beee93dd866bb92dd0","sha512":"506962d9ba923f6c18c2ab66deea8569894ab2db1e749e52dd42556a8641a2e94ba994dde68f20555b247ec8edb6acd42760ae188e0d6e32503fe9d3c068c608","ssdeep":"","tlshash":"e2817230f94559bb83e397b97917bf026a7c0535c041aca8f4bc486d24f6a39220be47","size":4077,"data":"","first_seen":"2026-03-05T18:41:59.145755Z","last_seen":"2026-03-05T21:36:23.96824Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/js/intlTelInput-jquery.min.js?ver=1.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e000e1444e814e3ab1458d0c6b35290","sha1":"06f7d1822e52716e79b08d1e41099f5c4a4ed1d4","sha256":"aabf45a20bb46c2ca02a98955406aff2bd696f889d0ed214dd520c6ac6f5d5f0","sha512":"c7289f3eaf5fe654fbf56262a191dc0c0f401e60275c278b00863f5c9610b4b73d3ba2b6e4d845640d438a367194ada977546b7870e09b762ffd4ee938a5ebfc","ssdeep":"768:KIqD7GzOoS+D45YMJR3QWVrdNuDxwt0q3vTpzaDPCg1i:mfHQWVLuFwt0qNzajC8i","tlshash":"1ed2f99973511237a89aa0a1687f16472ebf34155a84cc8cb87ecdcc0fecec9a1b5734","size":29804,"data":"","first_seen":"2023-11-13T21:34:25Z","last_seen":"2026-07-23T05:46:53.398248Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-04T11:25:46.387473Z","times_seen":337210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.18.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5be2d4015ea2d58c02fb34ef9cfc53d1","sha1":"4426716a349a40b6e30c824293d3c12e90550b89","sha256":"5e7015ac91edb803465bcfcd3001530ad97288415e56d51e09299b1097ba450e","sha512":"65f035d2651299954e34d8fa4403d1b137e71547734326ddc9f9b0ddadb86ab19d40cd95c99a0860b7adac5801d6135b1415bf09296487553431ca63874803b1","ssdeep":"768:KdbnHy/adwdddrdDdVdydOdad1dpdLdFdVd65+P6fvqMIODVwdfu8jbxwid8dHdO:SgaC/dRrIM4D7lv/YVZwhu8jbxwiGd5i","tlshash":"6c03965071aac97845cfc4abf423268fa722ac9cb403f4d77afd8d826564e87a350771","size":38132,"data":"","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-08-01T08:09:40.853242Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2536846142f932499eb70e74431aca96","sha1":"10ade54a7af7cdbdb8a8999ce5596ee668f2267b","sha256":"175b921873f42526033a26d6f062c31f9d44ef8c89ca8cd5cbbb07f46f039bf3","sha512":"c952f1f24e0ab849e80e21fcf9c2e7d148d8340cf2592b98f9e13ad3a2eab82a6815483d479d83a8e9a06ce5e4d427056433d1f8d4634e9cd0e3263f165cd5fa","ssdeep":"","tlshash":"d2e0c21a13442c7b98fb46c5f1876eea30bb0195f241525100aeed0f53958a7dea02ea","size":305,"data":"","first_seen":"2026-03-05T18:41:59.14862Z","last_seen":"2026-03-05T21:36:23.970153Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-04T09:40:53.497565Z","times_seen":200475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ab27c3944d1b7a2f38acb3cd2eb2a1c","sha1":"feb035a4968aa5fecd5e9330f0c2245af70d5508","sha256":"5136c390dea33157d3e840de48a795af049fad0beff26ed012984e7b6d9dc8cc","sha512":"3f7b537d53163c8fb19e84f084e8156a6ac8393673b0245c6fa2b6f96ba8de34a553df844b5d306092242110d4193f2b16d67132c6577817f64c45e15c0130b4","ssdeep":"1536:neAjA679C+QRCHXC4WHqMPB8Vx8WXwCDFYNIekHeBHmjkfzRNE4cR8+Sxp6xID1x:Xd97W/Clkbx","tlshash":"9b43eb863251b4e70bef40eb602b450af32319e4740eb5987ab8ddf66470d5a237b739","size":60168,"data":"","first_seen":"2024-04-11T16:07:56Z","last_seen":"2026-08-02T17:43:01.392962Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9711c24efebf473b41a7f155ee2f0744","sha1":"dd4c84e59b8029a6aab2a393c77ed47aa493bf88","sha256":"ce7e0647d9420928cc3d294f452c4d94516baef58bba12b02103d01ad4242152","sha512":"551ec625b6335a7e26fcbc8d3215ab2847f81f5677442c6bbab51c530870fd18f86baee9f185fcdf615cef9ecd1177160e92ed108c94074b35b00b717263c8f5","ssdeep":"","tlshash":"9f2142f370a39c9e49cf248b34221d17f1570c98b8c9901ef9aa08df3472e893362234","size":1360,"data":"","first_seen":"2024-04-11T16:07:56Z","last_seen":"2026-08-02T17:43:01.268385Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/form.10bf1a6475f0741920ff.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3ce3ae3ee515536753acc05f7e83d2c","sha1":"9285872018dc1e88a6b67a1049128dfa7dc1f8ac","sha256":"5005696ffebb46a10d4db47937a6a6152c731b678de38d33cd3fb159a8a83cc8","sha512":"ac1fe2399f49efeb345c9560d45dd67352555e089cdea5ff4cce12aaa5cbcc87946ddb2f9751d1de9b97f44c750486cba4642f03a9795e11f60f5193565304ef","ssdeep":"384:JjIjPUo8HOfXXtaij86dYXviaX0QO+aEeYWWhdNMCHr5w//sjKHqXt58sbu8sUZJ:JjIjPUo8HOfXXtaij86dYXqaX0J+aEeC","tlshash":"498271a53061688b4a9a24bab4d3009cb70335b8ba86704eb5bd48ef9774dc1733537b","size":19229,"data":"","first_seen":"2023-12-09T03:11:28Z","last_seen":"2026-08-01T08:09:40.850548Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","size":2937,"data":"","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-08-04T11:12:15.062937Z","times_seen":5009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/video.fea4f8dfdf17262f23e8.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5141638f09ef5c699a92a6ea985c587","sha1":"77864a1d208c574aedfc562cc1567138e7d6e2ba","sha256":"90e5eb5425876682291c92149bb250f78ffa944f02754f323c6efc79f3c1c17c","sha512":"242f5a16bdabe255bf694a04bed9a09c34269627ae306cb0e5b8b7556090894083de1b15cf8dba2c3afc98b9ffb7d2d8173909648a378bd7230e9408721f0805","ssdeep":"","tlshash":"e4613f1a32d6c86584df489778570618732502ddbe00957df22b99e76ab8e8533fd3f0","size":3324,"data":"","first_seen":"2024-04-11T16:07:54Z","last_seen":"2026-08-02T11:17:54.272209Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-08-04T11:39:57.829229Z","times_seen":201724,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","size":12198,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-04T09:23:13.65511Z","times_seen":74099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-04T10:00:25.300225Z","times_seen":310121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/jquery-js-after","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a5818ce9f36e93d7897f2c6a0df4ef4","sha1":"c4ed08cfbc6f31230644c5ca38f336e88515fb91","sha256":"07a13e4d3fa46c5689432e66df170eecac4a3bbc548ba7cb203df6f76d63927d","sha512":"7214f23a54ab24b93c18a73053e35eec51281ae9317fa055914e9b8c00a480ec65f24da9cac96582a52d55a32ab5cb05152f288b499990bc31fc6b6f18865421","ssdeep":"","tlshash":"9ff0e51de084041446fa603ac4bf7757b40779fae62b00cb94cc5e792a68b744c63885","size":502,"data":"","first_seen":"2025-12-24T08:01:43.007215Z","last_seen":"2026-04-12T07:02:13.314708Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-04T11:25:46.3242Z","times_seen":1003785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7142980e33b09ef0cbfe963900623ec","sha1":"12969622b24ec53053bc563b6f45054469cb9eb0","sha256":"e9cd7d25ceda7ecd5736c66a2625b41b76b44d9a69f2f05e8a89d36aadbbc3bb","sha512":"4430827435a94aeeb525da8a058a5c772e66b84d3430bee847c130f580e19605513ff504e5bff5c21e14a211e9b8b359404bbc712d70b060541632c1ec34eaab","ssdeep":"96:BEsNt0jqf9fzI7tNrf8FDwlCjNVobVDPkqflkxwvT8S2:msNCjw9fMNYFDdN4FPkyXgS2","tlshash":"6aa120d41b90fc6735e135c8a11aa731752fc0337d1ab8c1fa22dced98e8ad187a9931","size":4997,"data":"","first_seen":"2024-04-11T16:07:55Z","last_seen":"2026-08-02T17:43:01.291403Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"046405de007ff73e52d17dab2af75258","sha1":"887cfb8a9de27005875f6e1c1d1ead43bd0865c8","sha256":"533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020","sha512":"280ff860a90ccffbef838f17a64c02abff9a806fd359a8e110e5d3e44b5a4961fd38637e242e431a7593d8ced74946bbf1450b6202341483bf89ab70d07660eb","ssdeep":"768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3","tlshash":"dbb2b3ce7140706386eba1f8519f1a2652336026a20755cdbc3eeec55e68e9532b3f3d","size":25202,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-04T11:12:15.063432Z","times_seen":19197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.18.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c250408d31d7d3b045f217f29e43bec1","sha1":"344b5006c2f0b5a0094641480d86469c4df6aea1","sha256":"04055d9f6cd872709ef5bb10b270e4ab5176abeda27629e52da6569d5727c82b","sha512":"ad1ff685369ed7311cfde23b8eb49d62ba18b980fa63d9eaae32fac85b532a98faf17f936fac17071a06deecb515d21d437ce3b77ced2b61cd621c8b07dbb0c0","ssdeep":"768:/TLX+EVxFm6cKibdndptaQ9HuGJswyV/pkTAQYtDT6HJiwknOsN7KOljuOzQYqER:vtVxFm61ib94Q9HuG2iiwkOsN7KOljuy","tlshash":"a8b2d9063153a87a50cfc16be067420e7b374895740570ed7abc6ceba5b8d9a33ea335","size":25143,"data":"","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-08-01T08:09:40.859138Z","times_seen":839,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/popup.085c1727e36940b18f29.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"420c73d9e6493859095ac908956ea08d","sha1":"c046287c6bef889693b9198d36cdc652d77a17a5","sha256":"7998cb59e94d4d1b084bd52ea24e9b69fdf15b31d7b59a8bca127ddc7143cb4e","sha512":"3591206de1a63e67b277fa9d6588f48f1bc8b8c3098ea6f669185ecf00f6028c8ccf933a5ae385065e56a429c6df613f60bbb32bca6a1b48866b2b8e270bbf84","ssdeep":"","tlshash":"7401d0a030a2b8b604ef409b74c3067c256129f27405a9a279cb84d26eb4e953351775","size":751,"data":"","first_seen":"2023-12-09T03:11:28Z","last_seen":"2026-08-01T08:09:40.85472Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/carousel.9b02b45d7826c1c48f33.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3808e15ab542e31511b19ed2301dd876","sha1":"7a580beaff268a5858a3ab814e42ba45e2e17faa","sha256":"9b7aceac29f49f475dbbd0dc165b2fbed2bd2d60e6e73a94984ab6e701d82ec0","sha512":"4a7364e1174de5b6e2768b7b388b1842ea35bd5324eb0e1a80676dacb5fd8121ebc48e845391a94464a1dfdece8bf1c2752c6453434eee48cc46885a3b69276f","ssdeep":"96:BF/Ipk0gQRVH6lSCnndyjpZZv8mlDfe6csVjzTjHTpgAnlHYc:EpkUdQndWZ5wBEjnjzSXc","tlshash":"75a1c7437043bc2600eb940a7433800097411c89b986b6bf7ce598d6da739a31bbaff4","size":5014,"data":"","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-07-21T03:47:16.537516Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-04T11:26:01.83202Z","times_seen":920005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.18.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ca760b5d56363d1724bd520c0b4a62c","sha1":"3d9f67dbee69c513623a01dd094233f6cb8ecad7","sha256":"4b812fc324c6d53b4894d498952a9c8d6629e52404a357a6ff01dedadc86a032","sha512":"27f17b172b689335f0ee2922cb9e79a83580602940ff4ec356304440a2350f099190d7953b4a9ebde3ab8080e2e8c62d78cf41664c59835b83dd273ef0c219e3","ssdeep":"96:BPmNgP6fnn22dL5MHqRA6ijrl7CKEpre1xN4x4G6Mxbl229AVqeVdaZtl9fjHkzw:xmNgSfn/L5MKbivgvrmKCG6Mxr9AXTar","tlshash":"b6c177d90a589d2b26e039d8b0976b701e3dd0333c19aa81e951eddc59f8fd183d9933","size":5825,"data":"","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-08-01T08:09:40.828983Z","times_seen":838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/toggle.31881477c45ff5cf9d4d.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb1345497a71af655434f8b9c50644ed","sha1":"d1ee24ce2dd30446e0471aa34f7bcf49bf9d3331","sha256":"a1dc64b8a44fd02a82a0e03852c6b3c1168c4ce3ce5b5f37be8371b432442585","sha512":"303f0b97ab1d8b2595c368ca4d614f8b2be9df57328539bac2d1ab85030a4ae92477998d02a44c3502dba70cde9e31ce8382bfbbd1a6667640ad320a2f7d39f6","ssdeep":"","tlshash":"e171b2533285a9394cdf61bab10b962a97023ae9b4019a8834588df37561fc4a76837b","size":3770,"data":"","first_seen":"2024-08-21T10:17:56.60512Z","last_seen":"2026-05-28T20:43:55.144998Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-08-04T11:39:57.847954Z","times_seen":103342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/elementor/css/post-217.css?ver=1752756933","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-217.css?ver=1752756933 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6AyI9UvwZL5of3l5bNtR3WwhPGR1vxfuqik1NORMVG0Fs9PA7saYg3%2FtICjLPT0hu0BY32O4N9I6YZCp55P6uJh7Kv5GmqoX%2FWvA4bSALbGPubRPOSXJCng%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Jul 2025 12:55:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1bcf-63a1f866116c7\"\r\ncf-ray: 9d7b416088d956f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2724)","md5":"900b7dc8c2857aac4daec8cac8ede9f0","sha1":"46682f3b151462282cdccb6af7ca133ecdf45a12","sha256":"8ffdb5d4bd433ca3e8133fe7c52d8b289804e3c4b3f826f1cede1fd32bc17673","sha512":"8769fdf337c0266a9e339b919763428bed4ea6b3042d1fae78a3f0c13bdef003a6255908fb09f952a86994cb6583722da543813b6b411544dfc54624398bceaf","ssdeep":"192:Ef2Nw0OK/VYW/VaUM3F2T352+U2j/ystH74PeT1hBXYSn/YSlpc2pLn2QvCOpICF:EONj/V1/VaUM3sT3Y+U2zystH74PeT1b","tlshash":"02e143437c4b602e722fa21f8453ea8d6a250ccde13936e6e476a057f476d817bd2f05","first_seen":"2026-03-05T18:41:59.038081Z","last_seen":"2026-03-05T21:36:23.916752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.18.