{"report_id":"2116356f-727b-42ec-91ea-f37c8a5be189","version":0,"status":"done","tags":[],"date":"2026-09-17T18:56:13Z","url":{"schema":"http","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"title":"Main home - RoofTop Antalya","dom":{"size":115234,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"ffc6d7fb5a48fdc22b5c38263e451fbb","sha1":"42c6fda95629a7a9508c8c651dc9290b715065b3","sha256":"e11e33189208d23ce3997bdb12a984767021ad0959743f29a1183b4b7f8ce5a1","sha512":"337fe18ff5e854b4b7225e14328ff0a3726271ed236492151d678ce00f19c6dd4f09dd9ffb184647a7ffae0660611af70b4af6cea89025cd2641e71ff8b63159","ssdeep":"3072:9MjBkZdNuq0uYasIStzTXOoopqJz9Hr4nRyrVqKXh6/gYk7xvGqqQcJLFIR71NMJ:9M0fvNp7","tlshash":"6ab3d9b3c078981a0373c7d8a025b718e19e713bdf8187a9f3ed429e97d1fe05692468","dom_hash":"domhashd2f8b96a3acb036599c296c18aaf66fd","first_seen":"2026-09-17T18:56:43.922986Z","last_seen":"2026-09-17T18:56:43.922986Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T18:56:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"web-sdk.pushengage.com","ip":{"addr":"104.26.15.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-16","domain_rank":338872,"first_seen":"2023-10-17T16:49:20Z","last_seen":"2026-09-17T18:49:14.434144Z","alert_count":0,"request_count":1,"received_data":984,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.rooftopantalya.live","ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-17T18:49:13.487546Z","last_seen":"2026-09-17T18:49:13.487546Z","alert_count":820,"request_count":164,"received_data":36715230,"sent_data":91183,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":6,"received_data":164189,"sent_data":3417,"comment":"","tags":null,"fingerprints":null},{"fqdn":"clientcdn.pushengage.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2015-09-16","domain_rank":206240,"first_seen":"2017-05-20T01:44:34Z","last_seen":"2026-09-16T14:46:39.620695Z","alert_count":0,"request_count":6,"received_data":689224,"sent_data":3105,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"rooftopantalya.live","ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-17T18:49:13.486172Z","last_seen":"2026-09-17T18:49:13.486172Z","alert_count":5,"request_count":1,"received_data":102660,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"parallax.js:7.1","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Magnific Popup:1.0.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"FitVids.JS:7.1","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Bookly:27.9","description":"Bookly is a WordPress scheduling plugin that allows you to accept online reservations on your website and automate your booking system.","website":"https://www.booking-wp-plugin.com","common_platform_enumeration":"","icon":"bookly.png","categories":["Appointment scheduling","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Joinchat","description":"Joinchat is a tool that enables businesses to convert customer conversations into sales or leads through integrated communication features.","website":"https://join.chat","common_platform_enumeration":"","icon":"Joinchat.svg","categories":["Live chat"]},{"name":"spin.js:27.9","description":"Configurable JavaScript/CSS spinner that can be used as a resolution-independent loading indicator","website":"https://spin.js.org/","common_platform_enumeration":"","icon":"spin.js.png","categories":["JavaScript graphics"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":1,"received_data":103987,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-09-14T09:21:30.343635Z","alert_count":0,"request_count":4,"received_data":374853,"sent_data":2174,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":19075,"sent_data":656,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-15T06:37:40.361193Z","times_seen":1109809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/spin.min.js?ver=2.0.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e25b8f56cc63f0e6be2bbcd8f726e6a","sha1":"08f6b4b3b22d7e0df950f2e598e4f6486cf1f25c","sha256":"b9f9a432b70cb46ac75cd0c112ef9b2e81fbb1a18c4a17fcbd459436bab3a2a7","sha512":"38c1b7073f8c3256e23abd46e643c332742fc08bf553fa12fc1461a40a947d75b67b5e8df10845ad4adeb8ca59b36e6881479b60b347bf022efa0c831529528b","ssdeep":"96:Yr3zL4VHN+pMw1EEyjQU8vWeJWVPoDyfSUri:YrDL49N+phXW8vWv2","tlshash":"3d91b55cf3c1b15f66232195b5afc58f213814867c1e88a8d564d6c99e70d7820fbf9c","size":4278,"data":"","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-10-14T11:34:34.146271Z","times_seen":213,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-15T06:36:00.111819Z","times_seen":30909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/js/calendar-common.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b015fa81dd0c5152d38c1cc925adfa2","sha1":"05eda300a4b34c8755dce2bd12e0c1eb6d36bf4b","sha256":"cf7a37fcd60c5156a5d64ee52897340e1f2d6649fdb0448db435ded98cb36f37","sha512":"ce5a918dc404a186a0d08097511d36b49c54ab8c779560552f9dbeace2c8d2678de2196dccce00e1794746a87aebdbaebdc90e635c6350b77389013a939d4580","ssdeep":"768:TtE4vb2268rY24ciJFoMsbzVqbFZ+2ehk2:pEgb2268rY24ciJFoMsbzEbG2eO2","tlshash":"39c2540826b3222146bb717ccf5f520432328aa7944dbe187d4d9fc45f8592cdaf6be9","size":27941,"data":"","first_seen":"2026-08-01T09:48:57.397526Z","last_seen":"2026-09-17T18:56:43.961649Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/scheduled-fea-js-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d34a9392976e8314eec46de97df50c","sha1":"007f35e90730cc6728825a90dd0410a2a8d90b93","sha256":"423d0848381efe8c16680c4ff7ddfb49d4e45d5964442e4d933c13d2bca72442","sha512":"177c1d97860e8865999bb0e3dc617fc70e95c3910a90cc768978bcc49881be15e0860db16d3c77f3c4c06ec5e55f1824c10107c9688175188325b905022aeadf","ssdeep":"","tlshash":"a11186efcbe52d45a1612ebc45d7676212a110b1c6d54949d495b0460268d43ef44418","size":1051,"data":"","first_seen":"2026-09-17T18:49:30.033922Z","last_seen":"2026-09-17T18:56:44.052946Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-10-15T06:35:44.487288Z","times_seen":218448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/intlTelInput.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0871d3deecf94b9d5d0ae4e1a78dcfd8","sha1":"aebdc1a665df113b499a6b5faabc2ce70dfb845e","sha256":"0f1d7e19d9cbac016501e0d26cd76aa23ce33ac663b12a7415647ec82ee9e0ab","sha512":"af1df07605d31dae26f859a304fc8f765349274d7aaaaec63bc204600e01283e155403a7a854df9bba80a8db68f738fb550a64ad252636f752332eb52287e379","ssdeep":"3072:o+5lNwmbE2xBjN03k4Pc03C4PgQhNd0EZZMyM+V0ex5Xm663R1iUQL7b4tQI2l8P:Nlbfx5UdZZMyM+V/e","tlshash":"885400ebd67c973aa1e97b35968db3cd1a8c7c93c848527826d3b58f53788e0706c205","size":292952,"data":"","first_seen":"2024-10-04T07:01:31Z","last_seen":"2026-10-15T06:06:12.216556Z","times_seen":1061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/bookly-frontend-calendar.js-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2006f38baeca66ea81fe9914ecb228a3","sha1":"5df734844c44b15ba2fc9fcc2663c0757dea69de","sha256":"a7e400540313502b2616e005212169dc02e7acefa1b98d4341f8e117392954b3","sha512":"e031f630ff9629f67562684d43b6093754b884b410a0eedf649c98549ac823217d31e55cf782a4eeecbbb8249d299cbc1887b9134ab4f6becc7b82b775b9f770","ssdeep":"","tlshash":"c231320dc9715eb3c7e543fc485a6f5f1dc49496e2c60c2a78ed7e218259f05706ea8c","size":1618,"data":"","first_seen":"2026-09-17T18:49:30.035014Z","last_seen":"2026-09-17T18:56:44.053549Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/bookly-customer-profile.js-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5256e04c99fb18727281c772b9136bf5","sha1":"4df6bc815e7a045a81c2ccdb984325ce36c300f3","sha256":"c21a7c12f602bbc304fb206918dbc9007ce317f7ed0f6287a5280e832609e443","sha512":"1fdea836712567d7b690fa9d08fa9297590df6213517cc20ad832fdfbabf95529b2c115f4b01281dac285d1f0c9fbf7e5506e8a0f95dfe2652710f7e7e1a65fa","ssdeep":"","tlshash":"60d08c2ac0b81d268eec9c30282e063204325000d04223047a18800902b608932550c2","size":269,"data":"","first_seen":"2026-09-17T18:49:30.036084Z","last_seen":"2026-09-17T18:56:44.054145Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/parallax.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f2b84a401693fec42387ab69e6eae78","sha1":"27460fece824f69a257dbd106420534f1fd891e9","sha256":"7cc6a6b59fed35bc0161442e9711e1427cc5118bd762bd99fc1941cd55ed7b95","sha512":"d376378ac0b8badeb92b83be84a5a1fcbeb35d5f9dbbac70b847438838394f3ad339a1b5e223a03d6e9aefa9cad4995163147c01760e6f178e265b611c78c47a","ssdeep":"192:UWb1DHr4GI0dd5d8BW8B6CNowTYMCGW0FT0+4Tgf2pYQfRKnCgyIOzQC4:Ul10Q/4cpGRK","tlshash":"47621e0a17b71012e1a7b3ad1fbf42097235806b280bd91c3e9d61d89fa193556b7ff8","size":15324,"data":"","first_seen":"2026-04-13T06:27:19.222506Z","last_seen":"2026-09-17T18:56:44.025627Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50f6b238837ba66a1182b41c7f98891e","sha1":"cd904398eab37ae7e4d1c4a3b507f1b4e9d27103","sha256":"650695011e577d829e9ecb8208a9eb6c7c889ee57069fd3f6d0f83610898dfc1","sha512":"2e07b4dad38aa0049479954319144cc2452bab42920002189701784ec8a02b7cd5e71b65e7ef4b10821b7a34a939075e9524a8da44a70be8100f7fff1759ff18","ssdeep":"","tlshash":"5721660e58b5aeb7d7b48bdc4c6a1f5f49c450b7f18a092a74e9b9414229f0470ae988","size":1407,"data":"","first_seen":"2026-09-17T18:49:29.99744Z","last_seen":"2026-09-17T18:56:44.054799Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d10a180d9977a55f64d039801aa6aaef","sha1":"63e0945ecb4107cef09d69b2de8c479a9abb3799","sha256":"633f32cd22d07a55ff67702add54135830f09dec35921c5f10423ca051b275f3","sha512":"13477eb20536996159fcc46ab4a09055fe5f58516c5346220d2ef40270265449633d148a809928293cda228dfca45bc8257eb051ef74cbd23253d