{"report_id":"1d332002-0e85-456b-bfcd-0bbdb851a79c","version":0,"status":"done","tags":[],"date":"2026-06-23T23:35:08Z","url":{"schema":"http","addr":"safefire.jo","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"safefire.jo/","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"title":"SafeFire – United Safety \u0026 Fire Fighting Systems Co. Ltd","dom":{"size":106426,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5961)","md5":"28b8fcdfec73d58bb8ea677c5b24a7b4","sha1":"a741eb8292dded14f16e6eefa29e4683b2323688","sha256":"95d64ef1c472ce557cbe2686d7fb21c562e4d022cbd601971bc4138ae1d20fb6","sha512":"4570e7bf89bc398c5b5f4dae670c6713a1d0fe51de9bcf07847e80b38dd2d8c28f591501a503a64b405aba23079a957a96583fbc46fd5eb810724cb349ba2521","ssdeep":"3072:nMpbfINXZCwvAavt6uhEpLBYK2khq8ovt6TDPKvPDLdlglDb0r:UbMswvAavt6uh","tlshash":"68a385e288fc343b400662d6515ab74df6e39103cf5a0951b3fd9a9eff85e804aa364d","dom_hash":"domhash4f78d3e7d35b7a0584046fc90fb69db8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"safefire.jo","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-28T23:35:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"safefire.jo","ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":212,"request_count":53,"received_data":1654508,"sent_data":45832,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Underscore.js:1.8.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Packery:3.12.3","description":"Packery is a JavaScript library and jQuery plugin that makes gapless and draggable layouts.","website":"https://packery.metafizzy.co/","common_platform_enumeration":"","icon":"Packery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:5.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WooCommerce:4.6.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":3678,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":3,"received_data":72875,"sent_data":1672,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","size":11224,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-24T03:00:28.497549Z","times_seen":83865,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/hide-price-until-login/assets/js/ced_hide_price.min.js?ver=1.0.7","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0d09555c0cff725188da86518825848","sha1":"ac56a4f1e7cc44a6f9fb6e7048f9e0c19aae8ead","sha256":"1f4b088f77c0a509ccf77dc98c8d055da19e7aef0efae2da3788a3ad6b723ff7","sha512":"2dbaf52b8dca1e7e8b0932bfdfa8eb8f95129db6ac34f3282df7441b8dfc4f1086b36ef0136efcf6b87c95c0c308f7cb110bbd58f4183f00421125878a7968b4","ssdeep":"","tlshash":"f8110409e575acfd003aa221f3f71b61bc6758d234d4c421502b42d9175a73d7063bb8","size":965,"data":"","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-06-23T23:37:14.407448Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.5","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2335332e53dd86db3fb0c9fc25457af","sha1":"9c2a6a68bbc2276abab96358fe2a54b014982cb9","sha256":"d80483c2fe131fd9d01d51b0378e0c3e2a7571e91f4f0fbd37de6276a1b464d7","sha512":"b49256149c38c02f91277378a2fcdb89b8184831a6ef12ae6fad1d20a91747324f13d266022915bdc280365ff7eb7d0d84a3671fc10a4fd3234a7ba871926f7b","ssdeep":"384:Zs8MTFaqhjAdbhLu0KgQ1ubzguBg2FJ5ejrjjrwjip5fQAaBnB1pP0a1reTkL/XW:shYguBfFJ5ejrjjrwjip5YbPr1a0/Xux","tlshash":"11a2c638642064af8393a361e4476b1d52738a17fe12d9644278ec7619fcdc66936fcc","size":21592,"data":"","first_seen":"2023-03-07T01:23:48Z","last_seen":"2026-06-23T23:37:14.398583Z","times_seen":785,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/yith-woocommerce-request-a-quote/assets/js/frontend.min.js?ver=1.0","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a738ec5c31a9ca751422ce1bf7dc0c6","sha1":"7b2555ef0c15fe3b847170a7a403052b4e19c8f0","sha256":"d3e0251dfaff92f117b11633aff1511a350bc6be5657d3ccf40293754fcf942c","sha512":"b22b4ea158a8df5d87915c532cab733716de313282887dcfe24d806de315783a15a19aa75998767a7bf50ca5660eb1be1d15b863aba69f5e5693c7d5f3af3efa","ssdeep":"","tlshash":"ed813397f1b6247789ffa7223073fb596023e97882b19500594ea0906f34fc81332a1e","size":3887,"data":"","first_seen":"2023-03-10T20:17:40Z","last_seen":"2026-06-23T23:37:14.396757Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"00341a413e6de74305c4dbe74be6d170","sha1":"c1c50d8a96a45d9b550142a00d4edb0876d1c4f3","sha256":"bb20cfe2d068c2795734f1b59e81f8e1315e00bc6b68a4d3275d4cbbb5b32c3b","sha512":"3e74c6d5958645d861d2d66bba62ecff33afbd8a1f65806b701c279fa68d270a2405cc91ea642bebe3a5c4b48483ae61a1599459831e9bd23f6c9f13fa48a79d","ssdeep":"384:sMb/5MqIQspO2veLzxgzV1GkqnOSKLMQvh:sMb/OqIQspO2vYzxgzV1GkqOSKLMQvh","tlshash":"4e62b52af27020ed15ba20e2b83f63a471b7716c754b805cf17aa4d6582dd5c2633e7e","size":14695,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-06-23T23:37:14.386441Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/jquery/jquery.min.js?ver=3.5.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6f7093369a0e8b83703914ce731b13c","sha1":"d1889f5c173c2a4b20288f1f84758599afd346ef","sha256":"60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827","sha512":"d6aa7835d7b256b94ddd2f9d8db84484f0413ebc502762c1ba21cba7a392c6f550db2418cdc8bd6d1da6ed2cea55bf22473c778493d416b1a1c38e6ffdb8c79d","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE","tlshash":"7393f9ddb2c6702257a720ba007f510bf236199d6c4d8450f269d8e9bc78a4e827bf7d","size":89496,"data":"","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-06-24T03:00:28.493142Z","times_seen":13520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"63376875b85b8beb4dbe733e23544e75","sha1":"f3ae1acd9a4968f5033deff5f873ff35f9f79870","sha256":"dc115bfea8a92ce5f9bc8b58de195488451e194042569132f08cfe4436737c30","sha512":"4977eb5f2e101cbcef8f23c5ad5cadfc14972f522c9939d9b82adc372e27fe6dcecf7329211178a8d7285ab97b0157eb829f40a7060fc453ee395c9bf3df6679","ssdeep":"","tlshash":"3951241fb070cda519f2287e617a718522329965b6098b30b025d8e41eede4b1777dce","size":2939,"data":"","first_seen":"2023-03-07T01:41:43Z","last_seen":"2026-06-23T23:37:14.404087Z","times_seen":786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/hoverIntent.min.js?ver=1.8.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cb41e780b9b6dbbf6ea0a3882da09de","sha1":"9603305218e09c3c10be9a95b0ef8c7eaa5245ed","sha256":"495d2f8c8b7f1bbd664c2c10c086a644e63e4934b9734813b27956a34709eea4","sha512":"e20bbc5101c976e3e5384f369d13635b06b70ce3ac45a91a054ad1fbf9d3781b8c75659640c43b79af62918e9f29302b7baef34bed79b6b7977c361461a9735e","ssdeep":"","tlshash":"00218c8e1b86ac8a2342e124e53b38bd7f731e17ed8105567373648e1fdde745302a69","size":1122,"data":"","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-06-23T23:37:14.397219Z","times_seen":1170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/libs/packery.pkgd.min.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"02441fd381a23d7d253205d88e1a7ef7","sha1":"e2f7ba43f85c7e0e704f640e37d2f587c0fd4ef1","sha256":"478b117d08f666c688351b1f1f67bd6d15f5b93b887e60c0285bbd3050837c9b","sha512":"d3d9f95077f9c6adae14faeaf3c8fd363e856dfcfbff6eb7211d3997905495f88098c90c9f96a2da9a4a6807020d15772f686dd1718a81c078be8e65fae83ee4","ssdeep":"768:AebvMxXGRTAiTAVP8Any1w+avPz5zs+V7rvzT:LMx2RqPXnow+avP9zNhbv","tlshash":"bbe2958eb2003429429bf16692bf160f7137651c7607909cfa6ae8eb5d79c4d2037fb9","size":33043,"data":"","first_seen":"2023-03-07T01:18:34Z","last_seen":"2026-06-23T23:37:14.385895Z","times_seen":2812,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/wp-util.min.js?ver=5.7.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8852ab48e7d14f035a27f3c15d31c054","sha1":"eed53bd391b539796dfe3b5bc5849170ab77c987","sha256":"6d7c73e67cbb5215d633ce9ad65f0c0377004621fce62982568024178ac4b589","sha512":"e816777f9a0934cf482f3e3277dd832199e85704a0b75a51905833ce54914b7d2106ca7d6444cc6911fe47d030cad1fedb2bc0b73b44087702ee08fc19b74675","ssdeep":"","tlshash":"9c11f0da72d9e8e3122331b8c23f422bf236642941229864f05895a16db4986b6b7b45","size":1077,"data":"","first_seen":"2023-03-07T01:42:03Z","last_seen":"2026-06-23T23:37:14.391401Z","times_seen":1376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"943f6eb962c25bd965e0f0e5a284fcd0","sha1":"b050a98ebaef01d7597bf8c1acb995c0ef3bcbd9","sha256":"50de09b0bb8d0ac656aa9b3a1e4ef58a3f2d1abd734cad68b0e12191e9d215ea","sha512":"40d551836cb4fdce9c4411fc64cf65ec29854dcc4bae0782f7da1518d552bede6c14ee876ad1f25ffadb4a97efc7e97cb0cba877eca9f9e8cbb3e3fed7d600d2","ssdeep":"","tlshash":"ea31a5c9348568cd068f1221133f1a8ff07c8e49adcde699431de9f17934467861afe1","size":1846,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-06-23T23:37:14.390868Z","times_seen":6610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"72095aaafd6f6cf97cf0187d3de394ca","sha1":"fe5f864f22ad4a794466c349ba9472b6f1922cc6","sha256":"946e3771efeabcf9a23d88089ce6ef6cb94531e36775004483fd8e237275dc29","sha512":"148c0ea4f3a6d1122ccb5fe745dfe5046963ddda92bb3ae7879ff22b0166ee2101c62c8fa262b70f9c885ac2ce333a4e35d8b30e54ab3d6dfae993b7ab382e10","ssdeep":"","tlshash":"0941ed07f4316d7221eba6b518df99842623063d4810850135aacb6c297a9cf6a3bf7e","size":2047,"data":"","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-06-23T23:37:14.381497Z","times_seen":1749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a4ab7d5bff29765df08e6d38c437b97","sha1":"bc612aac4cc65db4919281ba358999ca43f75510","sha256":"fb5bb847d63c20fa89fbd4ec8a08c5c4d5b37247fa9f926f45df00ab03406392","sha512":"6c9594b39546513fe840ed1b9e51f8ad060f4da79e01df82179678a8a4334a3c3301dab18d78526f561d1a17be5bdbc198ad8e84554919531dbe19cd6fa6d169","ssdeep":"1536:ksCOC5ERiYCaCojxVTsXUgTrAvdiknbsOvjH9EHDcjFlY0Cm9+fvZQa5XRhFVK+6:kFzEUQRikh5E4ju9XdgaCytQAcBzgS","tlshash":"cf04e749b251747a02ebb1f6a13f530eb2336428640280acf569d8e96dbdc8d6137f7d","size":173251,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-06-23T23:37:14.404566Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc2109ef48cabf7a26b73d7c3536c5f","sha1":"0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b","sha256":"8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8","sha512":"d40afe8509734cb8aa48cd361d68d614b2540a502a9ccffb76e6138de25648f8e1800d2d204111a6026246e1fa5d84e5b17772dda80f215078ae037452b34853","ssdeep":"","tlshash":"8a5172cef126f4ba07e22d81a50bdac45532282bf19665bc2489a1e14f78a461467f3f","size":3037,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-23T23:37:14.390356Z","times_seen":38725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/wp-embed.min.js?ver=5.7.