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.18.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6QhY0jsWQlzxh1U2AQU8FetM%2Bb6r4NUo8aZVrMm%2FN1vpFsppzq9Xcb0%2BNxFZaSFNURtijxuW0boPhSX45Vi7jmXgi%2FtjS3NcRa4RnpT3hFRWzxYWSqanJA%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:27 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6237-615e09beb2340\"\r\ncf-ray: 9d7b4160b8ff56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25143,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (25099)","md5":"c250408d31d7d3b045f217f29e43bec1","sha1":"344b5006c2f0b5a0094641480d86469c4df6aea1","sha256":"04055d9f6cd872709ef5bb10b270e4ab5176abeda27629e52da6569d5727c82b","sha512":"ad1ff685369ed7311cfde23b8eb49d62ba18b980fa63d9eaae32fac85b532a98faf17f936fac17071a06deecb515d21d437ce3b77ced2b61cd621c8b07dbb0c0","ssdeep":"768:/TLX+EVxFm6cKibdndptaQ9HuGJswyV/pkTAQYtDT6HJiwknOsN7KOljuOzQYqER:vtVxFm61ib94Q9HuG2iiwkOsN7KOljuy","tlshash":"a8b2d9063153a87a50cfc16be067420e7b374895740570ed7abc6ceba5b8d9a33ea335","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-08-01T08:09:40.859138Z","times_seen":839,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/gtranslate/flags/svg/en.svg","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/flags/svg/en.svg HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SHUbPEi8P4RslCrk2kJhJnI%2Bw99Wt4JUOeIL4al%2FqgOLas4L8z4uFWYa%2FiM4VqPn5NJREXe%2BKNjkcV1ofkX%2B6BfSWbMYjptKQ%2FiTtqNyzXI3e3wjNN3xIAs%3D\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 23 Apr 2025 04:56:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:31 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"35e-6336aeb548a00\"\r\ncf-ray: 9d7b416529e756f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-08-04T06:16:09.393849Z","times_seen":13746,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-admin/admin-ajax.php?action=wpitfdc_get_visitor_country","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?action=wpitfdc_get_visitor_country HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oduS7blNkwpYmsOC%2BwFpTJ9gF0hJljm6XnoWnw7GJPBq6lCLm4L2PtiWjarzlY6O2YeK2K2P4kss3bmib8mUJhckGfKQfX7l%2Bd9fKdHuC4BkTVOI05qw978%3D\"}]}\r\npriority: u=3,i=?0\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer-when-downgrade\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self';\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416539e956f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"7fa3b767c460b54a2be4d49030b349c7","sha1":"fd1286353570c5703799ba76999323b7c7447b06","sha256":"9390298f3fb0c5b160498935d79cb139aef28e1c47358b4bbba61862b9c26e59","sha512":"22494af556a0782623729d0b5a9878f80aa6c21a6f51d346771842d613f51073c3b02fab211baff42fb1998f38b77250dc7a1c71dd98b4b00cae9620a6102ad7","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000c00000000000000000003","first_seen":"2023-03-07T16:37:49Z","last_seen":"2026-08-04T09:28:00.526803Z","times_seen":2589,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88RugnW5aiFFba8AWa9TV%2FsdiOBDcKI4WhEGaveFQC2rseDsoCbOxVWHA6kbZVgbRA9tzCuaKUyBBWd1Bfd%2F2%2FW7gn6rrN6PMM87AjGfADRNSOpgA2tkScQ%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:20 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"4d42-615e095e60000\"\r\ncf-ray: 9d7b416098dc56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19778,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19732)","md5":"45f978120a537b249dfac36306ed5471","sha1":"9eebc1e6fe55d9737d0e91bdfa3976b344ea2a09","sha256":"67ac597bed179b5842d996fad80472c6b9514edde408ade8b892161bcf9e9c88","sha512":"3c9c98d0e0ff13c97f91c8caf84f053f40924e680c95d3236759b27fc7f0b677d07232fb28a5b2a1508d17c2e7f248ee8861a5f93d26a01c3792e26079a68e99","ssdeep":"192:Y9877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgIK:j7iNyqEpXk8/aq8uFucbrgIK","tlshash":"c392dbe4e46923c87b32c403e345f64c64d9f921cac49d19faaf850c1ee16a316c6fb8","first_seen":"2024-02-27T00:43:18Z","last_seen":"2026-08-04T11:12:15.088228Z","times_seen":5970,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.26.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.26.0 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9v1rRyvMBm%2Fy2H95qUb%2FJGx%2BAtSTTPGO3E2x4ErSMCjYZ9X0dIGyUNUapit8rdUEqTUQuy2rMQr9m1mVRBF%2BCP8%2F6VkcdHCWIm5ZfuVLMD8691HaW%2BuioW4%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:21 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6760-615e09beb2340\"\r\ncf-ray: 9d7b416098e556f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26464,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26419)","md5":"ab9a5e559ee2a47dd5e5ba6406c54a0b","sha1":"4834312c198271acf5dee151f430181c7e3c1206","sha256":"c5932149cc61662f2c84284931a75fee852c082e3705140cf6f6bd151a0425f0","sha512":"bcefe7c6df1efe9f2500f4d2d3b50455b452acad505f8dbc8488e5701c4c7cec8831626e1cfbd4502d9aa60c7176e35d43b93683792734ad53fa047e4fdce153","ssdeep":"768:xPoScoKTAllwvGQzKNwGz42lvQz0Ahm+PmBMqRI3HtCelEqJUrZgcw:x9w","tlshash":"91c28981be83592b032f613b91e2c61c4fa519c8f2a17699f0f5a00f41d7d4c6bb7b22","first_seen":"2023-12-07T10:58:20Z","last_seen":"2026-08-01T08:09:40.855439Z","times_seen":176,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/gtranslate/js/dwf.js?ver=6.9.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/js/dwf.js?ver=6.9.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeVGagT2WoH5VpiCc%2FNf2ccv5Vt47swhFOO0xuczwty9dC1Uhjw8xY9lDeJfVswHFIJ9aAkAP0LhzLcGxeX2pXTh77S5i9Yp1lWYjXCvcoytooLKQwdUAj8%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 23 Apr 2025 04:56:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:31 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"5179-6336aeb548a00\"\r\ncf-ray: 9d7b4160b8f956f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20857,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"c353d2960c13ee5c55e45e8735b702d3","sha1":"b6354145ca8bc58084361622be0b0c1c3df86458","sha256":"0d64e26d65304fd2b63c6e761b404ba503e3b0d3806bfaa8fcf6bc84bfd88aae","sha512":"677d4266101db5a0fa5f44c943bef71923e3a6d7c7d2aa4cad45cab0a8683d1a809bcbb5da620a1d1af3ceddd394131c1a247467b7da5e4aaa5a10c02834a923","ssdeep":"384:vzCKMPZATN09o0mtYo8XgV8lvSdDswFi2hS4DMbH:vVMhAh060sYo8Xk8lqdpk","tlshash":"5b92f96611f7003e9917036aefbe4b1c60b902774004e920bfaedd829fc199cc677ad8","first_seen":"2025-04-23T03:37:50.359151Z","last_seen":"2026-08-03T21:28:43.246106Z","times_seen":3865,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/It-began-with-a-single-email-promising-easy-profits-and.mp4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/It-began-with-a-single-email-promising-easy-profits-and.mp4 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://globalrefundsolutions.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 35861451\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Jul 2025 05:55:36 GMT\r\netag: \"22333cb-63a7e3dc2ef18\"\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:37 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-range: bytes 0-35861450/35861451\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUlS2wOP%2By5TbpV5V%2F7Zd7or5s8IJqm%2BdCc%2Fj5qfMvmG6IuB17e7c5sKwuDoHqtadCcDT9LL8Zk1YcJ6SyJ2vsafq7Y40h43ZJ8BQnuYgeKT3SXSEdT0J38%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416529e156f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35861451,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"ddadc00cdf7161da802db769579153e8","sha1":"aa3a91e054ba3d08f4745d226dfafe5ce6b8b267","sha256":"d8f900f3091eb8b4f783f63fa5f0a000499041086209b40263c7191a360f6926","sha512":"9fbb23e4beb9d120b4ffa1b90ab72112732cffb2183d0263b8ed3781129bf9556b3d867c50e905ec58e5924e23a4a044ef4b57e405896ca9859d680af67327a5","ssdeep":"24576:3I6UWAcNdGlnJezGeNrRNf6dPR3MZWH6oJx/Qm+M3qE:JUj8aJelhR8dPRpx/Qm+SV","tlshash":"5625018cbf46e84af715e63da090c34de7f9c9c0ca96c28f01454a591d76ec66bbe1b0","first_seen":"2026-03-05T18:41:59.048801Z","last_seen":"2026-03-05T21:36:23.888611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":7111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/toggle.31881477c45ff5cf9d4d.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/toggle.31881477c45ff5cf9d4d.bundle.min.js HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEiqdzbG8HUNZGOG1zVVwvPxlkOmL6px7EdDVjA8iyii3zrhGUC5LS%2FPdsfngtdxR1RCHlQyUeLdhqJco%2BmeNloFBGIXbsdqJYctCUaRYBdcQq%2FUxiDrSOU%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:34 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"eba-615e095e60000\"\r\ncf-ray: 9d7b41691aca56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3770,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3730)","md5":"bb1345497a71af655434f8b9c50644ed","sha1":"d1ee24ce2dd30446e0471aa34f7bcf49bf9d3331","sha256":"a1dc64b8a44fd02a82a0e03852c6b3c1168c4ce3ce5b5f37be8371b432442585","sha512":"303f0b97ab1d8b2595c368ca4d614f8b2be9df57328539bac2d1ab85030a4ae92477998d02a44c3502dba70cde9e31ce8382bfbbd1a6667640ad320a2f7d39f6","ssdeep":"","tlshash":"e171b2533285a9394cdf61bab10b962a97023ae9b4019a8834588df37561fc4a76837b","first_seen":"2024-08-21T10:17:56.60512Z","last_seen":"2026-05-28T20:43:55.144998Z","times_seen":12,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-lite.min.css?ver=3.20.4 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e9LWPeG2P098tTe1Z9kn4tXxwD%2FhPRlhKA%2Fnzh9fNKhTLDkxQfbdb0k7Ka6wq98UIOybRJjtLffoOSw0pbcbtLYn1Xn%2B1YlqcMl9aNzT0iHaojwD0Z04XV4%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1cf66-615e094b4d300\"\r\ncf-ray: 9d7b416078cc56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118630,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65496)","md5":"e7b3512944e802f908dcea26ecdbcb2a","sha1":"5697f1e541d164167723c70edcb8cf502422dd42","sha256":"c2d6f7887faa117b9a1d78bfbea654941d7bac904643700580f5554061fdeba6","sha512":"f23b3d4b2c24ba21e98ca4e9f3ba793f51b93ddc3a3e5abbe3c08b9aef692f63c287495fe991cefb0d6353a759e1c2ec1deda1dd25747849f8c58ec4038b0f82","ssdeep":"768:9GnP5Kb3tgnl6T5sZQ8tQfJjCqn/0ginSla6T8L47YwbuXh7+:9GTtQxWqn/snSla6T8L47YwbuXhS","tlshash":"d5c353923d07622a662f5e3f4a87769c53a445c1da437ad6f442c413d2feee1372a823","first_seen":"2024-04-11T16:07:58Z","last_seen":"2026-08-02T17:43:01.28349Z","times_seen":274,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/elementor/css/post-8.css?ver=1771415498","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1771415498 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDx%2B836rscSlMoDT%2FvwPDdrZMXnShhx0sdmFnIKO%2F7MX8zPzO4qS7vQTjqbDkf5mJmKW7d6fxRmJXw85JYYi1HhCWLTeGN0mlf9qqA36jkP6C9OE6ua%2F3Tg%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Feb 2026 11:51:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"f213-64b17cf85fe2f\"\r\ncf-ray: 