9a3ad3e86d2","ssdeep":"","tlshash":"55f0ac3e50b9af3253a487ad58360faa6e3830a5bb940117f1f5b228072cd88b11fcd4","size":614,"data":"","first_seen":"2026-09-17T18:49:29.999123Z","last_seen":"2026-09-17T18:56:44.055435Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"712c057408e035becd696ba4916faf42","sha1":"802e82b8198797da837a0b8339906c41162cf157","sha256":"b15e53487dd947d7b2b4f86a10e9e423f8f2dc872be9b2cc92739ed82d28a1c7","sha512":"9ffcef4c1c8b1f3b6b76cde49abed0c48266560fcf8f6e7e45c936318538b1f646590a33de7da04d48012cfb55de20eb14073ed31f0c8608cc6833ed4c28cbf1","ssdeep":"","tlshash":"2d31520d49715eb3c7e543fc485a6f5f2dc49896a2ca0c2b78ed7e218259f0570aea8c","size":1488,"data":"","first_seen":"2026-09-17T18:49:30.000687Z","last_seen":"2026-09-17T18:56:44.056152Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee86bb614f307663226342f23ae2795c","sha1":"1e201b8c78d03e5c98e858ee6c3178b908269cdb","sha256":"26f45f8abaf9c109cfd290e8b4523a2d2512a0882baa57126a46162b11a81a2b","sha512":"da9cad43568d96f8c992c7f6af8e06637ca5511614007fcd2333147598e082adfebe36c208b3a56b06251596c5f844ee0f32df7a4afed80a98dbec9d8c1ab55f","ssdeep":"","tlshash":"e6c02b2a80fc1d368efc5c30243f073204335000d00333047b14400d02770c932550c2","size":134,"data":"","first_seen":"2026-09-17T18:49:30.002151Z","last_seen":"2026-09-17T18:56:44.056699Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff50359353a6207860c630e8e6779775","sha1":"84658d3c2f541bfc927977df6f3d61640d79ed48","sha256":"14ea8558d5677713d6c8f293d6f884848cb9b017b56ae130dd107ef07b170b6f","sha512":"c325ca9094d20c70c9d15c43847b695a4b5b7dc58bc70b3940341fe4e134a1222b850d870fcdff30b8b3b0ef3aaf892e1a820ca47360eaaad2070774e78067db","ssdeep":"","tlshash":"9df0a345afad017ec4b5a3ed7c3454dcf07c20140a27cc0e8f976834f011dd1c549266","size":449,"data":"","first_seen":"2026-09-17T18:49:30.003593Z","last_seen":"2026-09-17T18:56:44.057332Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e30049e45582fa02eddf4bc2665c0727","sha1":"a41e271c06938ed1202961de6f65abea2ef9d141","sha256":"7e5c243d738df7b683afc29783580f395b4abf646cbbad5a403bb202d8321b7c","sha512":"36d65e0082ab32d032d1bb6997ae4373e427953b43f3ecf0bc052bcf24ffcd19b70cfc3c8c7bf149956636089e3d99f7fd3f0cdfb66d4554eb1c404c3e01e185","ssdeep":"","tlshash":"73b012fbcd84692b537485d0661eb715d6fa34786a9482a7c585c142831a561fec2c28","size":105,"data":"","first_seen":"2026-09-17T18:49:30.004847Z","last_seen":"2026-09-17T18:56:44.058085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59e14e7a1e0ec9fa905c0c78675dda3a","sha1":"10be9176ce4f09cfdbdc3958bfd551e6aee8a389","sha256":"e0a9135009b16b0f14b96c28bd37cec681cd9481a66c0b516b429809937fadf4","sha512":"d20738398da43ffb53265cefb2a8971d901c2b586f38aa85aecef3a71daf088fbdcccc09489bbc29ab01c44aa4125f0bddfeed3c8bb94d51661f95e8fc7787e6","ssdeep":"","tlshash":"fae0c6caa300b8314caf400acfde062c308a36aa043edf01ce8c72d130a814bc7b2b4d","size":351,"data":"","first_seen":"2026-09-17T18:49:30.006126Z","last_seen":"2026-10-06T05:03:54.42803Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ddec19a80ae1ea4775fc386f4a38cc8","sha1":"0756dfc2c520c41d8b4b12c183bb815de4fe4c70","sha256":"ee84d511e7da04ab4fdf4a0adc84cb3eb6e998f72302c25781cafce531b80861","sha512":"291abc5d13ae716943af63be1bcf34e03860199592581b959bece7f39e22d9308e5c2c46090b89918deb04cb41aee3a31398a1b7812442828a2ffbc0ad97bd91","ssdeep":"","tlshash":"67a011bac800aa0a22b08ae0022abb2aa2ba2028a8a0820ac28280020a00000ac80020","size":75,"data":"","first_seen":"2026-09-17T18:49:30.00715Z","last_seen":"2026-09-17T18:56:44.059876Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fad6a0464fd99becdd9a48d606ca8e3","sha1":"d7b2bc83adee89a0638ed4d1a63f7c8ae83506fb","sha256":"74ffaf131bafa8bbc4958480d1fd49ebb8be8fb4c9a21b44469762063f860bf0","sha512":"2afc27ed04c0c13d9f4af4515a34ccee027615040a5bdc7bcc2cde23de3d6e97a659933324353e7a055f8f1de1a95e2f9df770b3826fe235baf5c5eb1fae0a7b","ssdeep":"","tlshash":"e0a002dba2e4616cf4b10cd28ea503cdb16bf2f5d27214a8bd4718481930d519152e4a","size":66,"data":"","first_seen":"2026-08-08T12:00:35.269099Z","last_seen":"2026-10-15T06:34:15.36185Z","times_seen":19266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2dcf8fa54afa238e5b795d5d42309847","sha1":"960a2f5a76aaf97422bced5f5032952b8dde971e","sha256":"9156c7adcfe4a54206ea55ffb770465ccd69802f5456adf02bc5ff037ba6ec9e","sha512":"c37f419dbec79b305ebec6a159ec772737510046cd2ae4d75e511a539688c965575ef278a255e0a11faa5dd85adb17f0014f54e0a91da3c4cc6a390603b30782","ssdeep":"","tlshash":"89f0782d14267e3a97b3128d9c390f1f6a1d60eab2540007f0f8b3291b7dc4ab06fc04","size":642,"data":"","first_seen":"2025-12-11T08:44:03.226026Z","last_seen":"2026-10-15T05:22:57.214634Z","times_seen":2709,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"770d12911ba976b0cfba48166b2af6e4","sha1":"3ba88fd865c15ca2e31300ed582b8bbc226093ba","sha256":"548a4b54e75286d401aa4b5f0a0db2b76c1743a94c6e670d6a289e855f321155","sha512":"74f46ae936aabfac17f4d8792c98f60b734ad6b9be1863e965930c325a18453e3a010f95107a5f6cc2acfb97ae9e034e13b1d0a45b9243e290997d079a61bd40","ssdeep":"","tlshash":"56119edec3f9b9029b010574f4da373336d2e1e95bc50809d5ba6a6f02f0a876f52415","size":944,"data":"","first_seen":"2026-09-17T18:49:30.009575Z","last_seen":"2026-09-17T18:56:44.061462Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-10-15T06:36:00.285836Z","times_seen":78412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"900e5d746562c525f6204a8c021645da","sha1":"764925e41164bd1a47c60fef9ef9991982651b6b","sha256":"e6c4946b78e4a147bf26a1ad9ae0b68edbb255a597db4da6d5430206dd99953a","sha512":"9c5150a0a241eeb4aee3f9dc1f19ac9a710a5683baca2d66409a3f09ae3caca959f3a451cae5ef87a9a5ac04ecd4b9fd80de3c84bc493ef3940878435fa0e842","ssdeep":"","tlshash":"8bd022ead4a8ac0910e1c518003d1321b125a5278b2f1f59b30e004c1fa847cb410586","size":201,"data":"","first_seen":"2026-09-17T18:49:30.011791Z","last_seen":"2026-09-17T18:56:44.062808Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"18a54616d1bd97419b1cedc15373fa40","sha1":"c767347c1e058700f9737c77a4b971dc95cd7e00","sha256":"21f080445990364e9f8aebee6f973c020173f78013e35d122c35bc286f344fdb","sha512":"3e6d36c73c0b3c85ab5d02a34fdbd5e9c9255083568d8e951470b4e878ba4533e35d517046e399305b5c4e2de3f8d95c0b772b1b7749142fe955d9cec400801c","ssdeep":"","tlshash":"60d02b53ddcc0e3a13afca6f4c6e1b3750b9207eecb1c25af1a0801650105cd694359b","size":283,"data":"","first_seen":"2026-09-17T18:49:30.012928Z","last_seen":"2026-09-17T18:56:44.063523Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcd5de660f544e9bc170b2cba3d0f4bb","sha1":"93288b8bf4e4c84f7da828e264adee6d07a8dbf1","sha256":"410a2505e88e5582e524a9d6bd30da96561025c4977b8e523d85d9f4c9c32c37","sha512":"8615bcadc48f7ab0c3feac2e2276bd52c9dea5bfac595eea509800e819a9749e52bf461643d04e2bb28e99a0abb0a89a5a3f4ed361569c73b15dc4912dd3014b","ssdeep":"","tlshash":"7be0cdefcbf52d45a1612fac45d77762136110f187d5494dd495b046033cd43ef44418","size":296,"data":"","first_seen":"2026-09-17T18:49:30.014573Z","last_seen":"2026-09-17T18:56:44.064225Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08ede5f2f735a98d42ed42bf67c4d521","sha1":"32b5e382640c4d4ce9a4f13e8077519788999dba","sha256":"8e487b99c35037ea6e344a43c61352fe2141c8f4f2b6b85f9f475050cab7fede","sha512":"ad42979f099f2d6ba4948b15a9fd99bc4de64adc40065f311672bdf2a54a0548214b83e9fdf240aeed30722c5c4aa8caa65f8336db9186fa9efb20b903d826ac","ssdeep":"","tlshash":"0dc022efd9ad9d0103b1cfd0002a7b25d22a3477d8c0c34aa788c44d01a8a80af48022","size":192,"data":"","first_seen":"2026-09-17T18:49:30.015877Z","last_seen":"2026-09-17T18:56:44.064838Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90d48e371907e18a7029f7c0d5c8acff","sha1":"0859ad5e5bb9cc99719437e2e29e932ef3337034","sha256":"b8e91ba7ff149e31325769dbc5c4da36456cf5e568595d82380a6f066009ea6d","sha512":"ace102eec2b721a34ebffec84f41b381241f3b6352b629e72ef8db8f1262d7f9082f121ba05c6508e7a25741207e770b69aa4cc4f2079267ad39933b2c35a7c1","ssdeep":"","tlshash":"25b012ccac76363039931d70c0308c31900d40c3c719599a758c004e88bdac1fbf4413","size":97,"data":"","first_seen":"2026-09-17T18:49:30.017123Z","last_seen":"2026-09-17T18:56:44.065515Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e7a7d6d11f88cfcedbaf6ab78a72fd7","sha1":"9bc053adeaa4d43dec117f3676b05a29d4b05041","sha256":"ffc7a92337f0338e141c8f03df5da2b85569a50673b59bdee205d2e75355cefa","sha512":"06f0c21e5d1e6ce27bfce6510541674bb13cdb1a4bf7049ff003827f038135baf51be4ec941dcc25c38eac9f9f201b7a7e0fe199def8cc9690dce299a7ae75f8","ssdeep":"","tlshash":"5621fe1e043c5df6d7e52ad808152a9a58fd003fa5ec1e18c9f8ce9c03994bb1f4842a","size":1304,"data":"","first_seen":"2026-09-17T18:49:30.018386Z","last_seen":"2026-09-17T18:56:44.066093Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"88afedd4781e69b75c341b8efd0f3e27","sha1":"8e2bd8232e849c114c879b26b945018db788fbe8","sha256":"de5f0ad00bb9aa3e69153618c8dbd2291f07f978ccc9e6119d1c15a3af9713d9","sha512":"238da3622642f213c2fca54ae8f9f87996539475a63cf0fe2848ec5a478b0680cc5ad3a444746a7d1c14ea176a802c677a5213530cb1d3fb091e67ab1c847c9a","ssdeep":"","tlshash":"1b01fe9f3496a4d713a32781202f8529aa31fc22f469680056dbe0f52ff8cde525253b","size":681,"data":"","first_seen":"2026-09-17T18:49:30.01972Z","last_seen":"2026-09-17T18:56:44.066694Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/public.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7684656781f1ed6320151a1ba5c6e29f","sha1":"9418c849793d6c3d0b95530ae4ce8282dbb4aa2f","sha256":"d10c0ee1d03c36095954b5347c8e68834376c93d1f83200146cc6fc69bf2d5c3","sha512":"f70d8bd45de75fca43e01586bb87ad9c1eabc0d2258c16aa687d5b12a809e2104177ef5790f26ff9dac4f16562fd397928ef8106dad0a308bbdf083ee0d24c8e","ssdeep":"","tlshash":"0961a569b19031ab00ff61339daf611832b779354e80d351249bc0a70d7de8c7167d2b","size":3397,"data":"","first_seen":"2023-03-07T12:09:07Z","last_seen":"2026-10-10T11:18:22.500612Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/TweenMax.min.