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","size":1426,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-06-23T23:37:14.405088Z","times_seen":5359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/underscore.min.js?ver=1.8.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"203eeb8dd53e84fb53b7aeffb562d825","sha1":"b4b4361a61ee78717bdcffe5c46ea79cdc3e04ae","sha256":"6cd0d6897b3d4779f7d88ce72531f22fbf75851b195fb14e6f3f23d051b3d1e9","sha512":"4ccb1643ee93b0245002fd7ebd31d515d9e67f00db3ed1ea506e09ce30e725dd1c49860f90b8036fb8a3f0554cfdcb89d7198a46267ef9db456d23f116896682","ssdeep":"384:R2rjVXPfHMYfSCSy5ZMdn01dcs/qQavic0cz68Be:RyVX3C8rEi+za","tlshash":"7e7261e835d2f09a57a3b4b4043f408bf23f2e656cdd6968c245e1e93cb980d8427f5a","size":16045,"data":"","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-06-23T23:37:14.39371Z","times_seen":2345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a9a643376090bb2047415a3ba8b7ac8","sha1":"dccd8f3f859c7b6b5d294477ce8979f022dfdfbb","sha256":"368ffbbf736984505a030a218af955847c7d817bf1e22b42bbd48d10e1464f16","sha512":"640feb24e61b30e16d67f34c90a3087cb00ee2a08907dafe608b7a8a6de6abc9e8fdd52fd071e5ff58f9b8e2472d57c72e75cafe81a4dc9ccf4dd5e421228716","ssdeep":"384:oS67jwxjhziCogOKDNH0Wnguw0/GXWnrZ+wxmeKyD96hRc3:oDwHdogOKDNH0Wnguw0OXWnt+wxm9yDF","tlshash":"8a525ee5b2331c537a6f51e7948fa00c7534e8386252c6b99c9ae7b3583ce406363b1e","size":13590,"data":"","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-06-23T23:37:14.39194Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/hide-price-until-login/assets/js/ced_hide_price_until_login.min.js?ver=1.0.7","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f6e806e8d0d6460f60f606f92d05ff8","sha1":"bb7cc30a9f9f0cdda8b14ff3ac0dbaf1cd1ec7a0","sha256":"ab3f34dce8eb579d7839c73ca0d9a275b2d34bb9470997ae73a8f404c5957281","sha512":"0d47319913a3481bd67a846191b0eb5f0959d40946d66e09efe41f63774e59c5d0cae1396c0cd214e4dc780305278125109436a6d0d5153c58036e39a34e0e10","ssdeep":"96:BAqCUkYi9Ga1GlNG11GlHGw1GleGWCr1GldGt1Gl3GD1GloenGM1Gli3jG/1Gli/:BAqCnn9lWcsftzCZysga6njhTU3x/zA6","tlshash":"2381bc06f95e9cf6007e703567bb27008c3bb8b766009b06b4a543e06f5db8a7527b39","size":4146,"data":"","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-06-23T23:37:14.396277Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"81b2be18696c4dfe620f7b6d0d75a566","sha1":"0c3cd7bdf58a65b07e17be39cfe4e386571bb4bd","sha256":"120aaf6681ca6d34a40c559779f0a0038582a79fce1b868ff901c94d27c89c72","sha512":"d6234549918a770a055717c9fd1ff4b162afc7cdb9e72459883bbdb5e04532d7af5295b2f58a6f8a70250efee55ab544fba9595c85001c204516d907937d8c9d","ssdeep":"192:x92sLIzSavikwgpTZlpSjjF1mk3eJ4Nr6SWCxjlRYifT7TMcPvE:x9bEzSa3Z7lMjF1mk3v6wjlRYiff4cP8","tlshash":"9912e96830f3605b90b3b1506dfbe78f73b31638658799c1d0ace42929acd7a3626f15","size":9566,"data":"","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-06-23T23:37:14.3854Z","times_seen":7087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f792b41dfe4097675e09e805529455","sha1":"57cc1e04e0235d54bc197945b9d0f167d9454244","sha256":"ebf0e8c538ae3047cf5056253a32daa65d23d8fb531ea05b0f0f28d58f828143","sha512":"a5526098676e24d20b1d237b5248413f75c3268ce12b406ce4990bc670d4fe98010f1297bd92b870f5ce4efe95460376620d57a871e39c97498b6cf211b60cb0","ssdeep":"384:0HFFhp3CyCEB7T+gyV/W1KB/2ZszFmau+u:ktFCEA/EK9Uam","tlshash":"5462970477823372962b209ddaab414e69bb6d1778056850b31ec6c49fb8f0c91eff69","size":15876,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-06-23T23:37:14.400454Z","times_seen":2007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f89263c0c2f24398a1df52eead69f5f8","sha1":"850e9cfb1680eb1df4365889724e69f38df7bb9e","sha256":"125ec330f66081e7dc9f2814e9ec18f4e2d0baa1936d497375eedfda7ac12e5c","sha512":"0a9435b57e67be8140ae38b643a6d4a2d66f83181f54433d13000a637d76eb8eae95716da2f18f692d36bc4f2c0dc4a3390c0da3eb951df2acbf2d0e6874bb5c","ssdeep":"384:Y0M5w2j16xNN7FU2CyuIC+VhB2Dv2lyAiVK1IU4p3S3OVKEkl8bXnC:R8Xj16xNN7C2T6FU4p3ZVNC","tlshash":"625274c8f3ee1185c67630b85c8fc1cd6b7e6472e4421aabfe5c545028d88785b25f2d","size":14280,"data":"","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-06-23T23:37:14.374459Z","times_seen":3639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.3.2","filename":"https://safefire.jo/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2016/08/dummy-1-300x195.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.523Z","timestamp":1782257684523,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2016/08/dummy-1-300x195.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 12 Jun 2020 18:30:18 GMT\r\netag: \"702-5a7e744da6280\"\r\naccept-ranges: bytes\r\ncontent-length: 1794\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1794,"size_decoded":2027,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 300x195, components 3","md5":"4e86a579d008f2f8d6941b1f9c11cf78","sha1":"f1b1406df8aa54ac7bf78d99f5d209d23e02b247","sha256":"a55ca7c5bd8bb65dd2849876bff2cc7f31f359f8a8cde87a6dc98cd148baca5b","sha512":"de3569837432cf476739d57a0330325b44f9951fab97aa91f362989f30b04108620222c343e18f678d3e697d7b45503c5dd2cf99b95957134a7588a1887f6833","ssdeep":"","tlshash":"8431cc575d140b83e469cef8fe0309695f692a0cb9e636dd2a33ce9356207d64c1d06d","first_seen":"2026-06-23T23:35:14.369199Z","last_seen":"2026-06-23T23:37:14.40284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/06/firefighter-emergency-fire-extinguisher-safety-helmet-fireman-uniform-rescue-thumbnail.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.524Z","timestamp":1782257684524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/firefighter-emergency-fire-extinguisher-safety-helmet-fireman-uniform-rescue-thumbnail.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 19 Jun 2020 23:45:07 GMT\r\netag: \"3a0e-5a8787b9d46c0\"\r\naccept-ranges: bytes\r\ncontent-length: 14862\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14862,"size_decoded":15097,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 338x225, components 3","md5":"ff8454f8807324d287bed8b0c26e7589","sha1":"1f84b35c1330f632d5fa5e200d998550f645a48f","sha256":"cc1d3f5b7a9f130a12d5cc2a12866c83a3736cdb36bc8f847142bfda45542e75","sha512":"ec1bcadb318431e5dff5341a1762929abd1aa07fdb5d077a9c7ffbcf03ee2b6d56bfe714913df2a64a26d0e437710df432e887f0659a61f55ff981268bc59b7c","ssdeep":"384:yTr755eXWfgp2nXP94GPB6BzvGYIWg4hC:8be+5XPa0B6VGYIWg44","tlshash":"be62d0aa9d155d83dcaa36710449f34bbb1eed1f1147666de8902c32261e6b700cedb3","first_seen":"2026-06-23T23:35:14.370653Z","last_seen":"2026-06-23T23:37:14.40158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/06/cropped-android-chrome-512x512-1-192x192.png","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.571Z","timestamp":1782257684571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/cropped-android-chrome-512x512-1-192x192.png HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 12 Jun 2020 20:07:38 GMT\r\netag: \"303c-5a7e8a0f1b680\"\r\naccept-ranges: bytes\r\ncontent-length: 12348\r\ncontent-type: image/png\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12348,"size_decoded":12582,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"1aff2c70228a014ec26753052ee44d67","sha1":"352f629a72fdd77a7f972961ab247283c885018d","sha256":"dcebc99de5a65b18f37450ce439c413110dbdc7ae2a4008121a7c52d56eb1158","sha512":"cccfd34d3872c3b640757a8303628fdbddf1e9da91668c2589bb9fd245da854130876e87e62ddc905311a34638912b5397df11ad5e5dad902ff220bc147f6d10","ssdeep":"384:toUKmUnoXrf1+vygz4odWeH7IARZeIZ7hZj9:toLoX7744oNI8Hpj9","tlshash":"cb42cfd3c27646bc934566492eb84df54d5f6ea8d220a8450317a83f2a2c81f7a9bfc1","first_seen":"2026-06-23T23:35:14.371948Z","last_seen":"2026-06-23T23:37:14.38261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/06/cropped-android-chrome-512x512-1-32x32.png","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.573Z","timestamp":1782257684573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/cropped-android-chrome-512x512-1-32x32.png HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 12 Jun 2020 20:07:38 GMT\r\netag: \"4e5-5a7e8a0f1b680\"\r\naccept-ranges: bytes\r\ncontent-length: 1253\r\ncontent-type: image/png\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1253,"size_decoded":1485,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"77d2beb4ad8338e6db56a79eaad9f672","sha1":"ef56af7c0b280f8dea518155346ac00241b7f896","sha256":"3ecd4498fee53691883c241dc811c38cb3a70152850bccd6fb5c4d1aa31a0988","sha512":"12eedae8fe13a3c50ae506eab6fd27e9fa588f79407ad70cc9ce94dfa34d13cfb7f8ceef49233972a3b011a891a49aeece7b60c88a610346328bf3360616b9a8","ssdeep":"","tlshash":"bf219573b2864adad48982bf71e844101e262b590a7333557e11f89860b06ba1ac56a6","first_seen":"2026-06-23T23:35:14.372962Z","last_seen":"2026-06-23T23:37:14.408926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/09/Env-Haz-404x400.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.226Z","timestamp":1782257684226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Env-Haz-404x400.