9d7b416078d256f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61971,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (61876)","md5":"51f8fee3a571b7e17da8b1234e95c611","sha1":"5ff52312cf6453dd4568ace1909d04e38de7ab09","sha256":"2256794dd5e5bcd0df51127780e0fbe32ce88b668e2b9b2fbc582b7ba0dbffc9","sha512":"843335bf30b2dd56b2fc9e80dd811cfd4f69dfbf96ef01f9056e9ebb74b94af71d8912bf59def4781238adc84ab0fe5b55d224534cdee33cdc82a0a63f98fcb1","ssdeep":"1536:38UYY5sieJhjRxswmPDqPTqaCzb6jIVM2Qp4tEAWbfpAJL+l8G:MxYH4NLsFPDqPTqaCzb6jIVM2Qp4tEAM","tlshash":"b65376507d03926cb12f585f4153b69c34248ccee67e3ad6f9216933f4bacd1b3a1a86","first_seen":"2026-03-05T18:41:59.056694Z","last_seen":"2026-03-05T21:36:23.957648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8%2B%2F1YTUhlcuIChCThmyB%2B3sq7zO80xUS95PpyXm%2FqTjRB1cyUZ6O8wAbosI8HEEbvo0YVNbkhWvxdJavLde7bwB9Ldvh3b63KSTFQ0y5J5en25ZWOIGi%2B4%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:21 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"119f8-615e096230900\"\r\ncf-ray: 9d7b416098e056f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72184,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aae648ec410260f859ac89e58a8372c1","sha1":"f7320458aadcbaa2ed94c43c8d7ddb9361d0b106","sha256":"d417b6ed49cb6ae3dfe2b0bab5d865472052cd0286a9478c74cbb09a02a56d0d","sha512":"88c7cfdc35aa5e4ecbd8023b966758f30aa7d1f5367820a1443922988c06a4a5a96fc500fab19985a090cbc85c9e2e5db63470e50fbc93f5596fee59346c3b73","ssdeep":"768:0bUiiiukQWIsjoQCSsncTpsTO3DNnYGmLN0yPburmvXnH4:0giii1IohCSicdsa3DNnYGeZPK4XY","tlshash":"d963dcfee1ff10944311e4812643e2e4f329b66cec8a4c98d2a67d9df1c165ca186bdd","first_seen":"2024-05-17T06:44:22Z","last_seen":"2026-08-04T10:37:38.673114Z","times_seen":36840,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.20.4 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hk56neHXMV9XP8j9i%2BczJXsx3DI4efoFdKA16ej1E2OBws3a19oGMxXTO6l9Zs38YFSSWJkRcswkKsUwaJCu0666gdNJAXJPVRMFDeDgrVKv2qKWDy5tO5c%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:22 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"4824-615e095e60000\"\r\ncf-ray: 9d7b416098e856f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18468,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10019)","md5":"4601ba55044413706c2022cb6c1c3d05","sha1":"5103ec2fbb389568ebf5cfe4fd721f3df2ff7aec","sha256":"fe513ef974b767510d0a2b9f1b4d3afa53185b89ab617c869e5e3d6db960192c","sha512":"8dab2d19378e34b40043621aac57b418e56486dcfebd1a5991be8a02ee6b071d07ec6bfd9408dea8ff0198995de9d42a46e66513d68b40b68056707e4e691e01","ssdeep":"384:FKJ30sBCwYe4oHjDl5fyLrHNck7Ige24YS5bqvcVV+:FKJ30sBCwYocYlm","tlshash":"c58269c9ee12104902a70373caca5e68c9388ec764325cfe7366544f0a51add73eba77","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-04T11:12:15.079488Z","times_seen":43090,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.20.4 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSY%2BB2MpZPYe1vbZ41JWrFt46YEmFlNF08Ewsck0kkOEUQ1Laq9ZRqxs3PcojCZO7ppE9967Sjl%2FxwnG%2B%2FjIu4qi0QLuMFcJ3LCFTVZruMNoZQoqZK4XPKA%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:27 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"eb08-615e095a8f700\"\r\ncf-ray: 9d7b4160b8fc56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60168,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60127)","md5":"9ab27c3944d1b7a2f38acb3cd2eb2a1c","sha1":"feb035a4968aa5fecd5e9330f0c2245af70d5508","sha256":"5136c390dea33157d3e840de48a795af049fad0beff26ed012984e7b6d9dc8cc","sha512":"3f7b537d53163c8fb19e84f084e8156a6ac8393673b0245c6fa2b6f96ba8de34a553df844b5d306092242110d4193f2b16d67132c6577817f64c45e15c0130b4","ssdeep":"1536:neAjA679C+QRCHXC4WHqMPB8Vx8WXwCDFYNIekHeBHmjkfzRNE4cR8+Sxp6xID1x:Xd97W/Clkbx","tlshash":"9b43eb863251b4e70bef40eb602b450af32319e4740eb5987ab8ddf66470d5a237b739","first_seen":"2024-04-11T16:07:56Z","last_seen":"2026-08-02T17:43:01.392962Z","times_seen":359,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/newyork.png","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/newyork.png HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1246\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Apr 2024 07:26:48 GMT\r\netag: \"4de-615e131d2fe00\"\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:28 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UW8Ox9YWqP5Wkh3HhXMoSEkVcKp%2F4%2FikFWXC5txmdUR4XET%2BpNwpoXeHCLxV0UvEWk3qJrwburhf8zh%2FWqZZTD21y8gkdvTBD6maZIBX4iqwFXojgQ4B0kk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416529e456f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 257 x 28, 8-bit colormap, non-interlaced","md5":"0ac4d985deb50f1d7420fb893d3f239f","sha1":"d3d92bed610f3b0633d9ece34a1fc16cef87f1b1","sha256":"3db273716cdfb2b7fcb5b401b6ecbc8092bba461005fe0a28fb74cb719455931","sha512":"cb50c1128f5fddae7725c73a7c7e24668d74aa150bc881180dbb5baf808237be3643449b95fc5fdb657a7ff26d4b805edeb8040a2c8168ebe639e28646092521","ssdeep":"","tlshash":"932151b3e2086cfc89253915306fabfc8aa7c4aec336e216cc5505d9784d189dd7412c","first_seen":"2026-03-05T18:41:59.061653Z","last_seen":"2026-03-05T21:36:23.961974Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T18:41:31.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://globalrefundsolutions.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://globalrefundsolutions.com/wp-json/wp/v2/pages/8\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://globalrefundsolutions.com/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhJrGxU2Qmf0Ci9cnyb%2FSvb1yiGO8TuB%2Bb%2B%2BGDVkfH3OhM3Q5FDhuFwWNtoF6Vfc983z2MAO0JuFlSrRKX79CoKJ7Yt1JO5mwMn%2Fzhm%2BUDoC3voz7vbRgaE%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d7b415e1c77ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"W3 Total Cache","description":"W3 Total Cache (W3TC) improves the SEO and increases website performance and reducing load times by leveraging features like content delivery network (CDN) integration and the latest best practices.","website":"https://www.w3-edge.com/wordpress-plugins/w3-total-cache","common_platform_enumeration":"","icon":"W3 Total Cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.20.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174837,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"41e6e2cb6cdb1fce3b37b4d37c32c013","sha1":"7d42fd87fcf28b973ecbcb997f33745bb23654ed","sha256":"cb33465ce7d6ce57fb89da129c339ebf721ecdc2f3c9a644ec57a8b4a2f8e002","sha512":"f4d89598941729578055f973213586fff256bd9a0f85f0d2da1ec9391c825a0ab6edf930f13e2bde17dd9516d8ce62321e760354e4fe4108cf98c1faba6520d6","ssdeep":"3072:hrCccnDDvJEwJ+YYhGgaSXWRCzWohkPhpGxDnPo7TTH:YDDvJEwJ+HhGgaSXWRV","tlshash":"0d04a3a17c4b143a215f03cf90137a0c60dbeef9ee91dae5f5b74124a2b0d9077a75a2","first_seen":"2026-03-05T18:41:59.063717Z","last_seen":"2026-03-05T18:41:59.063717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":61,"dns":9,"connect":8,"send":0,"wait":158,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/elementor/css/post-1088.css?ver=1752840063","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-1088.css?ver=1752840063 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSEBuinRkLyKT0dBxY6%2BI4nBrcRwPMUgFAzKSCFgORsmUhgaoEVC3bUEl4GXkmKWus3Wroc%2FLwsINbwu9bwBDhZRV2OpISL17QD24xoXshblklrCmkxixSY%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 18 Jul 2025 12:01:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:17 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1d29-63a32e151a041\"\r\ncf-ray: 9d7b416078d356f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7465,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2758)","md5":"20c748bfd3e26af72743ec997aa9e0cb","sha1":"1c16d0b9ec89a4c960ce1cc3940feaad7ae74668","sha256":"f99b91b7cbe47d115be0c57c8ad8ce7cafc313e86d1017e97fa300e4c3dd8652","sha512":"3c33fe7a1e7dc409916a2f73afaa481f32ee7a2a7d12a949ffa617d88214cf301477b63b93d05c8cc2a171cbc4357b39c31967c1ec55411bac17d2f46f28988c","ssdeep":"192:dq0Ob40b52bqPbOIk6pCdM1vHzDHeHTZRJCAzbCAaJn1Q6L03q60Z:v0WqPbXk6pb1/zT0TZRJCAzbCAmn1T","tlshash":"54f18b45bdd3502eb22fa06f4053a6ad2ba4ccce967d3ad6f4245033b4b6d01b3e1e85","first_seen":"2026-03-05T18:41:59.065825Z","last_seen":"2026-03-05T21:36:23.950875Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.18.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.18.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dB6ifSSb3hZcind%2FFx%2FX%2FP8xxfpYl5oFTJvokvMCAgYw9fnsdVQqqOj7LoM7UUS8%2BdE45RIut1eyRhU5iMTB3iQnr6hvXe7tcMl%2BJiUirrtR6UYepwiT%2FMg%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:27 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"16c1-615e09c282c40\"\r\ncf-ray: 9d7b4160b8fa56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5825,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5781)","md5":"2ca760b5d56363d1724bd520c0b4a62c","sha1":"3d9f67dbee69c513623a01dd094233f6cb8ecad7","sha256":"4b812fc324c6d53b4894d498952a9c8d6629e52404a357a6ff01dedadc86a032","sha512":"27f17b172b689335f0ee2922cb9e79a83580602940ff4ec356304440a2350f099190d7953b4a9ebde3ab8080e2e8c62d78cf41664c59835b83dd273ef0c219e3","ssdeep":"96:BPmNgP6fnn22dL5MHqRA6ijrl7CKEpre1xN4x4G6Mxbl229AVqeVdaZtl9fjHkzw:xmNgSfn/L5MKbivgvrmKCG6Mxr9AXTar","tlshash":"b6c177d90a589d2b26e039d8b0976b701e3dd0333c19aa81e951eddc59f8fd183d9933","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-08-01T08:09:40.828983Z","times_seen":838,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xe2v7a36hHoyQogZ8bscurqO1FDpZiWYElcaXPYm5GawTHR220NwH1zTGFU6FNRUPebSQ4ZxXN2C9sHOajwdegiJaYrGfdN6ZiEcmRp2zu2munvsyqlYczo%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 11 Aug 2023 23:48:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:27 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1590-602ae594c4680\"\r\ncf-ray: 9d7b4160b8f856f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-08-04T11:39:57.829229Z","times_seen":201724,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/themes/hello-elementor/theme.min.css?ver=3.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/theme.min.css?ver=3.0.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSwBrEz4boq3aWERv5xK8x%2Bma9SnLJoEMVQOmglvpbki7S2aLWmxnFDKZsBc9HI615zUPeYxaTda4OBgNBnK2%2B%2FL5Ld4RfKVXP0anMLcUithJm4oHCyX714%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:19 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"140b-615e093375ac0\"\r\ncf-ray: 9d7b416088d656f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5131,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5127), with no line terminators","md5":"08fae0e9f8ce7e1cc244d6957a0fc71c","sha1":"958fbf4f8b318e39612dd25eefae43c006769883","sha256":"30c2e510f9fac929eeab0ea915d80904a4e72b22eb8612dd8c83c7dfb71862e0","sha512":"e8f69bb51f6caf9ab132b1be8f6ee3248c80dd74e47823c17ce4c1a14b289bdb2c2ac19035309724e3f8f53a2647b3204f8dc83ae85081e9069275fcac7ae4e3","ssdeep":"96:5ElyBGxT+vAeTzwKbFudzJGW3tCgcMNl3MNM1MNIXMNd8MN7zMNbKD:5ZBGmTNbch8KCgR5A","tlshash":"76b1757ef8d1307c593f9b06fac65b8d2068871ad3530ae9eb99db1a819e710781334d","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-08-04T11:12:15.069216Z","times_seen":4903,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/yahoo-svg.png","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/yahoo-svg.png HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 964\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Apr 2024 07:26:47 GMT\r\netag: \"3c4-615e131c3bbc0\"\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:28 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jz85G%2FPgzKOgR7VFJBqziXWfbjhxZoUfMoMmFBgHaXqWgfQ2E%2FpFZthV2ebm4T%2Fh7PAQ9Y%2BBHYQxYzAT%2BzqQbKlaWpaY%2BQL0RGbSeIuutrt8kDVqrbATPIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416098eb56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 32, 8-bit colormap, non-interlaced","md5":"021e73760d2aaf89b18e1e1a8a5a2353","sha1":"fd73b6663548166507909577dad762d52cd95517","sha256":"95d7a7f5d4c22dc313904db3af3af52dc0d5f9827281695db5b6b4569c2fd656","sha512":"eb0ae2a176e82a6f7a3aff5620957fd5da0fbc1cdd4dd1e9dab59d710756ffb7678b49ef201d9360d2535f63b62414224160a960cf3774177206f5b871819d92","ssdeep":"","tlshash":"981144c7ea7244bc174069b1645fadf468a5e627c3a1691a2d7f476020898d0cbb3f3d","first_seen":"2026-03-05T18:41:59.070455Z","last_seen":"2026-03-05T21:36:23.919232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Manrope%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.9.