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ee7428c71304b253a0f67607cc1ea17","sha1":"13ef89a2e605e5eada028438c18a3a813645f356","sha256":"ce17c1e05b06a4a394c6aba9e5becfedfbd3105783cf262614234ca53419d55b","sha512":"57f38ef410d9d9570dd434c52c771725501d5132dbb9ee3356d7eb54b4e053fc81968b5cf8183a014fb6c9f5dabf088db1deca3fd06a4e99575698f61b79adc1","ssdeep":"1536:j36fJZjIbDJjzglHP0VH4dLk2IrVp8XIKXkPxbnNku87CWWCut+7u5zO6:jzZUFjGXAojNICWWCuq4","tlshash":"58b308c63212701244962196597f0a477337ddeab4498e2cf588c9ce3e1dd8922bff76","size":111639,"data":"","first_seen":"2023-03-08T05:56:55Z","last_seen":"2026-10-14T07:36:36.707046Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/header.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"657e7d199e22274c4ecdfa29c56600a8","sha1":"36f5325fb8a8b42604692bb9c0df708beff1ce77","sha256":"5a7a9c60095b15c6ce1cf4070851933ceb9bf8b196f3ee5f9292031c306ad945","sha512":"acb902f204011061118ce4db080ba8bc65ab14afa5f9a56a166c07b7b3b89c73678a920d0322aa0071d0a2d17e7e2275d1f491237d0ed6ded2698ab156e52e8d","ssdeep":"192:ytROwrRXyxg0pZFehiSihX5y4QATS6SUhE4ySHl:JTmk","tlshash":"a5420c48b9f17135007b317a8bffd409672d4607838a8a10be6c46985fc2365b7e2bed","size":12108,"data":"","first_seen":"2026-04-13T06:27:19.239664Z","last_seen":"2026-09-17T18:56:43.926421Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/jquery-migrate.min.js?ver=1.4.1-wp","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","size":10056,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-10-15T06:21:28.216315Z","times_seen":63000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/wp-i18n-js-after","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd6c1f58402adf155f64573345b4e87b","sha1":"a291314bc61a7bb888e99c1285896e83a80af269","sha256":"99143bf6e098958da47f6665db71e122d4b3bd88edc52755546c9b8ab4209ed4","sha512":"476dbcd9df6def132be20517912bc89dd0612f9ac4fe47c5844a2070d5cdaf6ca8c74b0126caaad11286ef00a3949dcae854bd376e69c0a1c448354bde1ce5b3","ssdeep":"","tlshash":"6b0112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":822,"data":"","first_seen":"2025-12-09T22:32:07.000422Z","last_seen":"2026-10-05T12:25:47.030398Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-15T06:34:10.21002Z","times_seen":247941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/magnific.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7cf72d6743fc3985651928a87c7f518","sha1":"811fc43212edd18d5f651b5c74586bc7d04c8de0","sha256":"729d43c9e270d593d9bfc0622544ce9da0710898678cb523d06bdec6c3fed8ea","sha512":"140b07baace5e85b2705dcbb16ea8f39e0d3c6a2e4988be38535f9cf0b098f7e57ceb014cf2cac5a1b880e0a87140d8d6cb24851d54598d1c59c2ba67df23f6d","ssdeep":"384:MPhVIFQ2G2XGtqVxRQ1giFCdLtA4Tn5h5/w6l8aZwHwztLCpz3sp:MPCgC1zn5h5o1qkOLCZsp","tlshash":"e2921954f2b2b26383a735b8646f600939729953ed06c855b55e84d87efcec89027f3c","size":21155,"data":"","first_seen":"2026-04-13T06:27:19.271183Z","last_seen":"2026-09-17T18:56:43.9461Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/script.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c4264c38628bf00a88e65efea1486bf","sha1":"f030f2f9cbacacf1ff98898b7052e2fe1f848744","sha256":"4459fbaba7c495fc0714926a3381a39d784bda91260b3782fe2bcc8b62beb624","sha512":"3e221ccee5c537b6c0ef2462d05354d65a9e5d9dbc7ec7ac86a641e00cd887ce0c34458936f9167736def4a842eaee48d4b31e877e7858739213261c250043a6","ssdeep":"192:HEleJMYfYWm4xCLJtnPVp567QSfGasqsHxyyhkYDd3dkCZTDZp9Enp4p9H5P1Um+:i4GJxPcGaSZZ32mqszb79ceJQrwTw5J","tlshash":"51b2635d3af21451453736bf4fafa0003269a053044bed583c8d5294ef98b2d7ea6bee","size":23949,"data":"","first_seen":"2026-09-17T18:49:29.939769Z","last_seen":"2026-09-17T18:56:43.981389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/comment-reply.min.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43fbbc12678117aff1fa824e8f55ccc7","sha1":"ba2b88b9dc15479ac67752fb703ee6df40f5c0f9","sha256":"f2cc60607c1d407e194dddc628e9fde74e56b9a60c4ba39d6b17a5e2629c83fb","sha512":"b77e9c630cdcc1e6b4ff29462882f64f6849cbea72b0fa0c417e971dbb09446dfe9d9f58ddd1e6a3e22c977f3a7f8bda122ce7231afcf4361fde3399f5e5ae8b","ssdeep":"","tlshash":"2251b8d833c95e767a8373355efe9302b2702705b50859618815c8a9217cf9523babbe","size":2950,"data":"","first_seen":"2026-07-09T07:53:36.929284Z","last_seen":"2026-10-15T06:38:03.326495Z","times_seen":5293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/js/event-calendar.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57c79a1c09b65d519c48acae3410af61","sha1":"2af5a7f39baeeefe88d68c9bb98892cad5c1d20b","sha256":"a0c7f26b1893aaf0a334d6054fa550f13e69d50ab472f6352fb245d7f2488677","sha512":"96ac001fe804e9e9772f924fd04057f4f8b8318ea31e840bed8e1bccd877a8ec910ebdb5dedfd56dad4abec8c3684b0fb69db34f21ff79d182029a755bec7d6a","ssdeep":"1536:bnAq/L40LkiTQ2mffxy3/jRuX5X4wbxj7gn0Fiu1hENUvPXB5Gvl:bLj4akiWuUhEKnx5Cl","tlshash":"48b319c53285b12aa3eb41a9406f0107b3359dd5144a842db13aedcd34ba8d896fffb7","size":117887,"data":"","first_seen":"2026-02-08T11:20:41.939405Z","last_seen":"2026-10-15T04:25:14.569322Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/hammer.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffc8426e73302e88a868077d0388a617","sha1":"ccc9e18b0bdb0dc4f3349b1fd575ac5ab369cc8c","sha256":"89a1a9c08abfb02f902a3c60be7bfc6064f4db0e7755f5dad68cb0b0fcf8bf59","sha512":"62f17e07430ae7ddf0414fc37f3f21859c6257de7a3d7793d9032803e8bb497cb49ea2c2adee6b3b398af8ab36f7cacc940546803747f9df967f4882540dab93","ssdeep":"384:MraovQkoTNISYtsryY3Jgwb/9t3qwUCn9C2HDcZPtr2:8aovQkeISYt7art3qwUC9C2HcP8","tlshash":"1392c68673c77281969720a1b06f010b613b8c96a4cd4968b4bdded17eb953c927bf3c","size":19721,"data":"","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.269835Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/bookly-bookly.min.js-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7235cc086751e8ee761cdbbf7208671","sha1":"563cd66f80fca254c6faa8f4df30365fa84038a0","sha256":"43c18244b683b03a09fac37f355b543d336451b682c2626430dabb2cffc5c97c","sha512":"b3e9f6c5774aabe21bd256ba1ef8a2d62c946f0ffb5c404b3e95163c0934d93ca59a34f74d0c14624acd08eae94d0bc8b4e99558cd1d876b8ab9dc66b5fe4095","ssdeep":"","tlshash":"3d017d3ed0a5af3253a487bd58360f666e742065f7944117b1f5b124072cd44b11f8d4","size":735,"data":"","first_seen":"2026-09-17T18:49:30.030838Z","last_seen":"2026-09-17T18:56:44.067821Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/bookly.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c16ea372b7df7ffd748b257c72d13d71","sha1":"aba0c4b7a4ce4216cdf7108f0a3186c58faf50be","sha256":"04cfa23d1ce0f7c19438a143fa466b43cee6f88c88178944e5ca254ed446d3e1","sha512":"095d082e9efab49356519e1e941a3345ee0c9a90b76ea33c57d851a2aabad387d95a6e613a1bcda0a75b18aaf3beba0ced6ca718a227b59c863ca6d7654d0605","ssdeep":"3072:cDrhX39yq1N+jUOiCJ0353Q1GwhNWHtbjHhm0Zc6e0MZ:cBX5IiCJGgQwhNWNbFm0xe0c","tlshash":"b734d8c9b292f0a553b7a17510af0206f33a6e85a80f4494f27ad4c53c7c94ee177fa9","size":243408,"data":"","first_seen":"2026-07-29T05:00:35.640705Z","last_seen":"2026-10-05T22:51:35.156711Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-addon-pro/frontend/modules/calendar/resources/js/frontend-calendar.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce028f318b04d506c09f3bf1e430abf3","sha1":"acddb1f883341bfb1088d81722c732d53f8f5ea9","sha256":"a8be8ad193210df3510d90846c7c334afa5036e39593e056862ba8c6672a4f65","sha512":"a77af1e07026dade7165d1fb73c958d2d1288de435a65347fe09c9b95dab7093dd502527d0014544262a0ae53250bc18a045b12b993338135da32275db5b421a","ssdeep":"192:WYsSu6LKJXl6kQ7vr/w/rOwdrWCFujZcZngNC+S3GBuWCBQInJ6:3KCvr4/rvdrW5d","tlshash":"e40233085aa6242143e3e1789a6f23043672982f494d7d227e5eeb505fc8f2c65fd7e8","size":8426,"data":"","first_seen":"2025-10-07T10:40:53.808384Z","last_seen":"2026-10-12T23:25:16.733339Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/the-grid-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01554f88a6b345f0116cff011606bd66","sha1":"3e93eddb011e8988038e377cd0ca1c33ee31d39a","sha256":"af3ac39c72a639d2c751710174772da0e035cbb35cd061b9ad4bf905784292b6","sha512":"2d3000e7d9397925ed0437f1dd50da6e2154898b11492862b7d4a16d50d4a273aae61be5e0cb05e46c0443f553f4cd54a41e697d4285fd4564b5c46beae2205a","ssdeep":"","tlshash":"7741dc1ec43859f6d7a56af808152a9a58fd003fe5ec1e18c9f8ce9c03994bb1b4842a","size":2082,"data":"","first_seen":"2026-09-17T18:49:30.027244Z","last_seen":"2026-09-17T18:56:44.06943Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/qrcode.