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 22 Sep 2020 15:34:34 GMT\r\netag: \"43e7-5afe8b431f680\"\r\naccept-ranges: bytes\r\ncontent-length: 17383\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17383,"size_decoded":17618,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 404x400, components 3","md5":"b8299664c81d93db09ce2f52c0b3b2bf","sha1":"d3226a474e1fb574f87507abc282b2164c7ee046","sha256":"57cabd9c024222cebd78637a608e73c15f70bf282cfee3411492ba39db784b32","sha512":"099e6a4215ee853080fe4bc98e504a81135f75f5603348481d3d89754f253fd0a0ac9f066cf235961ed7ddbcba7e0ed82ce907ce011f63bade73765df549d89d","ssdeep":"384:zv2AsTXLfnuuoJbp8BQm0UQHtXW35pXuWfrNm3bZz1S741JNVB0+S:zvwjqvV8r0LtmJpvNqZkoJs","tlshash":"5772bf332a6900d85960ca745840cafc210c484ebfb0dab956728ff67e589e73978bcd","first_seen":"2026-06-23T23:35:14.376094Z","last_seen":"2026-06-23T23:37:14.389271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/06/f2.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:51.256Z","timestamp":1782257691256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/06/f2.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 19 Jun 2020 23:15:28 GMT\r\netag: \"11c0c-5a8781193e400\"\r\naccept-ranges: bytes\r\ncontent-length: 72716\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:51 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":72716,"size_decoded":72952,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x273, components 3","md5":"6794c6992fc18f08f9af904474d01051","sha1":"82a56a48dba426fbb441c23aebed8544c136ef0c","sha256":"ada4c3c77f624ada8201c2ad364e106146109ad46eea473280e1b2b4113ff68e","sha512":"a186bffbb7fbbe3578befc1b39ff007b90bf07d9515b9aa7f86cedde7f9e5df515ad2c9fb2c533584ce062d1d058613cd6eb4d6d61b9bb5b6b1affbba140db30","ssdeep":"1536:3T6AQZByNKcriafpi1tZcoDKJcCM4IZw1p1e7nPKCZsJpaPpCGK:33jNKxII+o8fdjI5Gp+CGK","tlshash":"286302da6d2ae2bd9146b7e13937fd7f8cda8218bb52e410926a8d3cc3047560d86c15","first_seen":"2026-06-23T23:35:14.377098Z","last_seen":"2026-06-23T23:37:14.383216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":25,"send":0,"wait":46,"receive":23,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2014/08/2.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:57.973Z","timestamp":1782257697973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2014/08/2.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 21 Jun 2020 21:16:55 GMT\r\netag: \"10266-5a89ea54adfc0\"\r\naccept-ranges: bytes\r\ncontent-length: 66150\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:58 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":66150,"size_decoded":66386,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 800x800, components 3","md5":"7f8c2958fbf8efa2bc3ed4d5ec461e32","sha1":"7e513431b538da0d78290205ef7be882f26d011b","sha256":"5ea6bf74057567a01405d0f44bfd0f9aaff36d0fd6dd8f21c0d74e928240cd45","sha512":"8a482d2f371a61158cef25d0b4afc7490d2d26842e102b70aa6c81589cdcf64b0079a2ed8b932b998b478d535cc6bf7a22ce935b086941f2903e3a4939d956d5","ssdeep":"1536:UKKEqv4GQ8CWbu2ifs90jJ0Bu+6YCpfKX5i0WCxVw/S9xxNHD/W:UKKEC4v8CR2ifS1j6Hpfe5z/c/2NHbW","tlshash":"3d53f161d106cb11ff1dfb369e25a81c69b58f01b5666c27e6e912d0db0ef702cc94e4","first_seen":"2026-06-23T23:35:14.378516Z","last_seen":"2026-06-23T23:37:14.406273Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":46,"receive":23,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.204Z","timestamp":1782257684204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.12.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:17 GMT\r\netag: \"2a4c3-5b342e5235134-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 50298\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":173251,"size_decoded":50609,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19155)","md5":"9a4ab7d5bff29765df08e6d38c437b97","sha1":"bc612aac4cc65db4919281ba358999ca43f75510","sha256":"fb5bb847d63c20fa89fbd4ec8a08c5c4d5b37247fa9f926f45df00ab03406392","sha512":"6c9594b39546513fe840ed1b9e51f8ad060f4da79e01df82179678a8a4334a3c3301dab18d78526f561d1a17be5bdbc198ad8e84554919531dbe19cd6fa6d169","ssdeep":"1536:ksCOC5ERiYCaCojxVTsXUgTrAvdiknbsOvjH9EHDcjFlY0Cm9+fvZQa5XRhFVK+6:kFzEUQRikh5E4ju9XdgaCytQAcBzgS","tlshash":"cf04e749b251747a02ebb1f6a13f530eb2336428640280acf569d8e96dbdc8d6137f7d","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-06-23T23:37:14.404566Z","times_seen":279,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/jquery/jquery.min.js?ver=3.5.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.185Z","timestamp":1782257684185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 23 Apr 2021 17:53:57 GMT\r\netag: \"15d98-5c0a77ae5a5ef-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 30916\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":89496,"size_decoded":31227,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"b6f7093369a0e8b83703914ce731b13c","sha1":"d1889f5c173c2a4b20288f1f84758599afd346ef","sha256":"60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827","sha512":"d6aa7835d7b256b94ddd2f9d8db84484f0413ebc502762c1ba21cba7a392c6f550db2418cdc8bd6d1da6ed2cea55bf22473c778493d416b1a1c38e6ffdb8c79d","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakU:AYh8eip3huuf6IidlrvakdtQ47GKE","tlshash":"7393f9ddb2c6702257a720ba007f510bf236199d6c4d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-03-07T01:02:17Z","last_seen":"2026-06-24T03:00:28.493142Z","times_seen":13520,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/hide-price-until-login/assets/js/ced_hide_price_until_login.min.js?ver=1.0.7","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.189Z","timestamp":1782257684189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/hide-price-until-login/assets/js/ced_hide_price_until_login.min.js?ver=1.0.7 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 21 Jun 2020 21:59:05 GMT\r\netag: \"1032-5a89f3c179c40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 977\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4146,"size_decoded":1285,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4146), with no line terminators","md5":"6f6e806e8d0d6460f60f606f92d05ff8","sha1":"bb7cc30a9f9f0cdda8b14ff3ac0dbaf1cd1ec7a0","sha256":"ab3f34dce8eb579d7839c73ca0d9a275b2d34bb9470997ae73a8f404c5957281","sha512":"0d47319913a3481bd67a846191b0eb5f0959d40946d66e09efe41f63774e59c5d0cae1396c0cd214e4dc780305278125109436a6d0d5153c58036e39a34e0e10","ssdeep":"96:BAqCUkYi9Ga1GlNG11GlHGw1GleGWCr1GldGt1Gl3GD1GloenGM1Gli3jG/1Gli/:BAqCnn9lWcsftzCZysga6njhTU3x/zA6","tlshash":"2381bc06f95e9cf6007e703567bb27008c3bb8b766009b06b4a543e06f5db8a7527b39","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-06-23T23:37:14.396277Z","times_seen":57,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.202Z","timestamp":1782257684202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.12.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:16 GMT\r\netag: \"3e04-5b342e516127c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5106\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15876,"size_decoded":5415,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12801)","md5":"78f792b41dfe4097675e09e805529455","sha1":"57cc1e04e0235d54bc197945b9d0f167d9454244","sha256":"ebf0e8c538ae3047cf5056253a32daa65d23d8fb531ea05b0f0f28d58f828143","sha512":"a5526098676e24d20b1d237b5248413f75c3268ce12b406ce4990bc670d4fe98010f1297bd92b870f5ce4efe95460376620d57a871e39c97498b6cf211b60cb0","ssdeep":"384:0HFFhp3CyCEB7T+gyV/W1KB/2ZszFmau+u:ktFCEA/EK9Uam","tlshash":"5462970477823372962b209ddaab414e69bb6d1778056850b31ec6c49fb8f0c91eff69","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-06-23T23:37:14.400454Z","times_seen":2007,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/?wc-ajax=get_refreshed_fragments","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.599Z","timestamp":1782257684599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://safefire.jo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\npragma: no-cache\r\naccess-control-allow-origin: https://safefire.jo\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,User-Agent\r\nset-cookie: yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09; expires=Thu, 25-Jun-2026 23:34:43 GMT; Max-Age=172798; path=/\r\ncontent-type: application/json; charset=UTF-8\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":613,"size_decoded":1005,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c113715d39b869c627a12b570eec8773","sha1":"0e4466981904ed0222c07e64718e10b253fd49bc","sha256":"958cbd43103a195141c935e252c1c6dc605b2c5316e8fdde8605371dcc8fa848","sha512":"092c157babeed109acd10e692bd52777489e9f6f96d66518b7887ed8b223d417cb3fc44dcdd7ac18b6e3f4d3f4e48e7010fbef770eab14fdf7c264f69459c14b","ssdeep":"","tlshash":"2ff07861a0be89335b2a8dc2268e77a9b8de440ced65144611e8232403e0a947132e6e","first_seen":"2026-06-23T23:35:14.382809Z","last_seen":"2026-06-23T23:37:14.399229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.194Z","timestamp":1782257684194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.6.1 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:33 GMT\r\netag: \"bdd-5b342bec612df-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1086\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3037,"size_decoded":1394,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3037), with no line terminators","md5":"8bc2109ef48cabf7a26b73d7c3536c5f","sha1":"0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b","sha256":"8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8","sha512":"d40afe8509734cb8aa48cd361d68d614b2540a502a9ccffb76e6138de25648f8e1800d2d204111a6026246e1fa5d84e5b17772dda80f215078ae037452b34853","ssdeep":"","tlshash":"8a5172cef126f4ba07e22d81a50bdac45532282bf19665bc2489a1e14f78a461467f3f","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-06-23T23:37:14.390356Z","times_seen":38725,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/underscore.min.js?ver=1.8.