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Manrope%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.9.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://globalrefundsolutions.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 05 Mar 2026 18:41:32 GMT\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115772,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4b4687b31a10bce3917431d01949aaf5","sha1":"4f23b3a2ef31ace95fb1891a606b82e0c91043e0","sha256":"13f8149b67e4ee7d6de30e14168ba8c2c54b44769cde88430468ed53181a8462","sha512":"724b5eabedc0d28965cf6b42d99b34ea55b2354c4aaf2b984b15e3208fef6a5117f3ef0105a6a25c1f58744dd4609ec4f5bc5121554815bf2fd965ef0781413e","ssdeep":"768:xDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:5ZQDSVUvWtALyl83uRf","tlshash":"edb30e91041b5440ab834ce233cebe35fe1f92517141d0b9abfc9babaddbc62526835d","first_seen":"2026-02-23T04:33:33.054144Z","last_seen":"2026-07-11T15:51:22.999941Z","times_seen":10,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":159,"dns":2,"connect":7,"send":0,"wait":22,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/css/intlTelInput.min.css?ver=6.9.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/css/intlTelInput.min.css?ver=6.9.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xoEEPIKqNHzJTxH2mHhXYRjcgtmT8nzaiKqTqgQYv6n%2BRJ7yYKyf0r8EtO3YSzu%2FRRrbf6G4zP4X2NV3jhthjOrGySQ%2FTsz92%2BRYY%2BY4UaRsi264ppyPhWg%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 13 Apr 2024 06:37:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:15 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"4ad5-615f49ef00ec0\"\r\ncf-ray: 9d7b416078ca56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19157), with no line terminators","md5":"6b7fb2ee130535419a67afb198f41c2b","sha1":"ffb8a25633c4ddeab81d1b1742ac2fd0b442a4c6","sha256":"c6956e8710cf477f7014440385ae16ee4b8cc7ecfd02fddd4d2f0c6c7fd15845","sha512":"cb27bfbb47a142cad5adf49de9b893d7bb77f5183d90d73ebc435c09766e333d9af8b5851af5d49d8b96516ea96df623d637016ff0b7f54670d9c890bf00c3be","ssdeep":"192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSc:6wRWXhK6jU+4vTixaACaglSc","tlshash":"8f821f1709a32429f627d5a261708eb637278c0bf4264fba49153e7ca3825d51df3fe2","first_seen":"2023-04-05T15:48:42Z","last_seen":"2026-08-04T08:02:24.94455Z","times_seen":19797,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/elementor/css/global.css?ver=1752756933","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/global.css?ver=1752756933 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wYGtQ%2B6QYF8TyPGB%2FiU7oz%2B4pJDEND5rlh%2BjcSUeDPtMBjCoBW2Aur5UX3aShEc7x%2F4tQZptJYVpiICMd%2B6Tbj5SNa7tWqCoLpDRwgInl%2BKOnmpGjkZKtyw%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Jul 2025 12:55:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:16 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"ba3b-63a1f86604ba8\"\r\ncf-ray: 9d7b416078d156f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47675,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15296)","md5":"af09649c9e809844d9da7522212f9c29","sha1":"a42f2730a30e8954a3759707a35873d8f183f8e9","sha256":"404d8e5b06becb10e882d0271606e6c1d4e27b2abe68747e05977885ac8587ff","sha512":"ba6e276c9615c8ebca9dea178d9ea6095f2124a2c4edb083f31ae27bb5ea802f57ba550484d674681b9f92af77ed0fb0c3e85b6ee34d79a00e9b0bcf97899719","ssdeep":"192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6It0eyBrrYjBcD0NS6H0S6MSH6HW:QqRD5x7F2OUpdo","tlshash":"9c2317887827d126f877046f758ff47c181ca4de5c4acae7f45c821689fbf2aa368614","first_seen":"2026-03-05T18:41:59.073936Z","last_seen":"2026-03-05T21:36:23.924548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/elementor/css/post-1120.css?ver=1752839927","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-1120.css?ver=1752839927 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14E%2BibMEOCPdO0%2BXjGZw50UAv1jDaX%2BGypxq4hNlKPEXq5B%2FiBOfw5jVWSLh3LtmzebwxVTlkN3%2FdUJH34UwyKNB%2B6HLTogQZAMjiAnDUlGQinlPWrsKZYo%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 18 Jul 2025 11:58:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"3977-63a32d93f4e95\"\r\ncf-ray: 9d7b416088d456f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14711,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14711), with no line terminators","md5":"3cce4fbac3445d0381102ffcd172ac4e","sha1":"fb2c269a8bc390a14c337d323d78153f27939142","sha256":"a6604ed4e1176f2241c56487e1197c1dfc6920d28e613313b47ad2e0af62fbba","sha512":"c58cbf8f2b313176cd3d3d6f65bef721ce31ce138746784a977d3ad4a892fa1bb55d001c7c3d7ca40497f8695570287ab61f199ed0b5efc303d73462103ee1fa","ssdeep":"192:LL0Cxi+TDmxFuFOOq18UxkVwioOViGzZWo5x0OpOhqlJTu7gOP041Oi53+y:zi+nJy89Z8qlJTu7784135uy","tlshash":"ad6225b17e93d25a727f201f1063698c34688ccee5be7ae2f451020bf5b6d9637e0964","first_seen":"2026-03-05T18:41:59.075921Z","last_seen":"2026-03-05T21:36:23.907074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JcHpsCXTHsF%2FQPBbJ8%2FClY80jksQkIioJoPd1USj8AJIXawTyzmyitvaxTYAr8xtjC1CEVDvgWAUMFcMRJWhICZqy4JCFmOZnzrtl0TeVuzB8rX3SLU13kk%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:21 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"2d7-615e096230900\"\r\ncf-ray: 9d7b416098e156f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (307)","md5":"8d37441d69ebc9b55dff2c7c214ef997","sha1":"9a292c8559131ea8838899863987ffdcfb4005ea","sha256":"93cf6e96459e42f9f656e03ec4800578dc2c021dcde475c9e5e891a7780b0866","sha512":"25e4e29eadc6a9c8b81b8e000726d8a9eea9d3378ca6faa641d5b9dcb64039ba97904fd0b2bf50a8303b7cd1194d08c80641025a635f8c3fd2ebd9217f824704","ssdeep":"","tlshash":"a201247d81022a504a8008152adabf689e99b0a6785c6f7572329c2eccf4e5961a9f0d","first_seen":"2023-04-09T05:14:34Z","last_seen":"2026-08-04T10:37:38.700461Z","times_seen":36610,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/Candice.jpg","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/Candice.jpg HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14314\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Apr 2024 11:03:47 GMT\r\netag: \"37ea-615e439d12ac0\"\r\ncache-control: max-age=31536000\r\nexpires: Tue, 02 Mar 2027 16:20:10 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 265897\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5%2BjeLoBSsFoU2BrrXXtLwLqqsYQ54YXEKEPncOpV4RaWOqMTZouC8BkOMhXD%2FcE0npRMHkZE3k1BnjaQHUZ0KZuu7mhJVvLUE5t0YuQwOohmUNg61%2FjQ%2Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b4160a8f356f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 400x400, components 3","md5":"92eb5a0a53e1dd8e7a2b4b104d31804a","sha1":"adf3ea88a0457078f618291f46928e3898b18e2f","sha256":"25c9a0fb046208c967c01be5daecb6abdcd20c8e5e482c7f52dcd914dcf0d617","sha512":"e19c8302b10f05bd69795ff3f210528cf4cd017db21c4dded4fe1252db4618f215b3baa8bcc96fa7a09f453cd80f033a65c07586573a02a2482b6f3b9a455750","ssdeep":"384:YBhKVwjnSjTX+0H5hRRoTyoHeAXR2LJyAgU8:Yf3rSjTuqRoOce6QgU8","tlshash":"3152bfeec714952808f7df6708ae28e6f953157340361f83eea2598cf302cf9614c985","first_seen":"2026-03-05T18:41:59.079216Z","last_seen":"2026-03-05T21:36:23.930676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.3.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.3.0 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fq9ShlvmazthaN39CVpsHkeJYQeIdpegEKvRawgr%2FS1%2BwphrtA5UXb4iA7FjTj0wJHlt9FjJY%2BMKa80VcenZafTtlz7vWvruuhtl7drsO3DZBzGEhvIBL0o%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 22 Apr 2025 11:15:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:15 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"308-6335c186bf500\"\r\ncf-ray: 9d7b416078cb56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-08-04T11:12:15.069742Z","times_seen":40079,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enMIAFUt9v2XhhKKd9du8B6d0GqJjIdd8N6cGihDHX%2FT1lvL90sAZ2VFVFX8ZvGGr9owT7Ej0LdGCmGzfcJlalCyFjfigtDZlEv6Hb96jWRGF3We%2FUmJ7Es%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:21 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"13ac-615e094b4d300\"\r\ncf-ray: 9d7b416098dd56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5036,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4996)","md5":"87131b71a91fa39bb24a44dfa6e53b56","sha1":"82a60584ad358c3d3f31a9f6033e719872613c1f","sha256":"5acd09db89550e2d0872d31d5e6cda14d7ff2f71a659c4f92366be4a83260a07","sha512":"c759762e10a8b097f316233bd3b1f019665f76fa143d229ea6c7edcb7cac704bea9a7c6e5090407e07b8fb705737e86127088ae5d16f304369c4940a2f461505","ssdeep":"48:BcUOgAozmcb8slNf3U7vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eovCD:B+oz/8mU7jfQL7aFu2if3Jf9Hg","tlshash":"d1a17754be4f958a321f002a0993f709d01912c5dc8c6f78f856b16e59b7fa43a73eb2","first_seen":"2025-10-10T00:41:01.939548Z","last_seen":"2026-05-09T18:47:29.748901Z","times_seen":9,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tzhilqvBzncAjZQvxa4%2Bs0%2F215ANVVPmUrLZd6BsG%2FMOmFeFw5YHKhvkc2qSO5ObQrWVmcLA%2BlvKaUJelisXsiDiN1i6ARa7NfzycSXG4V4x5yVNMPa%2BQJc%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:21 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"2dc-615e096230900\"\r\ncf-ray: 9d7b416098df56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (312)","md5":"1f1c6abbb54c6d189b7263e0861fae8a","sha1":"6bc092e1e58b2fa6364bc17b02443ade0c6d32f1","sha256":"5009a34e30063ffb89185274681b359ae8c7dac19a606d5b1456ee3524cbc9b0","sha512":"7dd9accf0a69d2a89009443de17d6f09c3ca55e62fe9c7c4d3f12f89354b11559d83436fbc4befc8618ccbe0fe46fea657743d758e543b79a3d039ce36852b33","ssdeep":"","tlshash":"8f0164b0810510048a40091a2bdfbf28ae09a245781daea572239c1edcf4e4d61faf0d","first_seen":"2023-04-10T17:28:04Z","last_seen":"2026-08-04T10:37:38.677794Z","times_seen":36462,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/css/widget-mega-menu.min.css?ver=3.26.2","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-mega-menu.min.css?ver=3.26.2 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EryFKqQ3XGnX5KV8zIj3OKhyV2uYjOMt0A%2BqiXZFPHARMWpeGwhjQyc4aDsqhI0XYMskqd2n41hgRdrxEj%2F6qY80ZnQRF5GxJdMJLAV9ktECxuVV2DbACkw%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:21 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"47c8-615e09beb2340\"\r\ncf-ray: 9d7b416098e356f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18376,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18332)","md5":"ff5d9b369ec85696286352e4cb38deda","sha1":"abce26e21bfed76591886cc818f9291082638b8d","sha256":"136f8d2020652db8ac693af1b84cd9898872f0998f33ec3d5594b21d55a93737","sha512":"52789f28da529060f1d55b784560ca0b88840a9b724eb81f7bfd4d91a7ad7fab7d211d8587451f3d15dd7e1a1134e0cd92244b4ec2a095d3dae39b0e0a73e234","ssdeep":"192:EMWNG+jfq/QShnAULe5KqCVWCyChfsyO+Lbt1h1PkQk6r0UIJB4P:ElGKfq/5pA6VxhdZ/Dh1876r0hJK","tlshash":"8582dbc078d3c021162faa5903daed2da7797890dbc948d4ac7585065deffe3a2d0b36","first_seen":"2025-03-15T05:49:23.047318Z","last_seen":"2026-07-18T17:11:57.326683Z","times_seen":33,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7fHdNa8FoZbeKAFcnStv%2BMa7O1QkGU5EVpWGdPj1tooCOMZntMMlnwk6P0Sv66pCl%2FnVnsN%2BkB43Q71FcjrUdjGeVgVpw5qhZ2gVJG2jD%2BkwsHhERCQbss%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 03 Dec 2025 03:22:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:27 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"161d-64503baaaca69\"\r\ncf-ray: 