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"663ef62276512200b83bd4076a4a039d","sha1":"9caa0d9a9ba4409a3f77540a1b15a7617aeb28e8","sha256":"3ee72de9f69c668f9567363a9358df955960bae9000d9ebd66414670f88e8735","sha512":"e6d35c0b135247e6b87377e233f735c558f211e212869860cf225881f628695b9a62fa55f764a3a00b56aec7a0838dd20c5cbc8300ba9a92dad09ca549bd56da","ssdeep":"384:7eJV0xV6jKC4z//wH2MGeWafAAdTRaysLh18s8wVLaX65YqzHHHsglI2MNURm1O9:6IxT3MRojrkGPG8JXW2uErCCc0uCyU","tlshash":"97e2f9d0ebad1256605ed498280e254efa7ca4335c48487fbe9cd5e15bfcb60a43eb34","size":33168,"data":"","first_seen":"2023-03-07T12:55:35Z","last_seen":"2026-10-15T06:06:12.270542Z","times_seen":7422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/scheduled-functions-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2aa248218872ba8f65fff65b90164ed0","sha1":"bfc64fe0841daf5f2a0b144832304bc7b6fdb106","sha256":"7408a2c8a26a6a35664e5364b7937c7590b089e93305997c7d149637231e23d7","sha512":"66595d29eae1537a38f1d2304e1edb2a091a422db1761b221c890c675174f5d11cc343da1e0bcd8342e9706bf4e2703f9f7ec7e7fed744b640e359c366ac0ba8","ssdeep":"","tlshash":"0c319edec3f9b9029b010574f4da373336d2e1e9dbc50809d5ba6a6f02f0a876f52415","size":1662,"data":"","first_seen":"2026-09-17T18:49:30.032512Z","last_seen":"2026-09-17T18:56:44.070025Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/advanced.min.js","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f860562cc09ee22939cf150f1cd63f6e","sha1":"f63f734e383f3acc89df708caf23a7adee4b8f5d","sha256":"ba8af8fe4589198c961ca491907a8d54d1a6c4c35ec02fb923a5fbce967e311f","sha512":"9f9d73bfa745bf49d04ed6ce92557b5deabee22337e9e5af03dc76ab5b3942adb3fafe2bc14e1f33b443014388068ae1507a521ccafce4f35bb18569432b03c5","ssdeep":"","tlshash":"6651fc58b6d1a6db016ba22a06cbe71e21ae4d3edd8245600511c0fe0ff9fc8605b72f","size":2981,"data":"","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-10T11:18:22.957803Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vc/vc_waypoints/vc-waypoints.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8fe107ea97839b0ad0f83d30726aabe","sha1":"7c4c2fb9fe7e1ec8868fe40ba36e6b4b06f9ec29","sha256":"c2b4bb76553cd0132a047fe645b9041fb591bf97699be836b0066e3a61e573f7","sha512":"f416c8184c0b9e84fa0e9a35842e8efd605f8c1a1ce092e60ba91a6a8a6068c70eb130603faf9a81a39aa47570ce3563aa3c22963f93c711f363179453cf63b9","ssdeep":"192:+kIozHD9Djc06hj8XAanNLvfSMuRPecpsG+YcXYVr8SxRn6kJrrAlC:JZzHD9Djc0C8QanNLv6MuRPerG+YeYVn","tlshash":"770274887a0574321bdf81bae92f434ab337582c740640bdb0d8d4ed28f2569776bb79","size":8679,"data":"","first_seen":"2024-12-26T08:37:42.604148Z","last_seen":"2026-10-15T04:36:10.972579Z","times_seen":4938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/reflector-plugins/shortcodes/assets/js/banner_slider.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fdbd9cdcabb218a5136ff9b021e6e0f0","sha1":"4acdabc54093d2ae9bd0d89afdf1975efcc1b13c","sha256":"76aaf07451ac9066b7da1afa9f115d8ad1519cf8fc96f9260aadf60a69ab8524","sha512":"52a841b26fe8dc46376d1b830a4595b0fe33a92845c79f95c7bc20c04fbc79461c5b080164c892bcc26a9294fadbf5d278fb2c20f99a162877f1d4c0e2783442","ssdeep":"","tlshash":"de116d4f35a10058517b32edabbf9918abe940031505ee98fc1c16909f9852f2636aac","size":925,"data":"","first_seen":"2024-08-19T19:43:46.048148Z","last_seen":"2026-09-17T18:56:44.017873Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/spin.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"545405225c13b2f42ab103fca31a49b1","sha1":"f91e2b661f4feb976b5e260bdc2366763ad13562","sha256":"3e27aa13441d103329a705eb4f349942bead5855f75b92a4c91572175ccddde8","sha512":"36c0d07c15dee0f427f05509ced4f7e8d5d08974229bc505601dde2a67a2fb3fc4bf698c68d8049617314905a8ad89f7c32701db3e25ed4f0157f90e2920e362","ssdeep":"96:nr3zL4VHN+pMw1EEyjQU8vWeJWVPoDyfSUri:nrDL49N+phXW8vWv2","tlshash":"bb91b55cf3c1b15f66232195b5afc58f213814867c1e88a8d564d6c99e70db820fbf9c","size":4277,"data":"","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.495363Z","times_seen":5233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-addon-pro/frontend/modules/customer_profile/resources/js/customer-profile.js?ver=9.5","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"068ce7705bc4a1a0f3372f7e0101667b","sha1":"3d36fcbdc54ad81e14b74e721cd959877d4a7161","sha256":"d490941981e9ea037c1117819e42cdd9316684bc523dd5d82a0c65fe5a6299d9","sha512":"99ac986e2b00c89010fcfe339514d5acc42d60a543f5ccde72e00fc080de0175d022b9ca3b3317bd26970f30fc922dc376be2a4f6a3ef6ea60a3cbc5711bbc1b","ssdeep":"","tlshash":"0421cc0972b7316050b3f8786bef4b2234142117480eaf103a1cd6c59f4089ff1b1cba","size":1331,"data":"","first_seen":"2023-03-07T01:18:48Z","last_seen":"2026-10-15T05:28:34.596042Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/jquery.fitvids.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a6e8887370c060d07ed9e43f3b5e126","sha1":"9de03880e7e8cb1583d2dabb62cc9cd650feca38","sha256":"b0197845574f786612ae1e43a73226d3ca2d306c4aa9b56922e5400b2efddf2e","sha512":"673dfcaf3c6558f4411f2a92efcd69c341092a0a70c897dfdb8ba653bcbba1f6eae2733a5a097999afaf783e3f393224654e130d5622570bfb0dbd636e187c20","ssdeep":"","tlshash":"c95174923310a53c5689349ba92f415dba94c8fc07efe41cb1f6d8e9992cd4c50354fe","size":2442,"data":"","first_seen":"2023-03-08T05:56:55Z","last_seen":"2026-10-14T07:36:36.518989Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/reflector-script-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a798532521b971ba0c84837feab8b282","sha1":"efd6d45d26dd351de715bbb15d80c419097b7817","sha256":"a291ea56694260c476b582f84cce4ad30764b491bc2c9acbc64e6e1b3957d685","sha512":"80a3068bf531546514335f43d7a894b5d58f27ad6cf44d7a32b399e756f0c19777cd0f76bb82646c0f80bf704d02f333938ee51262c9c3d864bb0491b0d571fc","ssdeep":"","tlshash":"931122efd9ad9d0103b1cff0002e7b26d26a3477d8c0c34aa788c44d01a8a80af48022","size":957,"data":"","first_seen":"2026-09-17T18:49:29.995921Z","last_seen":"2026-09-17T18:56:44.070798Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/reflector-plugins/shortcodes/assets/js/portfolio-list.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55a533612d91328114c3e8261205cf10","sha1":"0a4baadb0764ab901348ee018eba13b6a30c3271","sha256":"3f21d003ffc521f77ad3f12ea0f78f8be1aadcb5508c8a2d9153450a1570ac8d","sha512":"db50b9aff7879bcfc2318f85f9baff22ac1bb845de65b4389340e1661bcd8e8a7c36231d6798ab0618f3a194e03557e888eb6ec07d47d0d2830abeb2be6da3b1","ssdeep":"96:fX6ohXsGLPl/NobJXCpr6Crxz8WQl29xvaxjw:vNNL9ybVCpr6CrxwWQl295","tlshash":"7d9142583872062014bb307b4eff5a843a6aa8331d83ed22bd5d455c5fc4506fbb5faa","size":4469,"data":"","first_seen":"2024-08-19T19:43:46.051813Z","last_seen":"2026-09-17T18:56:44.015658Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/js/transition.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbca6faae80c5d06fbcce5f070d29729","sha1":"0f360ee5b276aa62661d29d39eec312507911e60","sha256":"33a5d109853841a797fb6c67bb5ef4131608f5f9c137874a69849b8b035925f5","sha512":"db4c833d94fda89a82e288616fa5059b9c49ceb07d69c0d77b4635334244bdd1c707d71b52a2c9fbec6130529138add725fe1e328c23a9133b931b16d7ee0737","ssdeep":"","tlshash":"55f05904a320a0a04107e72923ee0405353c68307fb2b09c7786bb8b6ce754da157ff8","size":497,"data":"","first_seen":"2025-02-12T14:25:54.886649Z","last_seen":"2026-10-14T15:52:15.632919Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-chat-widget.js?v=3.0.78","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"505ae4d068266bf15f56845f1b88f7e0","sha1":"c1b562917e908ee74686b6bb8eb260b8b70fbc70","sha256":"1992e77e34fc8bcdd053e136c4544fb1a00c9dd66ae5463e519e23797771abd1","sha512":"6f83de6c312e1b36c66b2be9a0226f02b63ae27c66fb3ac4cdeb525b54de0365b987dedeb562b0cca99d6dd61105a57e58e28a962db53d00d71b0f25fba6f32e","ssdeep":"1536:k7mE5Y3q3+lI5yRNKDY8gUfe2f5K9ZPwjRm/YYNRdpBtojhStLT5I7avpx7YBy:kqEO3G5ENKISA9Z4Ci8SOvv7","tlshash":"70f36df6a7c0a0b082528be9d0771521e23d367eb905c0e0b25d8c557b1be8fa577e78","size":170203,"data":"","first_seen":"2026-09-17T18:49:29.822607Z","last_seen":"2026-09-17T18:56:43.931404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/modernizr-2.6.2.min.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42306a279a9e831515347ae319181cd1","sha1":"d069641242e4fe1beb6de8f53a77dd964c98bce0","sha256":"cf25ec18f223f4c51ce1128a42e644cdc2244d88f89d1a51440d9dbe51f4efe8","sha512":"2729e4c89ff5d7aeea9036d9d3d345506295dc04609e6c924b340b035a4402742e66a3e87400ff80d84f90f8eda85e6f329e053db20b156e35225ed9cb73be06","ssdeep":"384:BEDD9HW599TpJGd+xesmAnxpakrwHVXHh1pD:BCDKjebALak0HVXH1","tlshash":"6e620acdb153b116839760ba61bf460ff23e9899a8184854e059c5ecbe74ce8473bf1e","size":15414,"data":"","first_seen":"2023-03-07T01:07:49Z","last_seen":"2026-10-15T05:02:01.981589Z","times_seen":4878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/jquery-ui-core-js-before","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81184adff49ec57d76786438efcc7b91","sha1":"1a93f5d3c70cc6ba0f22dc37420f1bb4065dc09d","sha256":"99dba303319e0e854007a1a476ab64aead447ccac8ff2c681387b36ee18849e8","sha512":"0b2490a0dd75ec8b74c322514383ef634a3160850cc55285dcec9a40cd55bb88fd486fe21f5b12b3e0f0b13c425a7804f093b89dd19ac18506ed6953acf525a7","ssdeep":"","tlshash":"ce0111cae2e02028b0b008b28ea00288b02ab2a8e2b200a8b80a080808308008002a0a","size":771,"data":"","first_seen":"2026-08-23T23:16:52.688221Z","last_seen":"2026-10-13T17:36:37.245169Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/jquery-ui-datepicker-js-after","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02100c3b2261dc41c2d3608c30459fc6","sha1":"22376ad39df3c8f588067e1286cbcb1f81a31fbd","sha256":"a9000d8a09551b4af65f91f689f118336132619b58d38f2ffe33b847f8a5a8bc","sha512":"0de433f014f11727866ce94577e9d102093be091fa21dae66bb4d25be4725a16777f095a34094d99bb6c77c3a1a63204cf8ca0e5639422ef6808c4e5b00ec3b8","ssdeep":"","tlshash":"db21261dd4266a3657b312bd9c250f1b6a1d60aaf2540007f0b8a3251b6d84ab06fc04","size":1353,"data":"","first_seen":"2026-07-22T04:54:35.183997Z","last_seen":"2026-10-11T08:13:21.289095Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/tooltipster/js/jquery.tooltipster.min.js?ver=3.3.