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.213Z","timestamp":1782257684213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.8.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Apr 2021 12:28:35 GMT\r\netag: \"3ead-5c002008a360d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5663\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16045,"size_decoded":5972,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16010)","md5":"203eeb8dd53e84fb53b7aeffb562d825","sha1":"b4b4361a61ee78717bdcffe5c46ea79cdc3e04ae","sha256":"6cd0d6897b3d4779f7d88ce72531f22fbf75851b195fb14e6f3f23d051b3d1e9","sha512":"4ccb1643ee93b0245002fd7ebd31d515d9e67f00db3ed1ea506e09ce30e725dd1c49860f90b8036fb8a3f0554cfdcb89d7198a46267ef9db456d23f116896682","ssdeep":"384:R2rjVXPfHMYfSCSy5ZMdn01dcs/qQavic0cz68Be:RyVX3C8rEi+za","tlshash":"7e7261e835d2f09a57a3b4b4043f408bf23f2e656cdd6968c245e1e93cb980d8427f5a","first_seen":"2023-03-07T01:06:36Z","last_seen":"2026-06-23T23:37:14.39371Z","times_seen":2345,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.180Z","timestamp":1782257684180,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.12.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:17 GMT\r\netag: \"5712-5b342e5238014-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5392\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22290,"size_decoded":5687,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (22286)","md5":"a94d0f7c1704d0419d7aae4ab5879fe7","sha1":"3c754672ba07b4bbf59c0783937c0a0bc2d1099e","sha256":"62900addeacd73eae8de27a0ad2b35077f41419eada98e703e22c786b210c826","sha512":"b10ef1f067a6a880231ec8659a4c793476f69ab4a88daa59f5957385b0165a70fa044b079261a45637dc2bd9c58c44aae3d9c2bcef5ace5a288428af3e039fed","ssdeep":"384:4RYd69WpuyECjm+iwvMga6vI+/QNF/7OIQjw8RlS1Bkn0QSYczlPVCfsGY:4RYKWhjDkgae/Q77OIQjw8RluBkn0QSR","tlshash":"50a2b772f2b12418903bc321f8d1bbedb4a8e565f39706faec527625c7891eb163164c","first_seen":"2023-04-09T12:44:55Z","last_seen":"2026-06-23T23:37:14.38479Z","times_seen":184,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.429Z","timestamp":1782257684429,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:17 GMT\r\netag: \"1988-5b342e5237c2c\"\r\naccept-ranges: bytes\r\ncontent-length: 6536\r\nvary: Accept-Encoding,User-Agent\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6536,"size_decoded":6778,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 6536, version 1.0","md5":"21c4c69602dadee988f10c502b44d1c1","sha1":"7d28ed1775492300f859296ef85ce371c26a6ff3","sha256":"815e5395652e03d7051b767baade615d279fe3644bbf8f8bbdc54a8b9573be67","sha512":"12a547aad3290d47833b218958aa4400f95c0ccb559126238768438ce422339af2e86ef9b289a5922cd137afd17f68fff95bb08b8a8f2b6440ad9f5bf0a4caa8","ssdeep":"192:vSkj+sVFyH45jc5aU8pOTsrt9xt9E0EToWx4nVc:akjkYlBUGrtft9EzxMc","tlshash":"6ad18e1a1d41bb15fe24973bec378e4b1f99ce63c9a7e174738d48b432041967024ae5","first_seen":"2023-04-10T03:44:24Z","last_seen":"2026-06-23T23:37:14.394794Z","times_seen":1152,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/08/P1000682-300x300.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.530Z","timestamp":1782257684530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/P1000682-300x300.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sat, 08 Aug 2020 18:50:27 GMT\r\netag: \"6275-5ac6231dea2c0\"\r\naccept-ranges: bytes\r\ncontent-length: 25205\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":25205,"size_decoded":25440,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"8d7c3514a7a8a9deb7d31b096eb0eace","sha1":"ebc0a18cbea0bdec709b7021a2b4ff580fd59890","sha256":"b909d57249d87a2378596f3f3340e33f7ecb9f3ee5a1f1fa4633a28530e9eb72","sha512":"e95659fe826c9fe8aea85a22d9c3b3dbc90382fb6bc429d2b3cf95ac74bee25e6f51cd8d45d15489a7a29c74198f0f4ee94a803058b19023581930e508c20ecb","ssdeep":"384:Hdu5GrDR0yyTqVM5kouiElqQaIOlCB0DFttASLkCpr4BKFCqPM1Pe7ZSnnfKbA:HfPa15kou9+IJ0htJtcI81mo1","tlshash":"03b2e185bd9752c59df40e3248713172bbce9e0e68743a035d34d6668240ec778f69bd","first_seen":"2026-06-23T23:35:14.389229Z","last_seen":"2026-06-23T23:35:14.389229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/hide-price-until-login/assets/css/pop_up.css?ver=5.7.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.175Z","timestamp":1782257684175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/hide-price-until-login/assets/css/pop_up.css?ver=5.7.2 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 21 Jun 2020 21:59:05 GMT\r\netag: \"70b-5a89f3c179c40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 677\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1803,"size_decoded":970,"mime_type":"text/css","magic":"ASCII text","md5":"2d5dd3fa8c3b56d603c97024eea6f899","sha1":"374d511ef7f67233315415355ba2a275fb0ddb51","sha256":"ec2cd8b025b7e5cb468f59aa959339d87de8617ca9cbfff91e91b5f2ea64ec75","sha512":"2f00e0881cc8cebe308b1cea114ab01c9e6147ed7c46d5e5218842f68c7e1d50b0a59bd071a69f7b9b11526a47d432582f9e9489d3bf4d28178df55714a7ea58","ssdeep":"","tlshash":"2631df57da81c91a502f24452fd73762767b01027b1f6e77ba5862bca3c43c257732c9","first_seen":"2023-05-17T20:15:23Z","last_seen":"2026-06-23T23:37:14.383796Z","times_seen":49,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/yith-woocommerce-request-a-quote/assets/css/frontend.css?ver=1.5.8","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.176Z","timestamp":1782257684176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-request-a-quote/assets/css/frontend.css?ver=1.5.8 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:53 GMT\r\netag: \"714-5b342bffd8792-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 604\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1812,"size_decoded":897,"mime_type":"text/css","magic":"ASCII text","md5":"ac982d984bec90b3ce7b4260fcec8de2","sha1":"54b1f4a5911acff94395881bd1bdea443717ca33","sha256":"9f8177ffb2a76b08d13dfc5ad6af15a2171dc7b47ff61be05b84f6f1da4c7b7d","sha512":"c73110a1cf002745d4069fa8739ac38ac20e8f5a206c2d78dee60283e248bb86a080f54b71419039edf3a15f027eb7b23c0a84563ae21cb1c21db108ed9577cc","ssdeep":"","tlshash":"74317b5ec6751a06088681783eacc3be3690701b469eaa6c7c5da0cd6f1dbb40272fdc","first_seen":"2023-05-27T14:17:48Z","last_seen":"2026-06-23T23:37:14.377344Z","times_seen":31,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.179Z","timestamp":1782257684179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.12.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:17 GMT\r\netag: \"23a2b-5b342e523745c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 28881\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":145963,"size_decoded":29178,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3e685ced296ba85cd2765ea1167c94ab","sha1":"03c3b1ee55e0bd43c9ff9203ef4e28eeef724dc3","sha256":"497b66a80f838d9eb5f619d5af58ae6f8fa8f5790437680a5e87a41cad2f5c19","sha512":"63b6ee226ed5e8a3892e3b3aaa41f68a2355a8e223398e6c03c0d45a12e1ca3c86659f4f60bb5f922dae75edc59196cf3f817c76a3cf1627803a83694607e39a","ssdeep":"3072:Qp1ZZX4YHDC8KL1CTXYJ3qHrx32HLMm06zpLQtXMuC3Im8TXHLcxbN0AgL6opP4y:NqHrx32HLMm06zpLQtXMuC3Im8TXHLc6","tlshash":"5ce30862f284141ca117c315e9c5fbac723dd161e3224afff563a6398bc61ea0635b8d","first_seen":"2023-04-09T12:44:55Z","last_seen":"2026-06-23T23:37:14.403427Z","times_seen":216,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/yith-woocommerce-request-a-quote/assets/js/frontend.min.js?ver=1.0","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.201Z","timestamp":1782257684201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/yith-woocommerce-request-a-quote/assets/js/frontend.min.js?ver=1.0 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:53 GMT\r\netag: \"f2f-5b342bffd83aa-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1184\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3887,"size_decoded":1492,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3887), with no line terminators","md5":"2a738ec5c31a9ca751422ce1bf7dc0c6","sha1":"7b2555ef0c15fe3b847170a7a403052b4e19c8f0","sha256":"d3e0251dfaff92f117b11633aff1511a350bc6be5657d3ccf40293754fcf942c","sha512":"b22b4ea158a8df5d87915c532cab733716de313282887dcfe24d806de315783a15a19aa75998767a7bf50ca5660eb1be1d15b863aba69f5e5693c7d5f3af3efa","ssdeep":"","tlshash":"ed813397f1b6247789ffa7223073fb596023e97882b19500594ea0906f34fc81332a1e","first_seen":"2023-03-10T20:17:40Z","last_seen":"2026-06-23T23:37:14.396757Z","times_seen":13,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/hoverIntent.min.js?ver=1.8.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.204Z","timestamp":1782257684204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.8.1 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Apr 2021 12:28:35 GMT\r\netag: \"462-5c002008b3faf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 492\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1122,"size_decoded":799,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1087)","md5":"1cb41e780b9b6dbbf6ea0a3882da09de","sha1":"9603305218e09c3c10be9a95b0ef8c7eaa5245ed","sha256":"495d2f8c8b7f1bbd664c2c10c086a644e63e4934b9734813b27956a34709eea4","sha512":"e20bbc5101c976e3e5384f369d13635b06b70ce3ac45a91a054ad1fbf9d3781b8c75659640c43b79af62918e9f29302b7baef34bed79b6b7977c361461a9735e","ssdeep":"","tlshash":"00218c8e1b86ac8a2342e124e53b38bd7f731e17ed8105567373648e1fdde745302a69","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-06-23T23:37:14.397219Z","times_seen":1170,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/09/Vehicles-400x400.