9d7b4160b8fd56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-04T09:49:45.856014Z","times_seen":203533,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1EuPm9B6A0N2pC36pNzb5mBwqOWLt4ccA8uyAJbTHhSl%2FN74kvS0LRUVhw09%2B0CEtBssd8BGmZNSwl%2FWHIjEdH3Nlkja8%2BR%2FdakUwRpNRlWzEudl48OSN4%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:50 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"2fa6-615e0969d1b00\"\r\ncf-ray: 9d7b4160b90056f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12198,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (12198), with no line terminators","md5":"3819c3569da71daec283a75483735f7e","sha1":"ecd40a5cc6f0b76200c454ca880210dc301cfab8","sha256":"214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0","sha512":"2710655dff46653daeb3a6e3f6d36f885e51d5b375738ee353aca40c6f66ae1a7dece57039d58747012ed9ea2822191143c06f270123b8cc580f6a41b8e8aef4","ssdeep":"192:GngaW9ELBD26z861V/CvJiVKIsvfT+6EdpEsBpP9Qwo7Q4a99RfuzqXppc4mmm9t:Ggz9kBD26861V/wsVKIsvTEdpEsnmwoz","tlshash":"994221493e0724222faf41f9fc1b468a632b013894c584bbb8e4d5dd18f19296f77b78","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-04T09:23:13.65511Z","times_seen":74099,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globalrefundsolutions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 09:20:04 GMT\r\nexpires: Fri, 05 Mar 2027 09:20:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 33688\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T10:16:25.560641Z","times_seen":36818,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":68,"dns":1,"connect":10,"send":0,"wait":10,"receive":5,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BsVcfS0YQlYg4%2B3q5AhRm%2B3yP%2B9HbbrSGLNAEbVLshgJ%2Fm3vsafUOzok7WylmcLn%2BMBM2OB96NNXNA9KklH2tVx0wzDV5ylQ0SYOfmw9mA8K1bEfkXkQc8%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:50 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"550-615e095e60000\"\r\ncf-ray: 9d7b41667a2156f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (1320)","md5":"9711c24efebf473b41a7f155ee2f0744","sha1":"dd4c84e59b8029a6aab2a393c77ed47aa493bf88","sha256":"ce7e0647d9420928cc3d294f452c4d94516baef58bba12b02103d01ad4242152","sha512":"551ec625b6335a7e26fcbc8d3215ab2847f81f5677442c6bbab51c530870fd18f86baee9f185fcdf615cef9ecd1177160e92ed108c94074b35b00b717263c8f5","ssdeep":"","tlshash":"9f2142f370a39c9e49cf248b34221d17f1570c98b8c9901ef9aa08df3472e893362234","first_seen":"2024-04-11T16:07:56Z","last_seen":"2026-08-02T17:43:01.268385Z","times_seen":280,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.18.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/frontend-lite.min.css?ver=3.18.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtn26zSiw6InUy5V%2FAlOTlWRr%2FfzJsDtnf5Lj9qHmYlrixFnZRfTtBYVjE2i5Ordhtgy3qnlVRJ1I0w8Axa9iyohmlV8499jcpC5HA%2Bgtpq5qgQVCNT2u3s%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Thu, 04 Mar 2027 05:06:43 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\nage: 135288\r\ncf-cache-status: HIT\r\netag: W/\"2b2d-615e09bae1a40\"\r\ncf-ray: 9d7b416078d056f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11009)","md5":"ef8b5276b50c065cffaa64af108096cf","sha1":"9f6cdf8083c6d391b88fed6796c04983126189ae","sha256":"60afa9c27db666400527f22830801ef3729f5d5b87f7b5067f83440ff2496bf4","sha512":"000eeb9851992fee4cb7bc0bea12b940677fc429a5003d4182f43c1bb38598cd9ee25821041b0eee6762d0a659ab2ee5158ad795ea4a97ed33ebf53b87309b9e","ssdeep":"192:ilCUn8qrIuqxIZqJIrqYqP3qYIYIP3IHq8qL3q/I8IL3IuqL3IL+q8IXqFqDqeq4:hpkSy","tlshash":"9f325b26bd0b485c53bf51b7908b269c0a09dacae1611cbdfb60650f41f4e89f3b9627","first_seen":"2023-12-07T10:58:20Z","last_seen":"2026-08-01T08:09:40.858374Z","times_seen":320,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0XBtgeJvV9xiv0qJhLwDJ%2FPPWMxLRt2HMdshUrwHqpmSlno9VDmKWCGQJDOgJEiEuEhX16qRAGcblQGYrjJHKOb4rgkmzVW8nNUBlcSclsHUfz2MqvdQWk%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Mon, 28 Aug 2023 22:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:22 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"15601-604036f996200\"\r\ncf-ray: 9d7b416098e656f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-04T11:25:46.3242Z","times_seen":1003785,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/Mary__P.jpg","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/Mary__P.jpg HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3096\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Apr 2024 11:02:25 GMT\r\netag: \"c18-615e434edf240\"\r\ncache-control: max-age=31536000\r\nexpires: Tue, 02 Mar 2027 16:49:55 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 265897\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFcxEFLVoMcBhi1GnDPpvOkhiNq8nM6YoMT0ZCqpLKDdZUr6A%2BZzlxgmibGMbsRmRFFjrTWV7t99L2zqFhCTQ4FiIgb1Z%2BYIpR5BGGQy6a1qiWOMW53weFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b4160a8f156f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3096,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3","md5":"5d35fd9620f91a6e613464d44ea52d17","sha1":"1ab2623ef479ba887cd3fd961b2197f13b33f855","sha256":"067b738b988d8c641f0a827cdc95fd0379966bb363616c300889e8c65d88ecf9","sha512":"c5c16238dc183d6cec7706f6f6f246d8fce140e8f4296a7b0124e4974082375c03c345307d4285da650fd3da0a1b52fb24c911f469808e3d0a3a8bc97dff06a1","ssdeep":"","tlshash":"8a513df9432262d95c1327f551ad50fef0da599370b46f3331288fe5d9104e8d195abc","first_seen":"2026-03-05T18:41:59.091663Z","last_seen":"2026-03-05T21:36:23.947868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.0.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FcnSVPLGR7lQI9%2BjUC%2F9csn5UUJDuu9oTCvo6pASv29ZkBPhJRgEkj6dupJuuQFkdD3BA3LySOpbgOJIrobDU3PxjyfhDzbke2kDgZ9tLhF8NBiF6qA3EMU%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:45:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6272-615e09c653540\"\r\ncf-ray: 9d7b4160b8f756f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25202,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (25115)","md5":"046405de007ff73e52d17dab2af75258","sha1":"887cfb8a9de27005875f6e1c1d1ead43bd0865c8","sha256":"533e264cc615ee4601da8d2c1dee4a8987319e53d4d7162272f067fbbf250020","sha512":"280ff860a90ccffbef838f17a64c02abff9a806fd359a8e110e5d3e44b5a4961fd38637e242e431a7593d8ced74946bbf1450b6202341483bf89ab70d07660eb","ssdeep":"768:e44yLMNvgnDwYB+IlnHB9/bNlJyI3G7OaXiQx9kpETpUwnOQdZMvUtVo0uKHp+3:Ir6pyYG7OH2pHZMvUtzO3","tlshash":"dbb2b3ce7140706386eba1f8519f1a2652336026a20755cdbc3eeec55e68e9532b3f3d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-04T11:12:15.063432Z","times_seen":19197,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/css/widget-carousel.min.css","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-carousel.min.css HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aW0VP5o7wpK%2B0zjHvG6gLBed%2B66fMjC%2B4ArUPY%2Fcr387pp7aTfmkIfHCaJxk%2BhLG%2B5Wad1ia0sC6Tunu9Hvh0p1VbYrDxQu7Th%2F2eNVEXIC3HEnTU1yNq9M%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"7ef6-615e09beb2340\"\r\ncf-ray: 9d7b416098ef56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32502,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32458)","md5":"173e4689ac29d0521155be68ee602750","sha1":"4c09fa263d25a9f20ab5e0206e041a8949d1389a","sha256":"e5b31cde77b9fdacedde1f5d2755ab0c21b2a82ed44f0b9abcb4e59d14b0860f","sha512":"0d81e03b5fa9594ce0c83e8a72435bc1f3de3c12a6b768a49e3def0774a6113c464c15160f9f281b16d5e807cdab35b672a0b794f5744622afa5f8cc76ffce44","ssdeep":"384:HuXJAJy/NzY25Tsy7JBmr7QoXAmY4AKVeafjvq6z:H7AmYjKVz","tlshash":"92e288613c1b8002261f653fe407e50d1a54ecc8afe29fa1f856b90bc9b6cb43b77595","first_seen":"2023-12-09T18:10:58Z","last_seen":"2026-07-20T18:39:21.156423Z","times_seen":40,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5Mywf2DckAjWLI847JSGPHhsa7f94DJxG9OKYmTC6CRxcblICIJ6Z2nybuoPxp6nnT442KXA3t2Dyt6vUcGtXo70Fg1tAKWbRFUffi4k%2BglloIbrV87wNg%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:26 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"26c1-615e094b4d300\"\r\ncf-ray: 9d7b4160b8f456f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9881)","md5":"0d23c2c845da69f1949cc01920a9419a","sha1":"27152730c6c8ce8675eafa320bfcc998d6d5760c","sha256":"bda65efdb8eb88835bfd1a4813dbd4f2dd00b586b402678b73f76f8d0a351a43","sha512":"2e1c3672a7f18da09ecb4cdc9bffe0cf7d4ed8266ceb1328470fc20ce08f18733f3fd19be53571dafdf1d324febd5bf6050e9e06ba2cc04ef01e539edd24a690","ssdeep":"96:BlW9CszCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:3W9CsCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"9022e3817d63814e16ff641b101b184ca1d9d4cde9bbecd5e8a66203c6fbec43b71928","first_seen":"2024-04-11T16:07:58Z","last_seen":"2026-08-02T11:17:54.395607Z","times_seen":153,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/form.10bf1a6475f0741920ff.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/form.10bf1a6475f0741920ff.bundle.min.js HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BMIGn1gavAhaYj9a%2FBQjaDRk%2BgrK4X%2FSdm%2FpO1mmRwyzoOY%2FCdf6KVjRRgTYT1nQ%2F7AU7El5qGwAJYgKBDGK2mbi0XxQwDALNhOW0KVR8OMIxJeUvcd0fo%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:33 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"4b1d-615e09beb2340\"\r\ncf-ray: 9d7b41677a5656f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19229,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19185)","md5":"e3ce3ae3ee515536753acc05f7e83d2c","sha1":"9285872018dc1e88a6b67a1049128dfa7dc1f8ac","sha256":"5005696ffebb46a10d4db47937a6a6152c731b678de38d33cd3fb159a8a83cc8","sha512":"ac1fe2399f49efeb345c9560d45dd67352555e089cdea5ff4cce12aaa5cbcc87946ddb2f9751d1de9b97f44c750486cba4642f03a9795e11f60f5193565304ef","ssdeep":"384:JjIjPUo8HOfXXtaij86dYXviaX0QO+aEeYWWhdNMCHr5w//sjKHqXt58sbu8sUZJ:JjIjPUo8HOfXXtaij86dYXqaX0J+aEeC","tlshash":"498271a53061688b4a9a24bab4d3009cb70335b8ba86704eb5bd48ef9774dc1733537b","first_seen":"2023-12-09T03:11:28Z","last_seen":"2026-08-01T08:09:40.850548Z","times_seen":111,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dh4BXueSOMOJVmGvtIuY%2BUVsES0ofaOoqSbNNj28vdMndDQsKFyFE%2BK6Hd7nU5sReRU8CSuOvnG22rKF%2FJz5dXG5NWxjrvRoTLsCBI44NTghNpXxG%2FiaiuI%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:34 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"2315d-615e0969d1b00\"\r\ncf-ray: 9d7b416a0b5056f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143709,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-08-04T11:39:57.847954Z","times_seen":103342,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/elementor/css/post-6.css?ver=1752756933","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1752756933 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N0ZLnbL77JwXGTjUYzehFp6gjR15jE8H0FYCtw1lmdLQh5E57Dx%2FcVcIQi%2FlCVeGNiHRlHyRIPfKlbA2KZ0nlLq7o3eaimbJpPkIIFowrAqSX1suq6V8VMo%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Jul 2025 12:55:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:15 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"5b4-63a1f865eb181\"\r\ncf-ray: 9d7b416078cf56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1460,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1460), with no line terminators","md5":"9c11adbd97406fe9bee04192135e4d56","sha1":"6778bd33f1807ac2c60bd58f8e70001c18e60cd8","sha256":"1ded83a8797c40ab878e847b9bf12eedc4d923181e57e6c57506c6bb5983587a","sha512":"845aa730811e99340dbc7fbdc3f66a01210fbb6e36da183aa481c0ffd1db2095974420c738e22f6c0e337f7083ed6493924019a00fe33d828bdb9bdce9dc15ef","ssdeep":"","tlshash":"4d3199417e23e036d07b057fe2d7b02c052cd46b925f8aeaf42d864df8fea0a6118643","first_seen":"2026-03-05T18:41:59.09968Z","last_seen":"2026-03-05T21:36:23.905583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/john.jpg","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/john.jpg HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3486\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Apr 2024 11:02:24 GMT\r\netag: \"d9e-615e434deb000\"\r\ncache-control: max-age=31536000\r\nexpires: Thu, 25 Feb 2027 07:27:21 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 730463\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VVUQjdc5So3vZCLJIiCh%2Bb7gKHsHXP%2BIj%2BnB5casq2ppoVtsTx718xUPFmCtdc%2B2LFLoxSYMvVGI16eRPllClWavD49AqDkqLGu4Qk0KnYP7xzDyl8t0wE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b4160a8f056f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3486,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 150x150, components 3","md5":"9e4188986ee355dfd05a608780b7adf7","sha1":"f9a0e1b131586d3df4bb951a2cdde81ae98fa33d","sha256":"59b9f45c29cd598c199864339e0fa44f720b48154f2c4af221d103c7f6201bc3","sha512":"f5f33df7b0c81f7270da46ff22afbe5183c525ba5e0c91042b16eca586866e5c3aee262c40904b7ae1c5d45409492c21aed9fe3f24ca9f009c5e2ed7e10a89aa","ssdeep":"","tlshash":"c9715a67e3123158e7669834143e15e5f3f20a843af06f5b1d67aa10d7084d5b894d4b","first_seen":"2026-03-05T18:41:59.101227Z","last_seen":"2026-03-05T21:36:23.929025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/video.fea4f8dfdf17262f23e8.