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff2f685494b400ea2098c79332759a8f","sha1":"bdcc80d51dc627f9bc2e7d887adab7c6439bd8de","sha256":"95e9e3ea5a0771d7eeead1503d41cde92d8eec6da0bfbc97fcff4e9d173c967a","sha512":"be0635fae95e6b11449177d414b897079b9daf2fafe6e0af15ebaa527e0252459b02d525e53a80c83bb85e17404f3749ec26d7c5ba271d2f145ac11cd03f130f","ssdeep":"192:l0XS0XTcXVuUxTHmNEJD7uiRcxaIlRYqulfrT1r7mMzdnxpk:SoNTnRaq3Bb0","tlshash":"58729346f262332987fbe1f6402f720d413aea311bc34174a515ead16def605a2a7f68","size":17523,"data":"","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-10-15T04:51:52.519791Z","times_seen":3857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/shortcodes.min.js","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"667fa4687e790c76cb2859bb8a25da03","sha1":"e60bf76c027df3923bac3ae791e296483a18be20","sha256":"dcfce736aed8e91a9c447cd09858192f8b1239d11d45b209ef8806761b010267","sha512":"ada1357e3d7d66fd83c47702a5018a913c6a8839803da6f46c32034ef0f0b72d433d070938521b61df942717fd96b5d46dc675a97df5ecc48f5fdcf2270e19dc","ssdeep":"","tlshash":"8e51641ff29e3f2648e7347ca0eb700858272d329e4391a5699252565d6cf0990f3d6d","size":2658,"data":"","first_seen":"2024-08-20T09:47:33.161855Z","last_seen":"2026-09-23T11:25:47.188829Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-web-sdk.js?v=4.2.8","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7eda1c304005e85d9a0ca041656296a","sha1":"476ef09985d4e5e9433bc3f6552b30482e1d2412","sha256":"c59832f5900a575d43dee093a977ed3961a2a52270a2936f9c04fd9d770fa9a0","sha512":"429bdb497ba69bcf46fc22d5666d90efe90525dae8d374fd03f54179cce1fc65e64dbaaf5fc4b1ce6674811cb373aba5f7c3d82342e5cf762b7f044bb81f8824","ssdeep":"768:JRKROHluK2/7xaqmWRXILIzp3i/NR+RrRsqJuYx1TRkR:F0tmuWIzp3i/II","tlshash":"0b431ad9bac2b0784353a6a0403f2106e73f3d25790d8850f359de91bb65a8ec12bf78","size":56122,"data":"","first_seen":"2026-09-07T17:22:21.777516Z","last_seen":"2026-10-14T10:54:34.253957Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/bookly-globals-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"645012a1b5a47d1a84bd8c0ab710dc43","sha1":"13080d247c3ef2a05c9a015379c230a22c44c433","sha256":"37fdd35cff640fdc2a4031f020023d3c45a06dd4f953113e8e4668e0777f82e1","sha512":"8a664a48ab0617af0271af8e54d7cbd74c2c5011e0487a6b8784f62880c91a6300ad9fbe1456730003b1a902e1c24028c7ba9433f1e646c8b3f27f0c62de89cc","ssdeep":"","tlshash":"d731690dd4759eb7d7b48bfc4c691f5f49c450b7f189092a74e9f9414229f04709e948","size":1519,"data":"","first_seen":"2026-09-17T18:49:30.028488Z","last_seen":"2026-09-17T18:56:44.072965Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/js/dismiss.js?ver=1749168163","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fca48778f2f0abf88bfde5f805bd5ecb","sha1":"258ede6be089676026de1889e5b5ad905d5b58dd","sha256":"877ef36c4ceab3b9e1f394f606865ce12799bf52ece2e485319670378636fbed","sha512":"4281c18b6d25d690b8ab36be5cb07a3b4bbdb089af5b4b3f82dd24bb9dc8334844980f797bcea66fa13c5ac500ad5eceba02a46ee39c63cd70512c2c81e02039","ssdeep":"","tlshash":"1a017b1db36d23b201bdb3af46a926dda57a019ae018044a6c264c0418ebc1817e0ff6","size":680,"data":"","first_seen":"2023-03-07T13:52:39Z","last_seen":"2026-10-12T19:02:38.275403Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/the_grid/frontend/assets/js/the-grid.min.js?ver=2.7.9.5","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ab2e69f0a2d0685271759b3b491dfab","sha1":"7ad038454a7b37fbe62aa97c18850260870b45e9","sha256":"1e83eef1589fbfeb3d23084cce052a9b2a33b1e14ec88ed1bc9fc2f013bd477a","sha512":"5821db211e455dfcf404fc9c2dbffbf23fd4cd001a2bdcfc93a6acf34f9aaed3d749322d46c1c6a63ca188a09e7796fdc8446d57d52e398f0b22e904aa556b04","ssdeep":"1536:RjRuuCZaPLnaNjNLdvs4uqe1s0LR846DpoihsS34A:Rjk2PLnKTe1BLi4Up7","tlshash":"cf931a49f7413435429770a661af060e723b782de60680acbb76d8ea1db9d8d2137f7c","size":97346,"data":"","first_seen":"2023-07-18T14:28:15Z","last_seen":"2026-10-14T20:34:09.521236Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/functions.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c3a7df4a25484dc6e09fde276e3f27c","sha1":"92e1876be1bc285197d52bee0748c1741e15f71c","sha256":"1838934855c5007b1cb3b4f502e640f74d6e64c1a73585d96a17179d59edbe50","sha512":"331a4664e8bb98354d6c0daaa8be1f6aaadf9c9020feeb94adc2601245b07e3744dd124e14873ff6d18e513a1f30f135a5017d0198590ed69422ab80fc2bc24b","ssdeep":"384:k05j35bPYeYo5fEIKzZk0dKlC2S+QvjR2dGuzs/FJQN8rVoelVq2+p6T:b5zDdfuzZk8XxvUs/Frm0Yp6T","tlshash":"6923b5da732f367a4db6233ed4fa89809f2ee03252412e3df5ad250c16d4c06a7a5d1d","size":48765,"data":"","first_seen":"2024-08-20T09:47:33.154487Z","last_seen":"2026-09-23T11:25:47.089197Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/thumbnails-popup.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a832c3a4e99b1455df273ffc1320e98","sha1":"19c35cc92e6431c7a59925e8e85bba1bb5bbc003","sha256":"42e0a27138dff85b45f999c69c92edb8a36cc684628691907007ac0818253bfb","sha512":"640dc759e8d8501a8cd91f32fd3b47a0bb7cac2333943d9d3d42ebbc8898839f6ebe862c31a7ee018d74cde4be657e27b4a4502b01eea0a396698949f58ca9f1","ssdeep":"96:q9HqSDRxESvodwii0BvhOjYlIkC6Cx2sqTQGLcCAg1NLBH/6TNmfvrn1YTXUhHGW:4HTRxhwGF0j5lIfJyTVBH/gyrnDIK","tlshash":"2cf11f947d283241571652d5d13b570e61273536e222442e3c3ddce3f87acc623eeab9","size":7650,"data":"","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-10T11:18:22.631039Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/js/daterangepicker.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f721fbef3121ce28da56bece7559a2b","sha1":"56b283ddd9b0956f3d31d0f6d552830d54d86785","sha256":"920c1e92a70b140ef4f8f9546efb0dcc246a319acc7527cadb5a09feeabea773","sha512":"60aca94177f3028c321995ce7e0a8100c405a3f56c967dbe325b303dce16292d9436fe5400bd54ff73c0c172ffb22d1ddd48e9c6acb8ea77a1522f520bc4d35a","ssdeep":"768:iQQFRDuOS/+hmqC2MtmNfXnGnLofiLjESlrXR3EHm3S5fAz7337xK9XJfgxOzLeK:vQFR2aKMSDS5fAz7H7xS","tlshash":"e06300495bab063295a721be8fcf1245a720812b5887dd2c3e2d52c02fd893e51fdfb5","size":67204,"data":"","first_seen":"2023-03-14T07:31:01Z","last_seen":"2026-10-15T04:25:13.762458Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/isotope-layout/dist/isotope.pkgd.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35445,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-10-15T06:12:33.925045Z","times_seen":27763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/swiper.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44de22616790b3d7173c3500d891fa23","sha1":"661c001aee47c2aa5421cecb6ba412d0bc35d4e6","sha256":"132a262dc2881ee4fe6974bdfd2be27f13fc630e1ab80951b3982250d9d1adcf","sha512":"8491138f0ee17bddaa101924ba0aa6f99cc1d7874728559d53182ba7be6321718fdd99d38c3cffaeafb3cd890ebb83a42c0fe57aacb8836bfeb6a1af292bfd13","ssdeep":"1536:yorVciYAwdCXrlnLtN+K8ExalQgYySj25RtYNluvpIXvH7WcWUwcPqYbaE8EtObq:qCXrDNFLxvOeluSfH7WcWUwcPquDHX","tlshash":"18c31949b35071d555e32256539ed201a3b62845b90ac1a831b2dcdbacbde8c03bfefd","size":120705,"data":"","first_seen":"2023-03-10T05:35:53Z","last_seen":"2026-10-04T11:53:47.279803Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=6.3.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b822748ed47275167bb53b6c3eaf438","sha1":"d6b1a24550040dadc6233d66329861b7ea6d0d88","sha256":"4b1825f9dc995eea67e69d5e9b9b20c4a0c3a58a076ab4e1b6d46460509fa1f6","sha512":"ba0d2a4ff4dee168bff10fa41de87c1d76a9d2e69ab99569be57d58d8fd926a9c45e0c1073ff94385703baf56b86cb9d55728ece13c20e88890a58054bae8c27","ssdeep":"192:iLQ20QyTGMS39maPewoPV44aNCu6p4fTzPS3plIhMHujlO:iLQnnS3h4PPPsTzm3MjA","tlshash":"3d32d5d4b32629be02db60b6f2e927a1922d16c5941ad4387d35ccf506096c93f36ff1","size":11451,"data":"","first_seen":"2026-07-09T17:38:06.148104Z","last_seen":"2026-10-15T06:26:21.348748Z","times_seen":1087,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/jquery.hammer.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0655fbe8768d8c3b9afe31fbdc23f1a5","sha1":"878fcf75f300199387ffa723241238acd74ccf24","sha256":"6b7718a2c0e72e3f07e37eecf8c033fdbc2922a8016707299b0d26db76280aa2","sha512":"70860f93df5b3911cd3b7c7fbfa65e1cd188c2e98c9d24d3b2eb2d00c50c66f6caae2e27ee1d16d29ea9317f30c1391305b041f9e10ed618e904891209b3cb2a","ssdeep":"","tlshash":"b01132683bdba11051f735bc876f40c97139e10b540a9a923a8c57f21fad5782ba2b9c","size":987,"data":"","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.239305Z","times_seen":1459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/lightgallery.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4906df82938de71da7ab54a757ad5cbd","sha1":"f8cf690574dab474b9bf93ef0af79b96efb58cf5","sha256":"f761e536155ec8d0f7c9bf167d1ea3457edf238aa539311bfde3bfb0adc62c0e","sha512":"032d0db04ffa2eebdab7c229d41a53a266b3109e398dcce3225fc28d00aab13a722cd214f327d8730997bd2577ae365606e34c560573a9403dae4ff94c6a8ad3","ssdeep":"768:bsG4leTSa1HxUQIqmBT6AQd7N9t4nmGyb3cVpium/jA0Pcs36rxEWRm:bDAQdFao","tlshash":"4eb2b82a31391386176b29e1610bad0d21ea712ff10384aa7cbdc4f565f5cc9354aefe","size":25575,"data":"","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-03T01:54:12.822833Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/magnific-popup.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fff3e6fa42c1650eac7aa1e1f7b7653","sha1":"01269a9d6dcb2f83d58aefc3101b9ef898b4cf19","sha256":"9c447f8aaf5858bcf3177c81596565825dadc9514d9a7abfc551d05e612271a2","sha512":"2062be98115602b11badb39d440c52cec37550ab9568896ff2f28126412d25bf9d0148284e05b3a9c8bf69acb2f00e92d54a005d4cb05db64961289f1886df3c","ssdeep":"384:CmVKik3bkupEfCqxTHQuyeiQotZyVqg/JBqjKo6vdSiMu5qWSZ9:CV/yJO/XyVqgBN9BSj","tlshash":"8792f868f166b26783e770b83c1f380836329912e806c4557956eda86cfded99127f3c","size":20031,"data":"","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-10T11:18:22.000349Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/reflector-header-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec35ce21c28236f530f4105c71445bcc","sha1":"2c3919c7b5c91a1cd04d1d0175652bc1518fcb89","sha256":"2b73d71efe23b8dc976168c8a02614b9ce53116e0a704e4e8446378148869eda","sha512":"ed9fd3a1bd84467f9d9c473f6b2613e6898545b988bad004c6e268718570f84ebace4f9db81c5461bc9b843125ba6b04e8bfc423e726f23fb14db4495e0a956d","ssdeep":"","tlshash":"c8119288ec66363069935d70c0208c3290094082c659999a758c004e88ada81aaa4412","size":867,"data":"","first_seen":"2026-09-17T18:49:30.025955Z","last_seen":"2026-09-17T18:56:44.073592Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/ui/core.min.js?ver=1.14.