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.224Z","timestamp":1782257684224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Vehicles-400x400.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 22 Sep 2020 15:34:57 GMT\r\netag: \"3b6e-5afe8b590ea40\"\r\naccept-ranges: bytes\r\ncontent-length: 15214\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15214,"size_decoded":15449,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x400, components 3","md5":"e485ed2c99e239f869f4758cb9a6b393","sha1":"9902e557b0f03ab22cffc0a0b55486af5b95be12","sha256":"107f945b40608e6eb61dfee90d19196fa22658f5b2a89d4a9571afdf7d688300","sha512":"403d8a95b150e6d4a5affdb8ba473deeb6981d64778dfbf02923e6b100dca1e1ee3466b0de2d7f9a7f472c696a2c41f3a90c72e10d25421a877fa80c5be6277b","ssdeep":"192:/naE8mIWcf9KrwFPPQa+RkY5S68J1fISnomU/21/ptWV76A9Zp47uyal/URjF/vi:vaYIb9KrwFPPLUCp8VrZial/ALMXb","tlshash":"a162af034900c7b7101d9efe766b7c18ba8f7b6ba481aa959d37ca877f025c819851ec","first_seen":"2026-06-23T23:35:14.399961Z","last_seen":"2026-06-23T23:37:14.400931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/css/dist/block-library/style.min.css?ver=5.7.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.168Z","timestamp":1782257684168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=5.7.2 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 23 Apr 2021 17:53:57 GMT\r\netag: \"e33b-5c0a77ae6ced1-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 8685\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":58171,"size_decoded":8980,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (29677)","md5":"b5d1e2c87b60ce71c3fd90ca27073250","sha1":"b65e3890ef1565f98971b344b4c85866a5f33860","sha256":"2cd9de3dd26246204749cff259bc34e8e6a47ae5d6e4528b9b28c75d68d50cde","sha512":"0698905368e41d22f1026dcc64f716be70bfde1bc05bc85918242af9c30351166726b4dc4426898e9ef0428ef0a2f875d8fed54bbc8b925289363a39fabba165","ssdeep":"384:T2vicPcBZDn/KRM34XMX6cD+d+AwlVHI+LQ3R+T55GPh5IIINXTXlx:AXMX6E+d+AwlxI+LQ3RC4h5DwTVx","tlshash":"83431f2413b5ccf935afab3c8d9de248e146a981c54a97e7f432e060624c95a5cf3b1f","first_seen":"2023-04-05T07:33:55Z","last_seen":"2026-06-23T23:37:14.387564Z","times_seen":4473,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=3.4.0","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.172Z","timestamp":1782257684172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=3.4.0 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:34 GMT\r\netag: \"2831c-5b342beddd12b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 18269\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":164636,"size_decoded":18566,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"602043eb990f4e1686269f8d9466044d","sha1":"b8da413859c7d3e2ed11d719adeeae80c4b148e8","sha256":"9e569ace6529bf12e920560611ad09f8debb09c1cdb7f97be7bbe05ca5586a95","sha512":"574c4bb34c665cba41a0de2db42db26eab001489b2b4479b4410bbd4172b14083be9397c5069b89d5837bc067a7041cea023cb9ba9d5b9d46a72515500fbfb18","ssdeep":"768:IO3oBvkYYWAOTQj9QaLbw1rvW5d4xDX++5SggHY/9jj4Ml044TT6il:/qpWD4RX+k/jnil","tlshash":"37f3da7187301ce918968e254fb1ba8370f492c1cb8305d7d487d89877ceaa94ee67db","first_seen":"2023-04-10T16:50:07Z","last_seen":"2026-06-23T23:37:14.393225Z","times_seen":318,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.196Z","timestamp":1782257684196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:33 GMT\r\netag: \"736-5b342bec5dc2f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 981\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1846,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1680)","md5":"943f6eb962c25bd965e0f0e5a284fcd0","sha1":"b050a98ebaef01d7597bf8c1acb995c0ef3bcbd9","sha256":"50de09b0bb8d0ac656aa9b3a1e4ef58a3f2d1abd734cad68b0e12191e9d215ea","sha512":"40d551836cb4fdce9c4411fc64cf65ec29854dcc4bae0782f7da1518d552bede6c14ee876ad1f25ffadb4a97efc7e97cb0cba877eca9f9e8cbb3e3fed7d600d2","ssdeep":"","tlshash":"ea31a5c9348568cd068f1221133f1a8ff07c8e49adcde699431de9f17934467861afe1","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-06-23T23:37:14.390868Z","times_seen":6610,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.207Z","timestamp":1782257684207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/woocommerce.js?ver=3.12.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:17 GMT\r\netag: \"3967-5b342e5234d4c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4768\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14695,"size_decoded":5077,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8876)","md5":"00341a413e6de74305c4dbe74be6d170","sha1":"c1c50d8a96a45d9b550142a00d4edb0876d1c4f3","sha256":"bb20cfe2d068c2795734f1b59e81f8e1315e00bc6b68a4d3275d4cbbb5b32c3b","sha512":"3e74c6d5958645d861d2d66bba62ecff33afbd8a1f65806b701c279fa68d270a2405cc91ea642bebe3a5c4b48483ae61a1599459831e9bd23f6c9f13fa48a79d","ssdeep":"384:sMb/5MqIQspO2veLzxgzV1GkqnOSKLMQvh:sMb/OqIQspO2vYzxgzV1GkqOSKLMQvh","tlshash":"4e62b52af27020ed15ba20e2b83f63a471b7716c754b805cf17aa4d6582dd5c2633e7e","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-06-23T23:37:14.386441Z","times_seen":205,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/11/slider2.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.661Z","timestamp":1782257684661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/11/slider2.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 08:45:17 GMT\r\netag: \"5197c-5b343ffa9865e\"\r\naccept-ranges: bytes\r\ncontent-length: 334204\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":334204,"size_decoded":334441,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2019:03:15 12:06:39], baseline, precision 8, 1365x650, components 3","md5":"f8ace42bc855d06ecd938fe010da1dc2","sha1":"17a403a3b4afb5bff6096e185f2f579427f8e63e","sha256":"5d62c00a38cdba32d90dbff7b470ca6a03fe776c2e8f7f5db059764447b0856b","sha512":"77d1a23e90d9e6c21b163f06f81c74a77aa2eb8978c9027539d78f337fa7dc88ed5f9ec99d6131c404d183d3c5db2dedc4d00e24500086904ec503800caf26be","ssdeep":"6144:Bff1xC+fQIDplN79eam5oTJN/FisIs5xdMw0X31mwPYQXzo6vFXkE/3sLlLE:TJfQE54am5wJx7I0Mw0XFbYMdXl3sLy","tlshash":"ed6423302a93eb41e6d01b789017c5d66f260bba129fc89df84f788b3b12bd4751d6c9","first_seen":"2026-06-23T23:35:14.409179Z","last_seen":"2026-06-23T23:37:14.376557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/09/Safety-403x400.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.222Z","timestamp":1782257684222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Safety-403x400.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 22 Sep 2020 15:34:55 GMT\r\netag: \"3e67-5afe8b57265c0\"\r\naccept-ranges: bytes\r\ncontent-length: 15975\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15975,"size_decoded":16210,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 403x400, components 3","md5":"f4391b0da1ac92cab16a0c8dfc00b83a","sha1":"8fc3c02b2fb20c6e30c554d4a9078885632305d2","sha256":"23efa893e58177818967f0fd5c4f3ff1b46a9666d1ef6feab3b9632b48651115","sha512":"f097643f41b694ea0e34ddaab660c5358da327aa3bc96a6bb708168ac4ab1a81ebfbe6ce01ff9df2af44865c0169fbe888acb3578940c965d39d3ae6312c823f","ssdeep":"384:gCMChTjr1nP+nUx5sg2niR/ZD4ViEXQVBCl03ztJJ6Pc:g7ChT1nP+UxWg2iRD4aGl03ztJUPc","tlshash":"7b72c0b355a3f22a5235bf6eadde2cb7d8cb874e8641de135231a730e734ae00494198","first_seen":"2026-06-23T23:35:14.4117Z","last_seen":"2026-06-23T23:37:14.392436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/10/8-400x400.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.227Z","timestamp":1782257684227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/10/8-400x400.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 02 Oct 2020 14:15:21 GMT\r\netag: \"41fd-5b0b0c34eb040\"\r\naccept-ranges: bytes\r\ncontent-length: 16893\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16893,"size_decoded":17128,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x400, components 3","md5":"afc0ad542437f43f6caaf6b659a073e7","sha1":"223b2ddf163e8b2408dec76268a342eb0b78dee6","sha256":"d7f768509ea3bb80bf86547ebdd65d060d00a785cdaeadce103a44a915c75af5","sha512":"250fb9c056d693a5492cb9a9ad3561723d8fc09591c895487b82be3b701ea5564bd5abc278295320709d65c20acc12b99091522d5b6a2477414efc5e18ae6378","ssdeep":"384:veAu1aKr5ZlOvGXAef0QfOh4V14Bkq8ZAVVk0lXjfo:veAu5jTACGmV1rAQaXDo","tlshash":"2572bf0f4f1a73f2484e5a2ebad23748214338e1b9155b5469f9fae451070ecf8bd9b8","first_seen":"2026-06-23T23:35:14.414504Z","last_seen":"2026-06-23T23:37:14.381986Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T23:34:42.804Z","timestamp":1782257682804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlink: \u003chttps://safefire.jo/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://safefire.jo/wp-json/wp/v2/pages/60\u003e; rel=\"alternate\"; type=\"application/json\", \u003chttps://safefire.jo/\u003e; rel=shortlink\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,User-Agent\r\nset-cookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; path=/\nwp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; expires=Thu, 25-Jun-2026 23:34:43 GMT; Max-Age=172800; path=/; secure; HttpOnly\nyith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09; expires=Thu, 25-Jun-2026 23:34:43 GMT; Max-Age=172800; path=/\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 23 Jun 2026 23:34:42 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:5.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Underscore.js:1.8.3","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Packery:3.12.3","description":"Packery is a JavaScript library and jQuery plugin that makes gapless and draggable layouts.","website":"https://packery.metafizzy.co/","common_platform_enumeration":"","icon":"Packery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.3.2","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:5.