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/video.fea4f8dfdf17262f23e8.bundle.min.js HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2Hf6bndCU1mLypt0MgBsjaVTdWUZP9FKEkcOC1ipi1S%2Fe3IsDvc2r5gCxXwS8AKs1UJsFDdvkNZNdNY%2BGWID%2FrRe5dPnud%2FKJBIv0rIttYXqQLtjmVv8bs%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:34 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"cfc-615e095e60000\"\r\ncf-ray: 9d7b41690ac456f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3324,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3284)","md5":"f5141638f09ef5c699a92a6ea985c587","sha1":"77864a1d208c574aedfc562cc1567138e7d6e2ba","sha256":"90e5eb5425876682291c92149bb250f78ffa944f02754f323c6efc79f3c1c17c","sha512":"242f5a16bdabe255bf694a04bed9a09c34269627ae306cb0e5b8b7556090894083de1b15cf8dba2c3afc98b9ffb7d2d8173909648a378bd7230e9408721f0805","ssdeep":"","tlshash":"e4613f1a32d6c86584df489778570618732502ddbe00957df22b99e76ab8e8533fd3f0","first_seen":"2024-04-11T16:07:54Z","last_seen":"2026-08-02T11:17:54.272209Z","times_seen":38,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/themes/hello-elementor/style.min.css?ver=3.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/style.min.css?ver=3.0.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8O%2FIqU7oHL18xAs95PtTgsp3lWD1aFbA35NjSOC9YLwEj4nqjf5Zi786nxpu4FoE2qacg8iiGKtL0oKmCWub8XE2b%2FjNHcvtNsaNAwWMY%2Fz9EHdkDP61olA%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:17 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"167c-615e093375ac0\"\r\ncf-ray: 9d7b416088d556f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5756,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5756), with no line terminators","md5":"5be56bc9e617084e1cbb84c994912fc3","sha1":"a3adca593d4ec4afb41e32d073405610ae37eef7","sha256":"3c3c0ebe37e4fd4187131a0a8d039064a9014215c4b83199d909e7e0b2d7f450","sha512":"091a8004a7773d77faebd736d6626e5bc68609a366dc8377163b5bb96a87a8ea7b5c25a8eff9cabb17664a1e313769393429b9e6cb7ad3e0e58a810b94b2ef7f","ssdeep":"96:vSpsvXYXqXXXNjSa1I4pIG3PCZBG9Hzkoe3wuFeQWe0O4HClZ6wB2t8lj:v4sfoyHNe66sKZBG9HO3wEXYodtj","tlshash":"39c16363971031497673c8393ad17e943a216211c8336af4f426d9fccbce4675a29bae","first_seen":"2023-10-26T02:25:18Z","last_seen":"2026-08-04T11:12:15.078941Z","times_seen":7653,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ITEWQJOJzMyMnhgTFQD7pGWJGKGMwqpkv7K585Fv5quFQKPhk8GvACknJT3pJPlmZDjnS8rMx7%2FK8QlBnBNxgNgEbqU9sUBtlIV722QfeqBWmKBdXF7%2BQA%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 09 Jun 2023 11:19:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:22 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"3509-5fdb08a8b2700\"\r\ncf-ray: 9d7b416098e956f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-04T11:26:01.83202Z","times_seen":920005,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/logo.png","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/logo.png HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 34769\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 17 Jul 2025 13:07:57 GMT\r\netag: \"87d1-63a1fb2bad3db\"\r\ncache-control: max-age=31536000\r\nexpires: Tue, 02 Mar 2027 16:12:53 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 265896\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xqOBKPJcszq%2FT5zOt5OtwD%2BrcxCr1esrGUcn8C859oekAkOeDyO%2B8D2gdlAovClUx366%2BuLy8RCK8e05Ke%2BJ2NWqL4lG9jN0CxfRy%2FAuOUk9w%2B9pe6rrUIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416098ea56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 126, 8-bit/color RGBA, non-interlaced","md5":"7d67bf2e24a5c557c2098ef7927013b3","sha1":"de258301f7fc7368c15e8213164632134abb9e7d","sha256":"e432eb14d11e3b4441243cb43f1d392c9467b754c23262e5e6237abf34cc4f64","sha512":"180c6796cd4e065b1fd19d4800957422129b691469b857045ebbe80663efc8df64e9f27db5e3795eece0d04fa22e02cdd7a79a009f1f0144165ecc6ffb93e39a","ssdeep":"768:7/AbQ99/ew67F9L8dqAJcdaS+JHXAlNoK7f9hnTEje+DiAlyuN9dx4fCN5FdWjXR:jAm/mF94A4Y8JHXQNoK7VgDrlJtc5jrN","tlshash":"68f2f1769ef7520295d9d4a95099e6c6227720df0d1d90a69a29076ca03c3b837432e7","first_seen":"2026-03-05T18:41:59.105067Z","last_seen":"2026-03-05T21:36:23.946407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KbtDCJEMJs266epdzR6aqH48IRfQTiEwJXeP8t31CR0EEwvv3gBqTKVFVsnCcnWMGnLFIPu9cs%2B0nkV2729xbjjZwwmTnuXfu%2BAxKw0Ps6wQAKH3meUa5RE%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 03 Dec 2025 03:22:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:50 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"14c2-64503baaaed91\"\r\ncf-ray: 9d7b4160b8fe56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/x-javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-04T09:40:53.497565Z","times_seen":200475,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f20Qh9MeHh24DPfJ4nUxDtwzgIHwraOooMaQ%2Bs8PmC44vX6YebhqY8dJ1jYWxCfPifV3f%2BdS34Jz19IY7ZCCXYsRV%2FJyo%2FWdp%2FQO94Cl4qIGiYeAIe3jLjo%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 21 Apr 2025 09:26:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:28 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"53d8-6334676cae680\"\r\ncf-ray: 9d7b4160c90156f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-04T11:25:46.387473Z","times_seen":337210,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.18.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.18.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sOy3b43VRZuBMZLPwBf2lyVaU5TY9d7rA8wvwxKbgpeCk1dGLrB8tOzJeJ7K9ymRAnVokPM8trFqUnD9K1hjim3qBaEDNkJvvgtvxwiLIAVVKNzl3fdw4Ek%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:50 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"94f4-615e09beb2340\"\r\ncf-ray: 9d7b4160d90756f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38132,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (38088)","md5":"5be2d4015ea2d58c02fb34ef9cfc53d1","sha1":"4426716a349a40b6e30c824293d3c12e90550b89","sha256":"5e7015ac91edb803465bcfcd3001530ad97288415e56d51e09299b1097ba450e","sha512":"65f035d2651299954e34d8fa4403d1b137e71547734326ddc9f9b0ddadb86ab19d40cd95c99a0860b7adac5801d6135b1415bf09296487553431ca63874803b1","ssdeep":"768:KdbnHy/adwdddrdDdVdydOdad1dpdLdFdVd65+P6fvqMIODVwdfu8jbxwid8dHdO:SgaC/dRrIM4D7lv/YVZwhu8jbxwiGd5i","tlshash":"6c03965071aac97845cfc4abf423268fa722ac9cb403f4d77afd8d826564e87a350771","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-08-01T08:09:40.853242Z","times_seen":592,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/Nunca-imagin-que-perder-mis-ahorros-por-una-supuesta-inversi.mp4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/Nunca-imagin-que-perder-mis-ahorros-por-una-supuesta-inversi.mp4 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://globalrefundsolutions.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 34949051\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 22 Jul 2025 06:13:01 GMT\r\netag: \"21547bb-63a7e7c09e545\"\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 16:55:37 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-range: bytes 0-34949050/34949051\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFOup1giM3Tv606CoQdkFEcDuMUV3SC1p89hg%2Bc5jY6elrxuitcosHW3vkW9b1CqmxgJXo6tQESO%2FUC3yflFEEknwcDuiF0hJHD9pkC8Ik3o9o8xLG%2BvUMs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416529e256f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34949051,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"a02124891607c0d22e11b6cfc14bd141","sha1":"efd82e7582e21d62e778ec685bf79675b315b978","sha256":"cebe9cc6fc51a8c7e0b892f605ad22e2efdf769097c6b80bc8cc8bd8a38ba30c","sha512":"7a955ec133cd244154b7a7776af5161ee78a51d8193d32f4eed8860c701144b9011d20597ce64c7d816a2b6f049654c1b55515a1019730a8e3b25ddd2e85d248","ssdeep":"24576:Nylk9NKgJjKN55NOs3zkiSAJetZvMeTV4+:YlkWgJ8z3zkCetJM04+","tlshash":"0f25f08cbf41e90af314e27da498d69debf8d9d1ca06d24f950112486cb0ed06b7f9b4","first_seen":"2026-03-05T18:41:59.109849Z","last_seen":"2026-03-05T21:36:23.896984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":4458,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/img/flags.png","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/img/flags.png HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/css/intlTelInput.min.css?ver=6.9.1\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 70857\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 13 Apr 2024 06:37:28 GMT\r\netag: \"114c9-615f49f3c5a00\"\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 17:54:56 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9GiGG2175CReo%2FR8d3Jgjf2q1I9m1m8VqrdvkKOYDX%2FzfbYMOunLKHEeEE6C%2FE4wH%2BBzgKiPGoZaifJ6S%2BlVtUU1UIgdi5gIuT%2FisP2%2Fv5W7cqhy%2BClPiM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b4168baa556f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-08-04T08:30:50.610545Z","times_seen":25325,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/elementor/css/post-518.css?ver=1752756933","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-518.css?ver=1752756933 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FjCIL0lFSMmhN2L2HLEfipSmj25cfECL6KQlbWM5yoC4NsqLKb62NKIPsp8sd04vJS8CoJA7XpwHNFS6Yz%2B%2F3WtYGR59WLllAVaYIOdvCK3axzUefykqKxo%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Thu, 17 Jul 2025 12:55:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:20 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"384a-63a1f86615547\"\r\ncf-ray: 9d7b416098db56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14410,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14410), with no line terminators","md5":"89144b1aa415a63b8282869009718242","sha1":"d3dff28641f0e942ad87af1972365c70704f7c36","sha256":"2abfe690ae6d4b6baf0e4b0d347efc5d5ed0be67650ae05ce1571317c88d1b57","sha512":"6f5ef1cd869ca0bf40177a003500278e8f031e37e0ad363235a976cbb9a9707a19c6227fd73ad40a8411270ecf41c21c4384ec90b65b4721a54e9420a02fbd16","ssdeep":"192:HL0vS8TNvUBkUbuNWOPZ1NEYZWo5R0OSlsFUgam:0HNP/mm","tlshash":"0252f6917c93966db6bf604f104369cc2038cdced5babae2f4124323f679d9137a1994","first_seen":"2026-03-05T18:41:59.112335Z","last_seen":"2026-03-05T21:36:23.909332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2B6%2FvUaWbVP8GJsoIDm1chnzw5CwrdmHOp1IrBsU1uqIJtDSFOTvf2bpw3ytsCx5Qnf8V7ZAxcXhOID7Arn7IxU2bRC2xEXjSeeUYY%2FYVlm485kBbzHDUw4%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:25 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"2775-615e094b4d300\"\r\ncf-ray: 9d7b416098ee56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10061)","md5":"efd4bfc100c61ebeddcc65978b3e1588","sha1":"48ad5cddbfd63dea9328bef1c6dff962ca04ed76","sha256":"324fbe7bdd357474fa03f6da8309c8920531afa5fe0e36f62d5f246479dcc666","sha512":"09488346581f21a83f95a80703a783ff4a999e4a53bcb334ef65623ca42e1cc7e19ef26f8233534ec0b4c79ae49ec6c83b7e0f0b49309b9d37c6b0d329d05d5a","ssdeep":"192:WNybsO1K8kXWfVcAxTJXPEac1ZFuEKguKU:iU","tlshash":"f42270463d6751066a2fa51b5b83240db06048d8ecd7ed96f891e903dafedcd3b12c78","first_seen":"2024-04-11T16:07:58Z","last_seen":"2026-07-31T16:16:31.968601Z","times_seen":69,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/js/intlTelInput-jquery.min.js?ver=1.