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffb9792c762c28c883fbda04cb87bfd7","sha1":"1d142a621d684714fd78aa415b1d13adca03fd13","sha256":"b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7","sha512":"5605218f2ca25c9bbd553aef21adcdab3819eb7a5ce0081a411d3ca82b26bffa129b8aa7013f6d18f933fc9e526380e1b92da6c87938eb3cfa660a05b3a7a98e","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSd:9P4k0vfSA4g","tlshash":"4a82e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","size":18674,"data":"","first_seen":"2026-08-08T12:00:35.066846Z","last_seen":"2026-10-15T06:34:15.276749Z","times_seen":22887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/js/moment.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c80207c947912a0a24c577d793c91088","sha1":"aff601d1102ead4000873722c46865db0102e1a9","sha256":"3abec75692735d0664a10337b1403620f8edf2b4cb4b9fc5216dea2e623b1f34","sha512":"f8852a55fb3137a48256bcdab05dad6fa7f4cc67cd9b30858b0e742ee85cf6867b36ca24a26bc8399398fc75adc76ad86e59f1f2a6724eea63373acd7e167a43","ssdeep":"768:H9LqJUvlnpLWIqCiFghOcknUU/aIkk/HRXHq4Gqjv35i:deAlpLWfWOcCBJHRXq4bjE","tlshash":"b743a3ce3546b012576212b5082f490bf33e6999680e4d2cf508e9e97979c6e427ffbc","size":58064,"data":"","first_seen":"2023-03-07T01:07:48Z","last_seen":"2026-10-15T06:21:48.512523Z","times_seen":4577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.14.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2cab78252b4fec15cd5bd2fa636f0a6","sha1":"79dbedbd5465ae156b674239fa70d79886ce1f86","sha256":"37e07bfb7f72a47dc1ac892a813f27bd1744ef4653ab6d9e7588b8ec228e4045","sha512":"3429fca7cbe63d69a7f25d398198283dfee4a67c145bdd4ce4db310332eb71676cc92b0c439dd80895a6ff1d297626bd686042bb270dadacb99c1771516a5136","ssdeep":"768:co1EZXteTlaCaedY5+N5SHf7nQWpB72z1EuPLkhDWucxooqY:cjZXteTlaCaedY5+N5VWpBqz+cxooqY","tlshash":"20f2c51e30007d2a927b51a6053a3a179233095f9d50c11cbd6ea6ee5b7cc45b3befb2","size":36740,"data":"","first_seen":"2026-08-20T00:13:36.00742Z","last_seen":"2026-10-15T06:46:02.017668Z","times_seen":2421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-15T06:34:10.211049Z","times_seen":254792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/whizzy-plugin-script-js-extra","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d77411da5725c7a2245fac3c18ab796e","sha1":"5e3e1f49fc523ef3cb14133edac13e885605a895","sha256":"4e203d51bdfffb117923a14929ec8b0c3751ab6f1824fcd2b985554d6f1860d2","sha512":"1b23cbc12f6957ab66de11438ba3990b5728fec8a9b53cb050266724ad9325114997cd26432d00e258e094e2ef051884fa1599584acc2ec8cc11a60ae534acf0","ssdeep":"","tlshash":"5511c252d9cc0e3a53aaca7f4c6e1b3750b9207aecb1c25ae1a08016505058d694259b","size":1024,"data":"","first_seen":"2026-09-17T18:49:30.03711Z","last_seen":"2026-09-17T18:56:44.074454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/includes/add-ons/frontend-agents/js/functions.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d23b478f2196456ce80ab5266820b36f","sha1":"b29be3adaef3f2e60878ed686a6bd45a17d657c4","sha256":"ef3afedf5c756a42b10db87d40c45041d974cad8942b31a80c3d8280a8f1e139","sha512":"83a25cd2078a065b8eb94043d47c71da501addab5c97d1993984f7a644ae9b34e5fefa80c7488c9bc5cdce97d662e9ac6fe29133eaf545ae28b398441eab40d5","ssdeep":"96:jDzfeNfe4hfUfNf7DLqNhyzHWR0owrhyhxWZ/mowx:jDzWNW4tmN2NszHWRkshxWZ/4","tlshash":"eaa144de736f74a759b7113ef83b4c547e1dc83162021adcf09a916ca8d8406fb99c29","size":4973,"data":"","first_seen":"2024-08-20T09:47:33.167753Z","last_seen":"2026-09-23T11:25:47.198976Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/jquery.mousewheel.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2947532b911952f6a184695c97aa964d","sha1":"db7194b7ca01ee3245d0f3871ab1b8c88963e07c","sha256":"a80f860251402c6bd55adaa519fe7260a90e6257d4255d5652b734df3f38f39f","sha512":"a3d0d26a69ad0fce0d3197e32f65a0bd8fef822af6e297505622ddeeacd6fd7ffc76899cf0193d880e650dcea3bacf110fe154089eb47d5c2a77988417082571","ssdeep":"","tlshash":"41517141770672f381f64f36b22fb603713ac005140328a279bc9d946ba5deb5363d1e","size":2784,"data":"","first_seen":"2023-03-07T01:42:35Z","last_seen":"2026-10-14T22:19:49.824555Z","times_seen":750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/foxlazy.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a152415b97c3b5883670f09a56d4479c","sha1":"a42c7a1c0ad50f73b8866f28e8c15b7dc8fe9219","sha256":"d1b2964fc77e76b2d52117934e4a02778ceb4f385dceec26f4a7a11e3eb7ca24","sha512":"ddaba30321114f474316c57e98c852b52d3e928266fd1096bf1fbddcb722d399536305e35e7a1bba0f7fbafc10ea037bc3b2395f2ce76a685bbe9a3eebc29ed0","ssdeep":"","tlshash":"02112539320139634ff5f66aa15f1748143e7a274147c122f10ee8e95ef4a243933d9d","size":997,"data":"","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-14T07:36:36.526204Z","times_seen":167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/custom-facebook-feed/assets/js/cff-scripts.min.js?ver=4.9.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36ff58607ae2ebf7d4d5e6d3f77cd715","sha1":"fa632558417a83fba039137668cc7d31ad130f24","sha256":"1c6ec907add6b99edc1f520b66983fcb1b44541d831579c8be61d4ddcf6a2ca3","sha512":"95cf1aa97ae76c62be215a107e0c272700f73dd2faace1b195e3793891d8531352e56a7432c607aea4f0dd6075dd963ab6e0ad23fdc7f46d9bb2e7d3d0e2bb9d","ssdeep":"768:Ynhi7+FQBUmroBpFjsZ7zFG09CsCthMKGnJ2MAJk3KT+Z7hK+/PKwGg4fBAJCK32:yhpQBUJthMKGYOJCOH/PJn98WAdaX+","tlshash":"1113eb0ab790347442b7a175e6bf020f7137287cb94681a8b655d4f62cba98d2133f7d","size":43529,"data":"","first_seen":"2025-06-03T20:04:10.819323Z","last_seen":"2026-10-14T22:50:26.512046Z","times_seen":2949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/ui/effect.min.js?ver=1.14.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9381ec7e41a0dc564c40715df024f63","sha1":"7961de4d7cfc26c015c8d96f7fe6adfd3c4a3f7a","sha256":"60592e9b903a1b863b8c517bc334300e33ac1f92086b9c77f1296f89a86b60cb","sha512":"c62cea60804587d72abb0660abd0f2a1b4310e4b58dabef994b8ae54421562b2923ff7f9e772b6324d58f6a88647d40dee8c21f850ea17d16890f620eef732a8","ssdeep":"192:JwtNLOwpLA/jq/XOnA85Fq5f6IyfGmjjJnd9:Jwt4GE/DXT1jjJnP","tlshash":"8822d79cb44178154beba372406f9e0fb031546cb19b4544f239c4daa9bea8e1037fbe","size":10092,"data":"","first_seen":"2026-08-20T01:03:08.936576Z","last_seen":"2026-10-15T06:59:40.227076Z","times_seen":901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/js/vc_carousel.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64b036e39eab04a74d6b916c19d45532","sha1":"7e0d5980570bd7ce910d2811fc97ffef444305ee","sha256":"dee1bfe2e02e6587d5f9358e7b643e7a70a80536be7dc223fb67bbf06fe53722","sha512":"f2ae9d5d367e0376347dbd9d7986ae137705ad69379b1d1e051728a98dcaaf054234ff2a6563245fd6ac0eca9f2b7ed8cc8d4c4a0837265e168dbb6846014086","ssdeep":"192:t5htlh2uVlK2jjtJhnmwkt+YWP7yX7/Zdw9DjTD54PdPO7CvT:fhtlh2uVlK29JB7kt+YhX7/LwJYPV","tlshash":"b4025216b22076b04767b2930109870d373a7e3ab44250acb4bdddda5ab5c48b12ff7d","size":8328,"data":"","first_seen":"2025-02-12T14:25:54.888527Z","last_seen":"2026-10-08T01:46:51.269086Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/js/lightbox.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff500f2b4b58b37e17c2a11a38df1822","sha1":"92004462ac1d5c249a82ba3640b3b00665a2a57c","sha256":"03a8c8e55f6cd49ce7916c2c05a44af2449e5cb808a907f17e7bdd0ce6445116","sha512":"29b4456e30396f035a9fa0ef3e5d4e0d4a25bd34d9fef724b2c9c58646b9706f342556b9cd29513c2af4e79c52814feaea83081a16562e171b8080b47f2c3745","ssdeep":"192:U6kcrredKIevdZTQkH+3alLxERpXFZRbzk:PXPYP+7Qke6","tlshash":"59127109fa14212ad6af40d7310b9f1a03376636be03966c743cc6e969f9c44597bf38","size":9754,"data":"","first_seen":"2024-11-12T10:11:12.93625Z","last_seen":"2026-10-14T12:44:53.198047Z","times_seen":974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-subscription.js?v=3.0.78","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"06c372452d23776b1efe97a855a3a9a5","sha1":"9f17aa65a67924ee2b578568145af8bad90f84d2","sha256":"c24b90109b429f51d0f8fe87bb7232406e64c239bafe817be08d53ccf5c081e0","sha512":"d40d8e4cbce950795f6f1b0275ffd6ae66c5a009a5d51c2ff3c78672f89c476ba37e66c21bdeeda273ae2bff92f94391ff939cdbd7189ef5fc35f1239a0c62a3","ssdeep":"3072:p6+98BDWY9c+N2mj/Me5j2cTYUwjvRVXgkBg:o+CkY6+Jj/Me5jBIHXe","tlshash":"7a545c16fe81f47006d721e59c77201893397a1cb412a850bbeecd82ab45fceda2776d","size":300669,"data":"","first_seen":"2026-09-07T17:22:21.844279Z","last_seen":"2026-10-14T10:54:34.190057Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/ladda.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9a7f95a94003a95d03e1a3fbafb1675","sha1":"eae56420ff81459d25629daec0310126a78ebe36","sha256":"24cb05ccff63bafc2a18ba4fdb70b92bda051a3cb0dc223fe50aa185500ef971","sha512":"879f5ec5aa45c15b2da3f747500610cdea8e7662386fc61ff4daae4b2c5db1fcf8b6c830557eeb91ce89e19ac4b9d6e969b11bca437da5a8e1cc7df748ef8c90","ssdeep":"","tlshash":"a97154ed31807a772b9741f1583fa10ba4716574190f8190a27ddca5fca8d5d28b3e7c","size":3753,"data":"","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.238221Z","times_seen":1463,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/pushengage-sdk-init-js-after","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3def6cc5dd6bc69be004794932329574","sha1":"08a0745822441387901cc81b5501ea829e32d240","sha256":"d4fe235db28bca90a9b404c27cc88b4119e5b7a88f7683ad975e0da015c491f3","sha512":"a114db3801b1552687ddec37c8652416193497e4148893249db7332d2f2d19dd860880e008e2d37977da0f7dc7735933cdfc3269cd66e5753b0be19b509eb7cc","ssdeep":"","tlshash":"17f05c45efad017ec4b5a3fd7c345898f07c2014ca279c0a8e966834f111dd1c549266","size":591,"data":"","first_seen":"2026-09-17T18:49:30.038107Z","last_seen":"2026-09-17T18:56:44.075107Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-10-15T06:36:00.269461Z","times_seen":30357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/spin.jquery.js?ver=2.0.