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WooCommerce:4.6.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]}],"data":{"size":104233,"size_decoded":19587,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5961)","md5":"9adf80232637534f5e5fb07cabd9e278","sha1":"8b3b670bd0fbd3e242aab3bae3661b630a3b3420","sha256":"0ba5aa2638663b4e87e82711ce7babc41461145fcf3f1e018d041148c748fd32","sha512":"94166ed5cdaecada75da98fe9e00f0cdbbdb9da64c6ab831cb8a12c6d1d660e395ecf1e89148ee986475e310ae7bf44a1553273aec6e371923c9b8b8d074d5dc","ssdeep":"3072:VIFof2Nj/zGlEldonq4SXE9pfukUi1kqm7XwpHdAXhBhBnO/dtMF:8ow/alEldonq4Sx","tlshash":"3aa383e2c9fc383b40422296555ab64df6e39103cf5a0951b3fd9e9dff85e804aa364c","first_seen":"2026-06-23T23:35:14.416605Z","last_seen":"2026-06-23T23:35:14.416605Z","times_seen":1,"resource_available":true,"data":null}},"time_used":872,"timings":{"blocked":-1,"dns":34,"connect":22,"send":0,"wait":743,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.198Z","timestamp":1782257684198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.6.1 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:33 GMT\r\netag: \"b7b-5b342bec6227f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1040\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2939,"size_decoded":1348,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2939), with no line terminators","md5":"63376875b85b8beb4dbe733e23544e75","sha1":"f3ae1acd9a4968f5033deff5f873ff35f9f79870","sha256":"dc115bfea8a92ce5f9bc8b58de195488451e194042569132f08cfe4436737c30","sha512":"4977eb5f2e101cbcef8f23c5ad5cadfc14972f522c9939d9b82adc372e27fe6dcecf7329211178a8d7285ab97b0157eb829f40a7060fc453ee395c9bf3df6679","ssdeep":"","tlshash":"3951241fb070cda519f2287e617a718522329965b6098b30b025d8e41eede4b1777dce","first_seen":"2023-03-07T01:41:43Z","last_seen":"2026-06-23T23:37:14.404087Z","times_seen":786,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.216Z","timestamp":1782257684216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=4.6.1 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:33 GMT\r\netag: \"3516-5b342bec61e97-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3636\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13590,"size_decoded":3945,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13590), with no line terminators","md5":"3a9a643376090bb2047415a3ba8b7ac8","sha1":"dccd8f3f859c7b6b5d294477ce8979f022dfdfbb","sha256":"368ffbbf736984505a030a218af955847c7d817bf1e22b42bbd48d10e1464f16","sha512":"640feb24e61b30e16d67f34c90a3087cb00ee2a08907dafe608b7a8a6de6abc9e8fdd52fd071e5ff58f9b8e2472d57c72e75cafe81a4dc9ccf4dd5e421228716","ssdeep":"384:oS67jwxjhziCogOKDNH0Wnguw0/GXWnrZ+wxmeKyD96hRc3:oDwHdogOKDNH0Wnguw0OXWnt+wxm9yDF","tlshash":"8a525ee5b2331c537a6f51e7948fa00c7534e8386252c6b99c9ae7b3583ce406363b1e","first_seen":"2023-03-07T12:02:39Z","last_seen":"2026-06-23T23:37:14.39194Z","times_seen":76,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/09/00-orange-300x300.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.531Z","timestamp":1782257684531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/00-orange-300x300.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 16 Sep 2020 14:51:52 GMT\r\netag: \"29e8-5af6f6870b200\"\r\naccept-ranges: bytes\r\ncontent-length: 10728\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10728,"size_decoded":10963,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"55d12f9c866fcb2e277357b13a95e0ce","sha1":"e15a5dfebe83de22961407d960f7aa60613a00c0","sha256":"296d4f02bc3529ceff5953b8bcbc8bb3c0c56133f8baf88547ca96abd3e9d282","sha512":"e92cc57cee1634c5d66fd05d3e2f0ce08ba992c5713723a5841eef9f46862ed1213c6acaedc6402bb93536eacf763cd0d9390bea951699b6c3009cfb8a5fc167","ssdeep":"192:/f0jHZxKWDroK/JdhCQWgYLl6ETiAiEnuWB62EyoLJqTNYxU:H6ZMikIhCQWgYJ3T0EnuWEFyDRYxU","tlshash":"8c226d0b4941db966439dea2790b5f1d9aae7f40c904afc794719b8fbeb04c64cbd10c","first_seen":"2026-06-23T23:35:14.422262Z","last_seen":"2026-06-23T23:35:14.422262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=3.4.0","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.170Z","timestamp":1782257684170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=3.4.0 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:34 GMT\r\netag: \"b97-5b342bedd86f2-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 1034\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2967,"size_decoded":1328,"mime_type":"text/css","magic":"ASCII text, with very long lines (2967), with no line terminators","md5":"5a625f7100b0b0a4fde3444e3329311b","sha1":"3718ad70c3779d2a9579b752024316f441a0fe1e","sha256":"7c489dd2e13acb8940f20b68b9ae2225c53d71643b08609834043c174c4cedaa","sha512":"a90ae4866a3471406d3fa5f9b994d416675bc60b9e62fc76bb627f77b206f4408d28aecb614a4ffbfe6170eae40e33803e1d635d9dfc6e8c799b73d5575d6077","ssdeep":"","tlshash":"2f51633010101436e5ebe72e97b0bd8390ed95c2cd7396deb02272a887cb44e202b2a7","first_seen":"2023-04-05T07:58:19Z","last_seen":"2026-06-23T23:37:14.399833Z","times_seen":1415,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato%3Aregular%2C700%2Cregular%2C700%7CDancing+Script%3Aregular%2C400\u0026display=swap\u0026ver=3.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.183Z","timestamp":1782257684183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css?family=Lato%3Aregular%2C700%2Cregular%2C700%7CDancing+Script%3Aregular%2C400\u0026display=swap\u0026ver=3.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 23 Jun 2026 23:34:44 GMT\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":1248,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ca6c0c5c5201f461f43bdc0534fdaa9e","sha1":"082bdf85568b2ad9014e83f24871908eca10c4fa","sha256":"42e869882dd1f836bf9ef53f70aeadfbdf178c0845f31e71ab35192628de810c","sha512":"86dd785ada210a6a0d145339322bebf818e014c24d135066abd6fd3db740dfc5dcc06788dcb7f1eefc2adb8cc0e3ae8a1d959cfbfd9dec5fd3ce2bb86d71e391","ssdeep":"","tlshash":"9951cc91086be504db830cc213cebe36ee0e61516455d939affe18c8fcabc656361b4d","first_seen":"2025-09-20T17:04:02.546002Z","last_seen":"2026-06-23T23:37:14.406958Z","times_seen":1134,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/09/Aftersales-1-400x400.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.229Z","timestamp":1782257684229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Aftersales-1-400x400.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 02 Oct 2020 14:01:13 GMT\r\netag: \"497f-5b0b090c33c40\"\r\naccept-ranges: bytes\r\ncontent-length: 18815\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18815,"size_decoded":19050,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x400, components 3","md5":"cfebb6a53e9974e12309e74d6bfcb1ae","sha1":"31c3006f46d92c60720c1e6a3d4633d3d88d98c4","sha256":"b8c34a2d4a2c0d9d9ebba891103fc859b99f75dd1c817064beba63cb7946f182","sha512":"5074be9e9e2b73699c47e1aad9d40b59bd07dbc40a50f2ac08d053c8c2e6ec536cce497097fd97a930c9b380229fec8d2b2072db86550c60d5c2d36bd5b1972f","ssdeep":"384:vvg+gVzBExJdSeXnlsAB2PRNtNzxYpcLYO2/u28PheDwgzg:vv/gFEvh8TtNes12/H8b","tlshash":"3582be2edf8b322995093c41e0f608bcaf19505210c51e6a16b6de90b7f4be58cdf66f","first_seen":"2026-06-23T23:35:14.426657Z","last_seen":"2026-06-23T23:37:14.402198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.431Z","timestamp":1782257684431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safefire.jo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 10:07:19 GMT\r\nexpires: Mon, 21 Jun 2027 10:07:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 221245\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23040,"size_decoded":23853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-06-24T03:18:17.650591Z","times_seen":172682,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":22,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/safefire-theme/style.css?ver=3.0","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.182Z","timestamp":1782257684182,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/safefire-theme/style.css?ver=3.0 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 22 Jun 2020 08:37:57 GMT\r\netag: \"416-5a8a828db8340-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 496\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1046,"size_decoded":789,"mime_type":"text/css","magic":"ASCII text","md5":"e13f2360e8cb51985dc7084c3402b32f","sha1":"7c7aadf4ec0a4ad5e0ee418d4750ab1779be4c5b","sha256":"06776b6147a56c6df9d190d8eab548930d2fdfad37b421371c367ca4d4183666","sha512":"f8c7e6dd2a56b578343f82d245bc64f3b7f469ec95d5bc15572432c760b60c7b9fc273f7f769e1ad01074c71031d1bc8e370972731009853c734e19f93b44194","ssdeep":"","tlshash":"67110e52f5ea6c006225110f55af93e97b2e140e7208cc7436943b0eafcc2530670f8d","first_seen":"2026-06-23T23:35:14.428396Z","last_seen":"2026-06-23T23:37:14.388567Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.193Z","timestamp":1782257684193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:33 GMT\r\netag: \"255e-5b342bec5ebcf-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3533\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9566,"size_decoded":3842,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9172)","md5":"81b2be18696c4dfe620f7b6d0d75a566","sha1":"0c3cd7bdf58a65b07e17be39cfe4e386571bb4bd","sha256":"120aaf6681ca6d34a40c559779f0a0038582a79fce1b868ff901c94d27c89c72","sha512":"d6234549918a770a055717c9fd1ff4b162afc7cdb9e72459883bbdb5e04532d7af5295b2f58a6f8a70250efee55ab544fba9595c85001c204516d907937d8c9d","ssdeep":"192:x92sLIzSavikwgpTZlpSjjF1mk3eJ4Nr6SWCxjlRYifT7TMcPvE:x9bEzSa3Z7lMjF1mk3v6wjlRYiff4cP8","tlshash":"9912e96830f3605b90b3b1506dfbe78f73b31638658799c1d0ace42929acd7a3626f15","first_seen":"2023-03-07T01:02:57Z","last_seen":"2026-06-23T23:37:14.3854Z","times_seen":7087,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.6.1","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.197Z","timestamp":1782257684197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.6.1 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:33 GMT\r\netag: \"7ff-5b342bec6227f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 785\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2047,"size_decoded":1092,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2047), with no line terminators","md5":"72095aaafd6f6cf97cf0187d3de394ca","sha1":"fe5f864f22ad4a794466c349ba9472b6f1922cc6","sha256":"946e3771efeabcf9a23d88089ce6ef6cb94531e36775004483fd8e237275dc29","sha512":"148c0ea4f3a6d1122ccb5fe745dfe5046963ddda92bb3ae7879ff22b0166ee2101c62c8fa262b70f9c885ac2ce333a4e35d8b30e54ab3d6dfae993b7ab382e10","ssdeep":"","tlshash":"0941ed07f4316d7221eba6b518df99842623063d4810850135aacb6c297a9cf6a3bf7e","first_seen":"2023-03-07T01:03:50Z","last_seen":"2026-06-23T23:37:14.381497Z","times_seen":1749,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/09/Firefighting-398x400.