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/international-telephone-input-with-flags-and-dial-codes/assets/vendor/js/intlTelInput-jquery.min.js?ver=1.0.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHP93hfQ9IjexCx8wvVdqfMo%2BHrXox4MuGScqW2m8m1mC3AmtZN5CIE9DGlZtD0u38eByHh7wSDRVbSxHZUHI7qb56NJ%2FlNJGvLlMx73ZdT%2FwX6E19ScQrA%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 13 Apr 2024 06:37:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:26 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"7491-615f49f3c5a00\"\r\ncf-ray: 9d7b4160b8f556f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29841,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26918)","md5":"5e000e1444e814e3ab1458d0c6b35290","sha1":"06f7d1822e52716e79b08d1e41099f5c4a4ed1d4","sha256":"aabf45a20bb46c2ca02a98955406aff2bd696f889d0ed214dd520c6ac6f5d5f0","sha512":"c7289f3eaf5fe654fbf56262a191dc0c0f401e60275c278b00863f5c9610b4b73d3ba2b6e4d845640d438a367194ada977546b7870e09b762ffd4ee938a5ebfc","ssdeep":"768:KIqD7GzOoS+D45YMJR3QWVrdNuDxwt0q3vTpzaDPCg1i:mfHQWVLuFwt0qNzajC8i","tlshash":"1ed2f99973511237a89aa0a1687f16472ebf34155a84cc8cb87ecdcc0fecec9a1b5734","first_seen":"2023-11-13T21:34:25Z","last_seen":"2026-07-23T05:46:53.398248Z","times_seen":71,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/2025-07-17-15.55.08.jpg","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/2025-07-17-15.55.08.jpg HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 71725\r\npriority: u=4,i=?0\r\nlast-modified: Mon, 21 Jul 2025 09:30:32 GMT\r\netag: \"1182d-63a6d20921ff3\"\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:22 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VN6IEoPYyk9IxsFTXMCFi9pEzpruLWjFYmVnBzUDo6ZsfZjTWBf%2Ff%2BGPVZ1VRaMnC%2BZnuED7hi0nGOcmqHdjXImFohfLp74fmcJnIyPcoIfwjXuSbV1op94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416529e556f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71725,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 853x585, components 3","md5":"0203be85795ef644f43622edead0a8c3","sha1":"37f604f9407b4e77e045567cac77939ee89f3b09","sha256":"763bd542e04edafa04ed386210630994351eb1b6b3708e35145eb8bfb08a6e80","sha512":"2132d1c60a1681223bdcc1c28f5763ed656f62af2f3db226716ce940ff0ecccef9bff51f705e405e5af601dfe191d52e289a1aa5efb510f2c90a01bcc4480b02","ssdeep":"1536:FeYkLjSltPzRbJQ50C6I+qpgww9xl5uMILoIGEaZllsjK5UqY0:FeYkLjSltPzC6wpgwwzuTUEp2520","tlshash":"ad6302cdd264cc4edb647a31d9b17007e9c0ba0ae794268e431837559e2faf907a8c7c","first_seen":"2026-03-05T18:41:59.116966Z","last_seen":"2026-03-05T21:36:23.898055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZw6ueDmJmwtdCtG0Knr6dYtzp1LPYVMT39wzqwtquOfIsBW7RipD5%2FhOkUA5Ll7mvPT7eI9kwW%2BvjLIjY9z%2BUOHkJRFtn7ThY%2F3o4Dj7F81jSN6LvCMRgY%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 03 Dec 2025 03:22:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:51 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"58ea-64503baab5ed9\"\r\ncf-ray: 9d7b4165a9f756f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-04T10:00:25.300225Z","times_seen":310121,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/carousel.9b02b45d7826c1c48f33.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/carousel.9b02b45d7826c1c48f33.bundle.min.js HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h9Q097lkQWAL04q%2Fv4s62Dk8OYzmXxcn1Fq%2BRHlq5M3GVTN3PMNGzz06HDrsGEobJc25G300ZfXF%2FYCiJWM%2FjasH6dQ9tDwmmSfgK6aGsd6Hcu7nop%2FS7CM%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:34 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1396-615e09beb2340\"\r\ncf-ray: 9d7b4168fac056f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4970)","md5":"3808e15ab542e31511b19ed2301dd876","sha1":"7a580beaff268a5858a3ab814e42ba45e2e17faa","sha256":"9b7aceac29f49f475dbbd0dc165b2fbed2bd2d60e6e73a94984ab6e701d82ec0","sha512":"4a7364e1174de5b6e2768b7b388b1842ea35bd5324eb0e1a80676dacb5fd8121ebc48e845391a94464a1dfdece8bf1c2752c6453434eee48cc46885a3b69276f","ssdeep":"96:BF/Ipk0gQRVH6lSCnndyjpZZv8mlDfe6csVjzTjHTpgAnlHYc:EpkUdQndWZ5wBEjnjzSXc","tlshash":"75a1c7437043bc2600eb940a7433800097411c89b986b6bf7ce598d6da739a31bbaff4","first_seen":"2023-12-07T10:26:49Z","last_seen":"2026-07-21T03:47:16.537516Z","times_seen":42,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/favicon.png","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:34.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/favicon.png HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 6499\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 18 Jul 2025 10:28:14 GMT\r\netag: \"1963-63a319562391a\"\r\ncache-control: max-age=31536000\r\nexpires: Tue, 02 Mar 2027 16:45:55 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 265898\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1gvzHm9zZTUn8mk5KqWS1%2F3sHLCo5xUeRW%2B5EJckfL3HbfVGlOseuU5bEIx4UtIXFOnEwZwSdaawXPPNAv76IxrxlgTRNjAAyF5qrb4tpHAcL9z9N3OSESI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416cac7c56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 80, 8-bit/color RGBA, non-interlaced","md5":"3ea48e0959a84fef886a510ef68015ec","sha1":"725c65469b50599e2c71ef7f5915817342405fdc","sha256":"3f514549d344ef6ffc2e98a54aaf3b2f181bac93c9256c99707bbd8208ab5e5e","sha512":"bb8620a61390d38911cb3855cde9828a91a87a9eb3bf8012ff7eaeea9418a7826cfc4519c281e36d1eec6f650e7191ae642305be76ae30752f9cc1e478db8087","ssdeep":"192:x2+RgW+46icr3/zSJigG0P+brCytKpgOirshlJGolN:xY46Z3g7PAHtK6OiryIor","tlshash":"0cd18f29e81255a093a8e1922ce92517e6cb4ad28115c278be4f986b20f43ff09ed4c7","first_seen":"2026-03-05T18:41:59.120885Z","last_seen":"2026-03-05T21:36:23.904165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":77,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jT2Vn69CwXqs2pH2gkq3CkyB5polRU9EG%2BfIpz3VHDETfJf0U2sqCMP3wsyB5TMjz76JTnHTnQSDyELvDcxJVKb1IsaWiGa26vHmq%2BBhJ692GAdkWq2zgFM%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:15 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"4057-615e096601200\"\r\ncf-ray: 9d7b416078cd56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (743)","md5":"fee4758f7f1ff50198722d616637ae58","sha1":"9c40cf89aed47319878b22d2ef1f2afdfa6f953c","sha256":"289f27b18d57195357c213a7e04f7a64fe675df84c3f0880ea28b54c6930ac39","sha512":"c689901581b5e72183fef24f2e530267e238c8a92ecf7fc1f7328f1da136341be76eb30789f3ed92751d7be3d46f1a0fcd77eaa38986ed1b4fca543d7667f77b","ssdeep":"","tlshash":"431188b7231badd36a225de9340a78800c78907f3a32954cf08d13d8fd7ac148a2bd36","first_seen":"2025-04-12T15:33:03.340215Z","last_seen":"2026-04-12T09:46:58.139311Z","times_seen":13,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMeYlt%2BOHaZ4fhMZz9N5Gt7BNMiqxseOvAHAEiGjX5Z0%2BG6EyMTaC9oihnBo%2FpPZiOPuABSzdWl9iNOKX13ABIfTxn5U9Rungyblt0Xj4%2FYAmdGFQhydEtc%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:20 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"26c1-615e094b4d300\"\r\ncf-ray: 9d7b416098de56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9881)","md5":"0d23c2c845da69f1949cc01920a9419a","sha1":"27152730c6c8ce8675eafa320bfcc998d6d5760c","sha256":"bda65efdb8eb88835bfd1a4813dbd4f2dd00b586b402678b73f76f8d0a351a43","sha512":"2e1c3672a7f18da09ecb4cdc9bffe0cf7d4ed8266ceb1328470fc20ce08f18733f3fd19be53571dafdf1d324febd5bf6050e9e06ba2cc04ef01e539edd24a690","ssdeep":"96:BlW9CszCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:3W9CsCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"9022e3817d63814e16ff641b101b184ca1d9d4cde9bbecd5e8a66203c6fbec43b71928","first_seen":"2024-04-11T16:07:58Z","last_seen":"2026-08-02T11:17:54.395607Z","times_seen":153,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTB%2FeEWJ1xsg7f4zGSrJr4gUP10dChCckRlo3EbmW6eyKJ5xzmM225WLzsBhh%2FlgZ02X2fu4sz06bgaGuctweA4ghpzQ%2F5MkjOkdpf35wgGH8anWBDm2tFs%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:22 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6760-615e09beb2340\"\r\ncf-ray: 9d7b416098ec56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26464,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26419)","md5":"ab9a5e559ee2a47dd5e5ba6406c54a0b","sha1":"4834312c198271acf5dee151f430181c7e3c1206","sha256":"c5932149cc61662f2c84284931a75fee852c082e3705140cf6f6bd151a0425f0","sha512":"bcefe7c6df1efe9f2500f4d2d3b50455b452acad505f8dbc8488e5701c4c7cec8831626e1cfbd4502d9aa60c7176e35d43b93683792734ad53fa047e4fdce153","ssdeep":"768:xPoScoKTAllwvGQzKNwGz42lvQz0Ahm+PmBMqRI3HtCelEqJUrZgcw:x9w","tlshash":"91c28981be83592b032f613b91e2c61c4fa519c8f2a17699f0f5a00f41d7d4c6bb7b22","first_seen":"2023-12-07T10:58:20Z","last_seen":"2026-08-01T08:09:40.855439Z","times_seen":176,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globalrefundsolutions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 09:20:04 GMT\r\nexpires: Fri, 05 Mar 2027 09:20:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 33688\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T10:16:25.560641Z","times_seen":36818,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":89,"dns":1,"connect":22,"send":0,"wait":13,"receive":3,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/favicon.png","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:34.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/favicon.png HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 6499\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 18 Jul 2025 10:28:14 GMT\r\netag: \"1963-63a319562391a\"\r\ncache-control: max-age=31536000\r\nexpires: Tue, 02 Mar 2027 16:45:55 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 265898\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXkdU0%2FQWk22UgtN0tQraID3AOCu8f8QMS%2B7PdNcawbOsgBJqGhIlLfEBbs8gUDmhe6nCbyG37gXSLNsfT6YHdtwBeGtMHwNthI4jJdRh%2Bha%2BD5iY81BnP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416cac7d56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 80, 8-bit/color RGBA, non-interlaced","md5":"3ea48e0959a84fef886a510ef68015ec","sha1":"725c65469b50599e2c71ef7f5915817342405fdc","sha256":"3f514549d344ef6ffc2e98a54aaf3b2f181bac93c9256c99707bbd8208ab5e5e","sha512":"bb8620a61390d38911cb3855cde9828a91a87a9eb3bf8012ff7eaeea9418a7826cfc4519c281e36d1eec6f650e7191ae642305be76ae30752f9cc1e478db8087","ssdeep":"192:x2+RgW+46icr3/zSJigG0P+brCytKpgOirshlJGolN:xY46Z3g7PAHtK6OiryIor","tlshash":"0cd18f29e81255a093a8e1922ce92517e6cb4ad28115c278be4f986b20f43ff09ed4c7","first_seen":"2026-03-05T18:41:59.120885Z","last_seen":"2026-03-05T21:36:23.904165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":76,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/css/widget-blockquote.min.css?ver=3.25.