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1e10e6367463a7d3eab63305d6d18ef","sha1":"2c27f51da537099b9ffd1f266fd67f5cb8a0a4f1","sha256":"83de3722a63b4c796f71089c60fd1f92218211308b3b2446e8d1b2a96f25f469","sha512":"97ee7e98b84cd463dcba156ef75aa463a7adfd311f9e5bf55f7321780babcd389cb95e7dc8a4b6e7c2912141b32e3c90c01e9bee1e879dd68c4818a355ebcba6","ssdeep":"","tlshash":"cb319f6195eb2aba4133a378815b8189e713c167120606057cfc918c6f70f5e76b8fdd","size":1835,"data":"","first_seen":"2023-04-15T21:21:00Z","last_seen":"2026-09-23T11:25:47.21577Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/contact-form-7-js-before","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23190546bb47e864cc0d44116541ea39","sha1":"6a749697f316d8e20e2371d97bee730bacaa399c","sha256":"b966567ba79e7c2e5d31bb38a4bb9e260033ecf9050ecd721141eedceb8a86ed","sha512":"af496a6cee730ee732c9b4c1cb714350fb18c5ec89e05d39484bdf101f685ed94712b0eafbfea9d016e2cc7b8502c1e592ed850ed39a62c545c4b02ed347794b","ssdeep":"","tlshash":"d61122ead5a8ac0910e1c538003d1321f125a52bcb2f5f59b30e404c1fe847cb414586","size":931,"data":"","first_seen":"2026-09-17T18:49:30.029613Z","last_seen":"2026-09-17T18:56:44.075842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeac20526e21c2dbb9351f4be1090567","sha1":"cf643551f008903303f5e76a783661dacde93dff","sha256":"2196d9f8b32a0eda02e6be95e8d5892926c0c2ef84fb726fb9a8ceeca64c9eba","sha512":"705639a729d29aff5f84075619e3e2acde745b9c92c83a3114875e8bf54e8a72b7e2b04af409b74bdf15a711debd39a6c15385b6aa54ccf3d3632ffe427ec44e","ssdeep":"384:r8xD4MTE3f70738ig7QOKsxbRNEXSHPtDPzlR6aZW0I1:r8xD4F3z073rg7P2XSHPtDPzlkao0I1","tlshash":"07726669795470f512b32727b1377b1a7023383a958a1110251adcb83ebfd8f1626fee","size":17471,"data":"","first_seen":"2024-12-18T07:33:33.797305Z","last_seen":"2026-10-15T04:36:12.37649Z","times_seen":5796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 1.4.1","filename":"https://www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/jquery-migrate.min.js?ver=1.4.1-wp","line_number":2,"column_number":552},{"level":"warn","text":"PushEngage:Web push notifications are disabled because the browser is in private/incognito mode.","filename":"https://clientcdn.pushengage.com/sdks/pushengage-subscription.js?v=3.0.78","line_number":1,"column_number":123221},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj116 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[click_parent_menu_item:map[configurable:true enumerable:true value:1 writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://www.rooftopantalya.live/wp-content/themes/reflector/assets/js/header.js?ver=7.1","line_number":136,"column_number":21},{"level":"log","text":".aside-menu .menu-item a i","filename":"https://www.rooftopantalya.live/wp-content/themes/reflector/assets/js/header.js?ver=7.1","line_number":137,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/bootstrap-icons.min.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.280Z","timestamp":1789671334280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/bootstrap-icons.min.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvNZ9ntT5mqSz6MDH9gct62IWle0QtUpfeGOGQialPNv14VsN3Jp7JWgJFrQGpkKDG0j457Zs5kTj0mvoxgY8feand4zV6NqvjOCqYri2%2FrMLbvPE4n1M1B28VPApsNZXli2fjT%2B6JyDgg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f4fbd1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":85875,"size_decoded":13315,"mime_type":"text/css","magic":"ASCII text, with very long lines (65354)","md5":"5605c44f8b24ea5de37a959955b71eb6","sha1":"043a332e4f555cc0bfd35e451be955b4b93966a0","sha256":"f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62","sha512":"74f5d8703b9bfda79bd3c73ade346afe4e8668a71c976e7a250cbf0273aaec2027119f45cd22fdc126dc664329e11dbabc1b0c2c5607e2443aeff6db57c5da09","ssdeep":"768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz","tlshash":"9383fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-01-11T04:35:50Z","last_seen":"2026-10-15T06:10:17.625708Z","times_seen":11783,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.574Z","timestamp":1789671334574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7ifOo6eMGvZAcpDugZnN3vbTGm0BnKTWcfEN202RGvHNDk9%2Fh2G0fxoBCv3%2BlgKKcq%2Bv%2BcuvxCsQueiau0Loa%2Fptl44LNDyez6MXKYK9Aw1CrjUT0hedov3cWFmJQn02MMGfFw3bEEhew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371185c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4372,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-10-15T06:34:10.21002Z","times_seen":247941,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/shortcodes.min.js","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.581Z","timestamp":1789671334581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/js/shortcodes.min.js HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PM9PysTjjGdhf7kZlDv2vzHuxGHXR7QbzbSfC2VqCrCNVXb31zDbqhoQ%2BpF0uZ0%2F7nESXMt0RP6JbCq4EyP0BhrObBed6NT1aftuNfN43POmZFuJGH0pgDVWUKN1Iz5CFqzJI2ntZTB3Kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537128651a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2658,"size_decoded":1767,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2658), with no line terminators","md5":"667fa4687e790c76cb2859bb8a25da03","sha1":"e60bf76c027df3923bac3ae791e296483a18be20","sha256":"dcfce736aed8e91a9c447cd09858192f8b1239d11d45b209ef8806761b010267","sha512":"ada1357e3d7d66fd83c47702a5018a913c6a8839803da6f46c32034ef0f0b72d433d070938521b61df942717fd96b5d46dc675a97df5ecc48f5fdcf2270e19dc","ssdeep":"","tlshash":"8e51641ff29e3f2648e7347ca0eb700858272d329e4391a5699252565d6cf0990f3d6d","first_seen":"2024-08-20T09:47:33.161855Z","last_seen":"2026-09-23T11:25:47.188829Z","times_seen":15,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/header.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.603Z","timestamp":1789671334603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/header.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZbq8r8KqJtuU7aT0i921XqVX3mZruazOokt485Mmm7o4B6lKKIQ6RHyNfd1aT6n8dJ3ki34DdhH5THbc6KwGgdgsYXKKJagxYeFz3%2FgF0YE1WWw9TQkasY87ayEcPgApaLqC36fP7grEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537148791a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12108,"size_decoded":3665,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"657e7d199e22274c4ecdfa29c56600a8","sha1":"36f5325fb8a8b42604692bb9c0df708beff1ce77","sha256":"5a7a9c60095b15c6ce1cf4070851933ceb9bf8b196f3ee5f9292031c306ad945","sha512":"acb902f204011061118ce4db080ba8bc65ab14afa5f9a56a166c07b7b3b89c73678a920d0322aa0071d0a2d17e7e2275d1f491237d0ed6ded2698ab156e52e8d","ssdeep":"192:ytROwrRXyxg0pZFehiSihX5y4QATS6SUhE4ySHl:JTmk","tlshash":"a5420c48b9f17135007b317a8bffd409672d4607838a8a10be6c46985fc2365b7e2bed","first_seen":"2026-04-13T06:27:19.239664Z","last_seen":"2026-09-17T18:56:43.926421Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/unnamed-file.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.721Z","timestamp":1789671334721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/unnamed-file.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca537208c11a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Sun, 10 Aug 2025 13:01:38 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phlgEiOq%2F55hyhTfbEJBWBcwFdBdFXnZVbZBwYGWhggKoyzb983hP1w89dvPd77%2BSQOg%2FGniORDXvZQMOeQZO0R5H66lSJ3F%2BZ9FTSxzx3xc1JFAHW1UTogvt52iCZPFCLTxa%2FdZWYTaTw%3D%3D\"}]}\r\ncontent-length: 3551939\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3551939,"size_decoded":3552714,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=7920, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=6336], baseline, precision 8, 6648x9912, components 3","md5":"a234a256e07fa611aed2590fd09ffde3","sha1":"41d21b0bed9dd417138361e9de96be2504311138","sha256":"668f34d2f8993bacdcc37fe38bd5f053cc5d6529d2cb4c7616abb7c0767992cf","sha512":"75a3ac900be3ea63cb9d2aeabc49b080bf409739227aa75bc9d00a5d183ea2ce6f0b9300fc41e0071eb833a76be980dcc631336b985347699f393c47e5c0d11e","ssdeep":"24576:t9WaopudeLtAWfKAyy/S7RH3cjsiI7CLI7:VTdDNlsjsbH7","tlshash":"d425e132ad2e06c5c69638771a01ed714171dfd80b522ae3fd7d220ad7adc1aac5439f","first_seen":"2026-09-17T18:49:29.840063Z","last_seen":"2026-09-17T18:56:43.926996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":608,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v6.7.2/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.508Z","timestamp":1789671334508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v6.7.2/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Dec 2024 15:31:48 GMT\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVjOylkc0PnnhflGtpl6IV6kBVfgIqoqrG%2FDnhf%2FleWB87B8Y5ftOLaWGfSzfqtn3komeF1IJYi6MAlrWfWZZMp6BN08r22sE%2B4yEZC9bftijtSPfvk%2F7ZbAJFVT70f0wMKlKdvL\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 149585\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"7441465cab20b640d4156626d19cc63e\"\r\ncontent-encoding: zstd\r\ncf-ray: a3ca5370ebd3b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73890,"size_decoded":23367,"mime_type":"text/css","magic":"ASCII text, with very long lines (49899)","md5":"7441465cab20b640d4156626d19cc63e","sha1":"8230c4590eee915e9b587a08f6e593fb77fffeb2","sha256":"74005d7c17d4a02f2f25404ec0655d9bc2fdaa53166874c87d7b7eec69d9088a","sha512":"12fbfce0caf892a54644d4a02062ff17f6880ea41bef1436bdcadd230c5f8d38521fc09247b3c111a902af9d4293ec3efd4eacc14d889b5bd55f449593d00186","ssdeep":"1536:/bM1MvMaMfMRQZm0grfT/QypZhzZHpcjA691m:SlgrLXzZJ2191m","tlshash":"14730f12ad84019bb4568d7f3895bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-23T14:25:51.255422Z","last_seen":"2026-10-15T06:38:52.283787Z","times_seen":34262,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":28,"connect":8,"send":0,"wait":24,"receive":-1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/js/daterangepicker.