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.223Z","timestamp":1782257684223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Firefighting-398x400.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 22 Sep 2020 15:35:04 GMT\r\netag: \"43f4-5afe8b5fbba00\"\r\naccept-ranges: bytes\r\ncontent-length: 17396\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17396,"size_decoded":17631,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 398x400, components 3","md5":"8af234bc095653c108482f114c437f8a","sha1":"81ffdb3aafb7fc58b3783cce45572a2bd7ed6539","sha256":"c6be34bd16b3d91cd775b567069d74015a5f572d123fbc74b5bd0f59ec6378c5","sha512":"a4ca94dcc07bb1590ec81384865344debfe30e2e9f139e06391e5c1ffedd3d4858ea020bc46df6bd46ad9544e941db7e912a25e6cc5cde2d0b8026f9f6f7076b","ssdeep":"384:x1dWRlpHKS7GOXYiVHaRNrux72Nw95ykNMAYNeWSXGJjix:xrErHTrtHGrrNz+YNzSX2jix","tlshash":"2f72b06769115bc36e1c8face9020dab67d0682df499257909369cc7ffe02d94d3d02e","first_seen":"2026-06-23T23:35:14.43071Z","last_seen":"2026-06-23T23:37:14.405612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/08/csm_mariner-250-b03_693b137698-300x300.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.527Z","timestamp":1782257684527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/csm_mariner-250-b03_693b137698-300x300.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 23 Aug 2020 10:33:38 GMT\r\netag: \"37e4-5ad8900bc0480\"\r\naccept-ranges: bytes\r\ncontent-length: 14308\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14308,"size_decoded":14543,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"6b740c08a1294190949daf2fbfaab3c2","sha1":"102e6955f3a2e214f4c56b16d5e773a20b186b53","sha256":"f934368f2d4c90497f73705eedb1f32c709e1b62476baabbd6d456743835a32b","sha512":"f4e3db047d672e87b725b9542ababcb37da2b893561d29652cfa1e9edc96c16c4fddd83fe41c27ab474e83807f67cef137d87d2ca77658850b5c49f1cce2cc54","ssdeep":"192:/fxrkAarArbIqWlXxHgPvzS90D6R+jXgCFBhVOUNJETUUQnt/x9JHC5nWyQRBHXS:HJk7rA4qAQ00DJX1F7VOUNsK1lHC8lLC","tlshash":"b752bf37c812d1a89e8dbf6d076848c4f3bc39556d10a6883879d6f29b349c4797475c","first_seen":"2026-06-23T23:35:14.438775Z","last_seen":"2026-06-23T23:35:14.438775Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.188Z","timestamp":1782257684188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:15 GMT\r\netag: \"37c8-5b342bdb9773b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 3951\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14280,"size_decoded":4260,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f89263c0c2f24398a1df52eead69f5f8","sha1":"850e9cfb1680eb1df4365889724e69f38df7bb9e","sha256":"125ec330f66081e7dc9f2814e9ec18f4e2d0baa1936d497375eedfda7ac12e5c","sha512":"0a9435b57e67be8140ae38b643a6d4a2d66f83181f54433d13000a637d76eb8eae95716da2f18f692d36bc4f2c0dc4a3390c0da3eb951df2acbf2d0e6874bb5c","ssdeep":"384:Y0M5w2j16xNN7FU2CyuIC+VhB2Dv2lyAiVK1IU4p3S3OVKEkl8bXnC:R8Xj16xNN7C2T6FU4p3ZVNC","tlshash":"625274c8f3ee1185c67630b85c8fc1cd6b7e6472e4421aabfe5c545028d88785b25f2d","first_seen":"2023-03-07T01:02:58Z","last_seen":"2026-06-23T23:37:14.374459Z","times_seen":3639,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.428Z","timestamp":1782257684428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safefire.jo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Jun 2026 02:01:59 GMT\r\nexpires: Fri, 18 Jun 2027 02:01:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 509565\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-06-24T03:18:17.648195Z","times_seen":237155,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":18,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dancingscript/v29/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Sup8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.433Z","timestamp":1782257684433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:18 GMT","end":"Mon, 17 Aug 2026 08:38:17 GMT"},"fingerprint":{"sha1":"C4:91:D1:0E:C2:A8:68:24:7B:00:2B:4A:EB:42:41:E0:29:E2:4E:A0","sha256":"68:29:56:08:39:D8:99:7B:20:CC:14:D3:4F:4D:D2:55:68:A6:27:DC:52:E9:7B:CF:CE:6B:D3:13:BC:97:65:C1"}}},"request":{"raw":"GET /s/dancingscript/v29/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Sup8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://safefire.jo\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 01:48:15 GMT\r\nexpires: Mon, 21 Jun 2027 01:48:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 251189\r\nlast-modified: Mon, 08 Sep 2025 18:10:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23816,"size_decoded":24629,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23816, version 1.0","md5":"de756367f02c06e5df1de095a985aba8","sha1":"b3c76332c9cb3c6767347c749f9aaab9420fd51b","sha256":"570e4265bbcb453353ce2fdf63d179332d8daa92691d567547b8a383f3b46c3b","sha512":"441ae8b06e28c499e705f6f5f7b5fc3d2c26f58c32d235b9b332273b0fa4bef9e95de830f9a86db9931e1b011afe9d7554f2a36f26514f9bf9f6db2b499705aa","ssdeep":"384:Kg2hUDuUejI1PimT++NZKvSNUjRB4s/j443kHrzor+Nu8ExKPhuItM71:z2mDuUaaPimT+ZVjRh/j44KrzhNrE71","tlshash":"04b2e036f6e16231fafd04a56417b73a21a1bac19b70f7f2f117a7c8645c078894c613","first_seen":"2025-09-09T04:53:51.125039Z","last_seen":"2026-06-23T23:37:14.3781Z","times_seen":1781,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":28,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/08/DW_ARC9.6-LS_LR-300x300.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.525Z","timestamp":1782257684525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/DW_ARC9.6-LS_LR-300x300.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Tue, 18 Aug 2020 21:10:24 GMT\r\netag: \"28fc-5ad2d50c87000\"\r\naccept-ranges: bytes\r\ncontent-length: 10492\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10492,"size_decoded":10727,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"1171061f9ae5dddedccc8f97caa6a3e1","sha1":"4aa9799c0a80428f4ace840d3aa0b4c29b937f3b","sha256":"7b76a33f2ba41f1945ffabccf65e05725214292786b2aacaab2fd7a95a6e96ac","sha512":"a553380678799d173745f29508ea27c8364ee21e36bbdfb8e239eb487e97fa49bf7a5adf8eb594b0cce3fcef56bc2ae7ed03c526d3572d1a519b6e54a18eb087","ssdeep":"192:/f9wP40BATXU5QtbbbbbYaqfQWXBE1Hby0bbbbb1wIser21oOGop:H9wPVwXU+eXRUby+w3FiO9","tlshash":"29228e8af7810595b502dec66973ee5cbb7e2df869a027663137e211c5191c07edd20c","first_seen":"2026-06-23T23:35:14.442954Z","last_seen":"2026-06-23T23:35:14.442954Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/wp-embed.min.js?ver=5.7.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.210Z","timestamp":1782257684210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=5.7.2 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Apr 2021 12:28:35 GMT\r\netag: \"592-5c002008a5165-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 765\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1426,"size_decoded":1072,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"905225d5711b559d3092387d5ffbedbd","sha1":"6f6c39075263bafb9e8c10f1b34a1a0f7ee03c9d","sha256":"5be614bce53f767993a5f5f14a6badd6aae6bf3af7cbdbf4d31520de49e27991","sha512":"5ad34cf11acf45ae256b2641496be13939cd5e0212810c43ab20cadbb313a1d99cb3a451148e160d80f1f952a8514480c2953bc6ca0c4697a466a01e1c3d5f8d","ssdeep":"","tlshash":"5c21522a3228943758db11d3bc4535cad2e11fed681215d20e38cc49eae4e935969fe0","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-06-23T23:37:14.405088Z","times_seen":5359,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/libs/packery.pkgd.min.js?ver=3.12.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.212Z","timestamp":1782257684212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/libs/packery.pkgd.min.js?ver=3.12.