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-blockquote.min.css?ver=3.25.0 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vpz%2FnfeK757%2B1IkpH%2FSodXZrfwYwC7ETpz8AmPq1Tarw5Keo0%2B7Ob6uAuvs4ik2F9wJC6OOwwn3c%2FN%2Brz9GKHxi3A1jRLtfDxm%2Fn27WFAJEokgQddIV49bI%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:21 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1449-615e09beb2340\"\r\ncf-ray: 9d7b416098e256f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5193,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5147)","md5":"192c9c726751b3f0c17cfcddb5b64bbf","sha1":"7c90f37837b1230d238d6ca6bf8db438e0181ea2","sha256":"fe1c9cea63a3d939d868407c9c81de08ad17bb74308df4951afedba994e97e6d","sha512":"9743db40ce18adbbd0d05140387bcefffa647c9e23e715fe1460e66eacd0b8e9bcb1edf35b23075e8b438bbe5bc5ec12d157ed5876fea67ac91a1e4facc5de7c","ssdeep":"96:BMTusg8szCraJY73v0LXNh+AtVr/gLlNhjUX:jX8b2J2fKXNh+AtVrYLlW","tlshash":"7eb18d9e786362a9035f820b6c43e0bc615055c4d88233d0ec76d18bf5e99f827e67ab","first_seen":"2024-12-26T20:42:01.602347Z","last_seen":"2026-07-18T17:11:57.378581Z","times_seen":35,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.3.0","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.3.0 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8XK4LICSo7xySe%2FJ4qK5I7rFJ%2Bcm%2BgJIaaUal71fDueCCrazM27ehaN%2B4EJtPcyhjoOZSCkfQBV8E%2Bc1LadBG21ujUayxFy5pa%2FoNWeOXBMh9IITsoGcEM%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 22 Apr 2025 11:15:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"13745-6335c186bf500\"\r\ncf-ray: 9d7b416068c856f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79685,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"df664f134688577591d5b39bd87e3743","sha1":"d7e5c3b7b64f7baf8483ae8da98921c040d55876","sha256":"4be99bf2f620fa0cd66189d309b37b10318d74a4a09c5eb39f0224a5975625bb","sha512":"241f74dee38446ab175e5f2569deb482765e43c9fb2676c44140f98cb13b55a0b1a90d8a7be44a2a1c9116cd659c7b1814366507f6fd154c597eaf46600139be","ssdeep":"768:02+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVn/R:02+Rm5ufoqDr1GLvc","tlshash":"4f73d8c61dc229749a16681da3ee93a457b60043cf35a9ac37ed821ccf82341b7f6b57","first_seen":"2025-04-17T00:13:04.269834Z","last_seen":"2026-08-03T20:52:42.992487Z","times_seen":1268,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7vEoVyXdeBd%2BCfL6rCq%2FiJ3BBDeXhW3wKbolx3yrsZhb76KslfLpW0dIYwrDMFlys%2FGRmoDld8n4gaDsvC%2FmFbwtOhh1aFqaypzy57KvlN3ebNdqSPspcA%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:32:49 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1c9d-615e093375ac0\"\r\ncf-ray: 9d7b416088d856f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7325,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7323), with no line terminators","md5":"4f6608672aae4899d264369dd0c580d9","sha1":"c4b0007b7f9377cd9d7c6b8106dffedaa03d1610","sha256":"97a09cb2af7d4406f6163874dad15c607d571749611d00890d47143495a0a617","sha512":"71269b46a4c18fb845dc411d6de352b8f3ed0bf320e05c4873209b18298beee451975d5108c55a1249f6e37e1227b0b3e4c1de4fcfe85d9dcabf608f5ae39a5f","ssdeep":"96:EfTvO5c2yhjFobxStP53m8yPoTZFo5jJxzy4vA3eCiwtzG/4vo3otubEm+B1Yz:3/otJtFo5jLLx+zI4vdud","tlshash":"fae1cf66f8f2357813338623a7e147ae50bac00dd90babf561eac31b05db44217a7f59","first_seen":"2023-12-28T03:57:54Z","last_seen":"2026-08-04T11:12:15.076177Z","times_seen":5645,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/uploads/bussness-time.png","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/uploads/bussness-time.png HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1336\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 12 Apr 2024 07:26:46 GMT\r\netag: \"538-615e131b47980\"\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:28 GMT\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLxOQg5xuswTRyXiVLd2otBBB2KrekjHcmMjfX0Bv6E6ft4fEf0PXk6RCCNnRmaW7AaNRZnf4NzF10Vw%2FcmfMDkgrgbwnuuW8c6rpZUEg9Dozj8jkImQ%2BcU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d7b416098ed56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T11:30:20.631185Z","times_seen":17707448,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsnNyR9AIe8sb7LbgD3ZkAYXP6%2Bj%2FnseDymgqgM4qvr3SuCs2A1rsEFJk5GUQp2YyZ8at2iH%2Fr8nBNv8E8xCVXBLB5xBZK54Keh5dnyknT4YWPnOi8CRG18%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:42:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:27 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"b79-615e093375ac0\"\r\ncf-ray: 9d7b4160b8f656f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2937,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"37a18cd57014e833a5c4a7bfa6eea9b3","sha1":"bdaa4dc40b15d010d66959bfe7a40b10292d1763","sha256":"fad3123058cce0346ee9998342ef09cfa766dc1393ee3b5c2b450a18936c7d1b","sha512":"3d721d447bd732f96bf1b2feae5ef6b6064ec6b2396022f06a0d96f8ca1478f77c8910733bc277ebe414a5e85c77ca80b9d2f9a5f9ae77c7e99884c82f15a9a3","ssdeep":"","tlshash":"e651ba0973db2836406f92bb2f47559e722640cf6405c968786dba5e1f50c7016f2bf6","first_seen":"2023-12-27T11:44:50Z","last_seen":"2026-08-04T11:12:15.062937Z","times_seen":5009,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.20.4 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvRwOPJAwGRUdGUAEr5DlfqdTe%2FZhajMnbLFziI1eUQs1isyzRAfpfIigZ966lFR0o%2B%2FcaR7Hlx%2BOCLVzrzhGHWug5SslZRysEp%2FwEq%2BJE9Dz%2B5RJwrO5JM%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:27 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1385-615e095e60000\"\r\ncf-ray: 9d7b4160b8fb56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4997,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"f7142980e33b09ef0cbfe963900623ec","sha1":"12969622b24ec53053bc563b6f45054469cb9eb0","sha256":"e9cd7d25ceda7ecd5736c66a2625b41b76b44d9a69f2f05e8a89d36aadbbc3bb","sha512":"4430827435a94aeeb525da8a058a5c772e66b84d3430bee847c130f580e19605513ff504e5bff5c21e14a211e9b8b359404bbc712d70b060541632c1ec34eaab","ssdeep":"96:BEsNt0jqf9fzI7tNrf8FDwlCjNVobVDPkqflkxwvT8S2:msNCjw9fMNYFDdN4FPkyXgS2","tlshash":"6aa120d41b90fc6735e135c8a11aa731752fc0337d1ab8c1fa22dced98e8ad187a9931","first_seen":"2024-04-11T16:07:55Z","last_seen":"2026-08-02T17:43:01.291403Z","times_seen":362,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/popup.085c1727e36940b18f29.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/popup.085c1727e36940b18f29.bundle.min.js HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61wmxveSXfTxdxKva7zM1Aeg9RSp1sDKPXraY5Dp%2FfiCdFxnRtb7hHNqmxhWdBdxP2lXPFuM7eQqve5DfJjC5NZROmrYqcAXFiP61krwInbx%2B%2FIDgwxArW4%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 16:55:37 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"2ef-615e09c282c40\"\r\ncf-ray: 9d7b41677a5756f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (707)","md5":"420c73d9e6493859095ac908956ea08d","sha1":"c046287c6bef889693b9198d36cdc652d77a17a5","sha256":"7998cb59e94d4d1b084bd52ea24e9b69fdf15b31d7b59a8bca127ddc7143cb4e","sha512":"3591206de1a63e67b277fa9d6588f48f1bc8b8c3098ea6f669185ecf00f6028c8ccf933a5ae385065e56a429c6df613f60bbb32bca6a1b48866b2b8e270bbf84","ssdeep":"","tlshash":"7401d0a030a2b8b604ef409b74c3067c256129f27405a9a279cb84d26eb4e953351775","first_seen":"2023-12-09T03:11:28Z","last_seen":"2026-08-01T08:09:40.85472Z","times_seen":109,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.20.4","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.20.4 HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:32 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wZnmipm2v8Uj%2FhH5z9bcis3yB8tUTQxman%2B1arUIPsWS8BcgszdY4vSCBNJMOveb9toEyzGFeWv3T9Au6nmBCy1QD1bQcPKcdGIGeLLDIVz8M%2FptyTXiid0%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:43:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:28 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"9d72-615e095a8f700\"\r\ncf-ray: 9d7b4160d90656f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40306,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (40266)","md5":"5e248abcc529a4b86e24164d773b0edc","sha1":"0b2a9e3321382ffede33592de9a0b1815270d527","sha256":"cd14de9765963d1d87bad7b820ed1449f7f93b7680c4e6c5182258ea8f4903e3","sha512":"cd027fd03f12bdba56d17d4f665254a4a68bb3d95fb2261b0820956c61e0b3957a8c77525d371d81053ef8ae2817371b7fda1c0ee5991331c6e23c60902134dd","ssdeep":"768:/RPzjLRkRevx1QEa/A3JSJGfVebVqJj/Q9KEAzBc5GETSebsvTilauUHTSX5aodX:/RP/LRkRQx1QEa3GfV9JREAzBc53TSe1","tlshash":"6003071271d2d4aa418f48b7b433121cb3664dcdb402b59db2bdace6a4b1e8373b2775","first_seen":"2024-04-11T16:07:56Z","last_seen":"2026-08-02T17:43:01.247562Z","times_seen":357,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globalrefundsolutions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 09:20:04 GMT\r\nexpires: Fri, 05 Mar 2027 09:20:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nage: 33688\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T10:16:25.560641Z","times_seen":36818,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":93,"dns":1,"connect":21,"send":0,"wait":14,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:32.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://globalrefundsolutions.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:59:55 GMT\r\nexpires: Fri, 05 Mar 2027 14:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 13297\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-08-04T11:29:36.705603Z","times_seen":253535,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":74,"dns":0,"connect":10,"send":0,"wait":8,"receive":6,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"globalrefundsolutions.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.d43af66e5000fd109c04.bundle.min.js","fqdn":"globalrefundsolutions.com","domain":"globalrefundsolutions.com","tld":"com"},"ip":{"addr":"172.67.183.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalrefundsolutions.com/","date":"2026-03-05T18:41:33.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalrefundsolutions.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 18:40:43 GMT","end":"Tue, 14 Apr 2026 19:39:34 GMT"},"fingerprint":{"sha1":"4C:EC:AC:81:90:E4:33:CC:6C:21:5D:4E:FA:9C:8A:1B:7B:AE:97:CB","sha256":"B2:62:53:18:74:28:66:7C:1E:CA:0D:00:98:95:D0:70:D0:30:2D:DD:A3:18:18:D6:EE:C6:8E:C8:FF:09:D6:82"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.d43af66e5000fd109c04.bundle.min.js HTTP/1.1\r\nHost: globalrefundsolutions.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://globalrefundsolutions.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 05 Mar 2026 18:41:33 GMT\r\ncontent-type: application/x-javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IL4mKTYH6y1xODozinNdyN0OJvqslD6v31qvrPxIfSy2Fm1ZjCuRhjPaer4VOngSVm9dMbwFjenjQWfs46UutG8ChcypppLe3s0Zoqqbd32wuDczMHBy1xY%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Fri, 12 Apr 2024 06:44:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\nexpires: Fri, 05 Mar 2027 15:55:32 GMT\r\nvary: Accept-Encoding\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"1227-615e09beb2340\"\r\ncf-ray: 9d7b41662a1a56f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4647,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (4603)","md5":"c5aa84a359268fbf7a98d521f3d47f7d","sha1":"4686f2b5002072b77c9fd83225c95fcd405ae5fd","sha256":"3afd5ca52be2cdf92e6f60f746b2c08fd1a546e172144e26a83382ffc6cf9c71","sha512":"0bb9ef1b78dbc350290fc3d1cbc015cd42ef71543a52146f3e8d8b805ae8b17a3d2a94bac46f95e0acf02d1f0fee1feb98a62470b845498666d38aa2e8fbe732","ssdeep":"96:B5M92EVN54zajUkkRk7PA2goL/V2VsVQKSGffr/xZdUyKfKAtZ2JWEfPvkhh2iQ/:PdEXNUTW7vgoL91SEj/xZdUyKfP2JVv/","tlshash":"f2a151a373931ab6858f405b7a434a2df23219ac744665997a796cae21f0fc033f5b34","first_seen":"2023-12-07T10:58:20Z","last_seen":"2026-08-01T08:09:40.846096Z","times_seen":366,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"globalrefundsolutions.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}