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:17 GMT\r\netag: \"8113-5b342e5245306-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 9515\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":33043,"size_decoded":9824,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32047)","md5":"02441fd381a23d7d253205d88e1a7ef7","sha1":"e2f7ba43f85c7e0e704f640e37d2f587c0fd4ef1","sha256":"478b117d08f666c688351b1f1f67bd6d15f5b93b887e60c0285bbd3050837c9b","sha512":"d3d9f95077f9c6adae14faeaf3c8fd363e856dfcfbff6eb7211d3997905495f88098c90c9f96a2da9a4a6807020d15772f686dd1718a81c078be8e65fae83ee4","ssdeep":"768:AebvMxXGRTAiTAVP8Any1w+avPz5zs+V7rvzT:LMx2RqPXnow+avP9zNhbv","tlshash":"bbe2958eb2003429429bf16692bf160f7137651c7607909cfa6ae8eb5d79c4d2037fb9","first_seen":"2023-03-07T01:18:34Z","last_seen":"2026-06-23T23:37:14.385895Z","times_seen":2812,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.173Z","timestamp":1782257684173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:15 GMT\r\netag: \"780-5b342bdb97f0b-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 730\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1920,"size_decoded":1023,"mime_type":"text/css","magic":"ASCII text","md5":"a2e915fb21387a23a3578cb1b2b5a724","sha1":"c3601301dacf90fc9eede9363f2698d922c05327","sha256":"fbf8ab57db7f9981bd71d79c7daaa01a3c578ffa0aa8e9b4a9b2bfe2e9927427","sha512":"3d4c6d96df645a1edd58f9992d5e1978c87ab8ec797af8caf3cd5281b000aaf1f0814195dec882052dd16754cd7dac6ef41b9c7ba913a6b189eb048c60340bd5","ssdeep":"","tlshash":"64410f7415006d518ffe92db2fe9db0a638e18a0de0faf5760c15abc5a782412132a5e","first_seen":"2023-04-06T11:52:22Z","last_seen":"2026-06-23T23:37:14.389879Z","times_seen":3137,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/hide-price-until-login/assets/js/ced_hide_price.min.js?ver=1.0.7","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.191Z","timestamp":1782257684191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/hide-price-until-login/assets/js/ced_hide_price.min.js?ver=1.0.7 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Sun, 21 Jun 2020 21:59:05 GMT\r\netag: \"3c5-5a89f3c179c40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 372\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":965,"size_decoded":679,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (965), with no line terminators","md5":"b0d09555c0cff725188da86518825848","sha1":"ac56a4f1e7cc44a6f9fb6e7048f9e0c19aae8ead","sha256":"1f4b088f77c0a509ccf77dc98c8d055da19e7aef0efae2da3788a3ad6b723ff7","sha512":"2dbaf52b8dca1e7e8b0932bfdfa8eb8f95129db6ac34f3282df7441b8dfc4f1086b36ef0136efcf6b87c95c0c308f7cb110bbd58f4183f00421125878a7968b4","ssdeep":"","tlshash":"f8110409e575acfd003aa221f3f71b61bc6758d234d4c421502b42d9175a73d7063bb8","first_seen":"2023-03-07T12:07:13Z","last_seen":"2026-06-23T23:37:14.407448Z","times_seen":56,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/08/logo.svg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.220Z","timestamp":1782257684220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/08/logo.svg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 10 Aug 2020 22:03:23 GMT\r\netag: \"24cf-5ac8d1f8920c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 2466\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9423,"size_decoded":2766,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c410d27ccd0a5dea16f423102ec4159","sha1":"6fb4c38c499643da3d4e6d2f7e7a401cb67f9de3","sha256":"f381cf927937df3e5fecdafa873177f7ecc9f56021e1616a02add3ef3b4cb182","sha512":"d86032dc71147cf073e17dc7bf081b919c82ec9235b4d99bc578515ceae08c8f874804c997722df816e24c1a46b979ff5aa8d07ebf054f1380d6280146773793","ssdeep":"192:VkZAi3T3Djgwj2Qvav0jBelsoNsysaWjIdcsj6I:m2eTjcB6oSx0j6I","tlshash":"1612660193fcc4c5619b56e074ba1852790424b73a50790bbeef4d34cff76aa27b6b48","first_seen":"2026-06-23T23:35:14.448269Z","last_seen":"2026-06-23T23:37:14.394221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/uploads/2020/09/Splash-Suits-1-300x300.jpg","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.528Z","timestamp":1782257684528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/Splash-Suits-1-300x300.jpg HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 02 Oct 2020 14:04:14 GMT\r\netag: \"3e83-5b0b09b8d1380\"\r\naccept-ranges: bytes\r\ncontent-length: 16003\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16003,"size_decoded":16238,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"0fa4f4a6b69a72386618acb139334212","sha1":"5d3f84aa9c39fd0324e0f24d7a009a87202df513","sha256":"5de60d1745e52ae465858d5e4c64f3782c01979604cf2f40d27f7b5f54b15fa9","sha512":"a295e8836fe53b999e8275e72c704c188854bcb4f28cf299a0720513d5bed5f538d6e9dee7a6c1d05910734adcbe4c3741a7c4f7925e9a4f679e72ad7d703eb4","ssdeep":"384:HaX7I8c9q1aiK3kS1Kk+G7q7fombG9nBij:HaH5alCkZ7q7dbGXij","tlshash":"3772cf138b52139bac057c3b1d4562896aed455c3fa03f798eb4e5d09b6c4cb8cacc7a","first_seen":"2026-06-23T23:35:14.453308Z","last_seen":"2026-06-23T23:35:14.453308Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.178Z","timestamp":1782257684178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:26:17 GMT\r\netag: \"148-5b342e523745c-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 161\r\ncontent-type: text/css\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":328,"size_decoded":454,"mime_type":"text/css","magic":"ASCII text, with very long lines (327)","md5":"8a1c4f5626a521ebb41f5d989f6e2c7f","sha1":"91fa777e0689ff76d0fd41625f04de231b3e0569","sha256":"30fd9ec16112567ac68f1db9d60e71dd610be376f97dd1856ad61ba4265e8fd2","sha512":"596f5711728e3bdce95a57f1b5cff51b9250f55c4bc29840fba40cc68d2324a2088debe43287350501dfe8179ee5f08d9941a814355ffbc4327b2687193ac333","ssdeep":"","tlshash":"50e012224f0e04174352151674ca7f132b0b772ddc10dcd795ca8c9d6ef6d4101a0fb5","first_seen":"2023-04-09T08:14:55Z","last_seen":"2026-06-23T23:37:14.388041Z","times_seen":1375,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.186Z","timestamp":1782257684186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 23 Apr 2021 17:53:57 GMT\r\netag: \"2bd8-5c0a77ae5a207-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 4169\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11224,"size_decoded":4478,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11126)","md5":"79b4956b7ec478ec10244b5e2d33ac7d","sha1":"a46025b9d05e3df30d610a8aef14f392c7058dc9","sha256":"029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300","sha512":"217f86fee871fa36eca4f25830e3917c7bf57a681140b135c508aa32f2a1e3eff5a80661f3b5ba46747d0c305af10b658d207f449550f3d417d9683216feea8f","ssdeep":"192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1RF:JrprxG6fPP3P1fQMOIsDsMMS","tlshash":"8232c59d71a6b4624eb735b8b03f939f71b605d9250d8940d26cc9f6782c84ec22bf68","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-24T03:00:28.497549Z","times_seen":83865,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.5","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.200Z","timestamp":1782257684200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/prettyPhoto/jquery.prettyPhoto.min.js?ver=3.1.5 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Wed, 04 Nov 2020 07:15:33 GMT\r\netag: \"5458-5b342bec5b136-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 5851\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21592,"size_decoded":6160,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21592), with no line terminators","md5":"e2335332e53dd86db3fb0c9fc25457af","sha1":"9c2a6a68bbc2276abab96358fe2a54b014982cb9","sha256":"d80483c2fe131fd9d01d51b0378e0c3e2a7571e91f4f0fbd37de6276a1b464d7","sha512":"b49256149c38c02f91277378a2fcdb89b8184831a6ef12ae6fad1d20a91747324f13d266022915bdc280365ff7eb7d0d84a3671fc10a4fd3234a7ba871926f7b","ssdeep":"384:Zs8MTFaqhjAdbhLu0KgQ1ubzguBg2FJ5ejrjjrwjip5fQAaBnB1pP0a1reTkL/XW:shYguBfFJ5ejrjjrwjip5YbPr1a0/Xux","tlshash":"11a2c638642064af8393a361e4476b1d52738a17fe12d9644278ec7619fcdc66936fcc","first_seen":"2023-03-07T01:23:48Z","last_seen":"2026-06-23T23:37:14.398583Z","times_seen":785,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safefire.jo/wp-includes/js/wp-util.min.js?ver=5.7.2","fqdn":"safefire.jo","domain":"safefire.jo","tld":"jo"},"ip":{"addr":"173.212.234.74","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safefire.jo/","date":"2026-06-23T23:34:44.214Z","timestamp":1782257684214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"safefire.jo","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 18 May 2026 16:22:15 GMT","end":"Sun, 16 Aug 2026 16:22:14 GMT"},"fingerprint":{"sha1":"28:76:96:9E:30:E5:C3:88:6A:22:0C:51:02:AE:BE:4C:33:FE:B5:07","sha256":"AA:5F:C8:D6:CD:07:F2:5E:09:53:60:05:A1:01:09:29:19:89:19:58:1F:8C:61:B5:0F:AF:81:46:03:DE:DF:AA"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js?ver=5.7.2 HTTP/1.1\r\nHost: safefire.jo\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safefire.jo/\r\nCookie: PHPSESSID=l4cc6tti8km7h26aos1u5vm5c5; wp_woocommerce_session_7e40d10b1325350a1ca3f5430e8054e4=913dbd098f1f77129518a666741642b2%7C%7C1782430483%7C%7C1782426883%7C%7C994da4692eb8974c41487df72cdc737d; yith_ywraq_session_7e40d10b1325350a1ca3f5430e8054e4=ff7be4a051c3c3d3325947171ebb44a2%7C%7C1782430483%7C%7C1782426883%7C%7Cf9064b256aa93ef3c4921e6d67686e09\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 15 Apr 2021 12:28:35 GMT\r\netag: \"435-5c002008a4d7d-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\ncontent-length: 589\r\ncontent-type: application/javascript\r\ndate: Tue, 23 Jun 2026 23:34:44 GMT\r\nserver: Apache/2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1077,"size_decoded":896,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1042)","md5":"8852ab48e7d14f035a27f3c15d31c054","sha1":"eed53bd391b539796dfe3b5bc5849170ab77c987","sha256":"6d7c73e67cbb5215d633ce9ad65f0c0377004621fce62982568024178ac4b589","sha512":"e816777f9a0934cf482f3e3277dd832199e85704a0b75a51905833ce54914b7d2106ca7d6444cc6911fe47d030cad1fedb2bc0b73b44087702ee08fc19b74675","ssdeep":"","tlshash":"9c11f0da72d9e8e3122331b8c23f422bf236642941229864f05895a16db4986b6b7b45","first_seen":"2023-03-07T01:42:03Z","last_seen":"2026-06-23T23:37:14.391401Z","times_seen":1376,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"safefire.jo","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}