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.529Z","timestamp":1789671334529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/js/daterangepicker.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5UVOlr%2BxWNhg97sTCezwKhzPiiEc3da5U%2BvPCi0q%2Bb7GNGaZHH6nmvpXCQEpaeXDbnQ7mccRzt%2Frbwkb%2FJ5ybFyJBllRTcq6T0%2FGLZEmfAzmx2VjBZW1XsExryqRYcNc%2FJhaVdgLSXB4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370d8381a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67204,"size_decoded":14083,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5f721fbef3121ce28da56bece7559a2b","sha1":"56b283ddd9b0956f3d31d0f6d552830d54d86785","sha256":"920c1e92a70b140ef4f8f9546efb0dcc246a319acc7527cadb5a09feeabea773","sha512":"60aca94177f3028c321995ce7e0a8100c405a3f56c967dbe325b303dce16292d9436fe5400bd54ff73c0c172ffb22d1ddd48e9c6acb8ea77a1522f520bc4d35a","ssdeep":"768:iQQFRDuOS/+hmqC2MtmNfXnGnLofiLjESlrXR3EHm3S5fAz7337xK9XJfgxOzLeK:vQFR2aKMSDS5fAz7H7xS","tlshash":"e06300495bab063295a721be8fcf1245a720812b5887dd2c3e2d52c02fd893e51fdfb5","first_seen":"2023-03-14T07:31:01Z","last_seen":"2026-10-15T04:25:13.762458Z","times_seen":184,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY07148-copy-2-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.722Z","timestamp":1789671334722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY07148-copy-2-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca537208c21a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 445\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Wed, 25 Jun 2025 21:52:58 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xo3%2F55B111Ym5nLa4QQXBrSciprBNdlWYUuYx8UKWLPnqjgj8Ps0NfBK4auTcF5U%2FCKjCi1g8pgp4hHTMnSaJ7W%2BpL1R7qYKQl0XTGs9lBn4YinOxDbdlYkJK6eREfewiETHVtp7fNFOaA%3D%3D\"}]}\r\ncontent-length: 636004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":636004,"size_decoded":636774,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=7008, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=4672], baseline, precision 8, 1707x2560, components 3","md5":"bce234498a4e5b5372e9833d2884e64c","sha1":"1050f86143b10bb3dbe4cff3706f4112a4f5443e","sha256":"d028208061e02c695c014e6c6eba41afa9b1b61e60f0dd7c6bf3fcbd6c7c5ce8","sha512":"1038ae87e68ec4c5c224a0744e546e8197dcb9c66396ca2ead82bd97c6ee68ca24fae84970a35630efcd8e2a4525946e212bdb54273db4f60e45b072b2a869b8","ssdeep":"12288:JZ3MHAu0iGWy8099r2qJ0qknm52PfQzx9hSTpzUh/8A8x:r3tbJ2e2PfuwWf8x","tlshash":"abd4235476f02d12df8507b4e87397376bb0ab24d966846378af1044bbfdadc148e3a2","first_seen":"2026-09-17T18:49:29.867925Z","last_seen":"2026-09-17T18:56:43.92884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3EZQNVED7rKGKxtqIqX5EUCEx6XHg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.277Z","timestamp":1789671335277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3EZQNVED7rKGKxtqIqX5EUCEx6XHg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31144\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 10:31:08 GMT\r\nexpires: Fri, 17 Sep 2027 10:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 30267\r\nlast-modified: Thu, 04 Sep 2025 17:14:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31144,"size_decoded":31956,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31144, version 1.0","md5":"e423a9f7666b1949a2ad2ea509d646cf","sha1":"44ff3626c855f22df02d7f425060067501bbd725","sha256":"698e572a1964ad255f2d8eebf2e3cad7ec7ba742463998eb72f3be0f91818421","sha512":"f5f57aa2b5798870afe77fa0c32892f3496f9cd3d25903cd0a170ac9ddd21b133d94fd9626a06b17d279106722b9dc9c358283fb7c89f813bc81b623257c4e0a","ssdeep":"768:DsruyMMJRF1aH2j3L02n/6RFAh8Sg0L5lBP:4rnMORF1P0yCRFAh8Sgq5lx","tlshash":"82e2f114fdbeb889bd6232718faabfc45b80d3ddcc83da6ac51154969144ac0de5e0ce","first_seen":"2025-06-04T21:45:17.18246Z","last_seen":"2026-10-14T23:51:36.647929Z","times_seen":986,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-solid-900.ttf","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.668Z","timestamp":1789671335668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5377faf01a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 442\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:12 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0R0Xn78F7yWKsleLb5lJmHgNpqOYyQj4Kwl17QVGCdgJtFGJ%2BLkH8hxUF7%2Fu7s1wiAz3Aiwc2eLRjTr4nxtkrffVn6f6nrt%2B%2FhdyHDx2DORUZ7csoG2XzY0A%2F1mpzKmr9UQbZSFnzmTiA%3D%3D\"}]}\r\ncontent-length: 99063\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202744,"size_decoded":99882,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"b9625119ce4300f0ef890a8f3234c773","sha1":"eb8914f6b1797b45ee0883e6089d92695d9f9441","sha256":"af6397503fcefbd613976c21ad5c1e37298c18bbe07d096db03ccd3af6e05ba8","sha512":"6ba7bd37ece6ac3bb0b59b68171c6d6d21c7ac5cd5610aed5f8146d769f5bc591a78d7a96e05b838ee71bca5d17f5292ae495029094e6cfe2df96d5b3cec3ad1","ssdeep":"6144:EtrDdIZG2nqJElpL3im9+3Kz9BngKbtPLLdlMj:m6TnSEl1yt6zzng0L2","tlshash":"cb144cddb69fcfa7c18687bcafd0bd3221e05f10325237e2bd46991e20669c494f056a","first_seen":"2023-04-07T16:21:20Z","last_seen":"2026-10-06T09:43:49.611221Z","times_seen":186,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-chat-widget.js?v=3.0.78","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.718Z","timestamp":1789671335718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clientcdn.pushengage.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 15:28:31 GMT","end":"Sat, 12 Dec 2026 15:28:30 GMT"},"fingerprint":{"sha1":"BF:E7:FC:BD:2B:2C:D6:A4:AB:A6:8D:21:44:42:6F:DF:B1:BC:97:1C","sha256":"A7:BB:84:E3:15:7E:CB:EB:C6:E5:3F:BA:6C:B6:05:8D:9B:56:16:C9:D9:41:F4:27:65:8C:6C:8A:78:34:EE:4D"}}},"request":{"raw":"GET /sdks/pushengage-chat-widget.js?v=3.0.78 HTTP/1.1\r\nHost: clientcdn.pushengage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6016921\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31557600\r\ncontent-encoding: zstd\r\netag: W/\"298db-1a07b2bf867\"\r\nlast-modified: Mon, 07 Sep 2026 09:21:14 GMT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1214, 830\r\ncdn-cachedat: 09/13/2026 16:35:17\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 930a101ffb5de79e505175b6a7a500be\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":170203,"size_decoded":55423,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"505ae4d068266bf15f56845f1b88f7e0","sha1":"c1b562917e908ee74686b6bb8eb260b8b70fbc70","sha256":"1992e77e34fc8bcdd053e136c4544fb1a00c9dd66ae5463e519e23797771abd1","sha512":"6f83de6c312e1b36c66b2be9a0226f02b63ae27c66fb3ac4cdeb525b54de0365b987dedeb562b0cca99d6dd61105a57e58e28a962db53d00d71b0f25fba6f32e","ssdeep":"1536:k7mE5Y3q3+lI5yRNKDY8gUfe2f5K9ZPwjRm/YYNRdpBtojhStLT5I7avpx7YBy:kqEO3G5ENKISA9Z4Ci8SOvv7","tlshash":"70f36df6a7c0a0b082528be9d0771521e23d367eb905c0e0b25d8c557b1be8fa577e78","first_seen":"2026-09-17T18:49:29.822607Z","last_seen":"2026-09-17T18:56:43.931404Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/fa-brands-400.woff","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.823Z","timestamp":1789671335823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/fa-brands-400.woff HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca5378eb4c1a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUf8NA%2FpRA%2BogYE4yO1Hgn5288YkIrzWN0%2BUlJipkRvhOdCDlHP2MNfsLShWyCmI8o7n2TWZa6IRNb7Fcs4fgwQmzTNfvh%2FQG1sEYDJdFGj7IL%2FluIlttZtlZ74AY7Xdnq6Yy6o3q73aqg%3D%3D\"}]}\r\nage: 443\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:11 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87352,"size_decoded":88108,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 87352, version 329.-1049","md5":"fe9d62e0d16a333a20e63c3e7595f82e","sha1":"4cb087035ebd3afa0c588f129d1549e532c06d18","sha256":"ef7234f1e9d303d2e42a209c547c217b90afa49d60502d04f1b14c906efc02d1","sha512":"7c864257161bd6e1a2fb6dae9dc1d93a156dfce08fcf4bfdbf6861c5621dc370539407850cc8cb4c04303f93f56ad63e4352408fe6d036e2ede9e831aa8e44c5","ssdeep":"1536:6RTO469E0P2JgIuKHe/XaJbKjs/5d2MifBEZAUApSgkAPzAE7m:5JPkzB+/XyGQPi6+UAK4zAEq","tlshash":"cc8312a9f6e58defc8fc9d1d03b4d3c47dca8a52ed320a24e046d54a791df50b0a40b6","first_seen":"2023-06-10T21:44:37Z","last_seen":"2026-10-08T15:00:49.557641Z","times_seen":27,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Josefin+Sans%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C600%2C600i%2C700%2C700i%7CPlayfair+Display%3A400%2C400i%2C700%2C700i%26subset%3Dlatin%2Clatin-ext\u0026ver=1.0.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.143.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.487Z","timestamp":1789671334487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"DB:16:C1:37:8D:6C:67:F5:7B:69:A5:CC:5A:E4:14:86:68:68:28:08","sha256":"7C:9F:DC:87:45:B2:79:1B:26:C3:F9:27:4E:6A:13:97:FF:C5:A0:2C:69:69:31:D1:9D:3F:8D:E7:2F:66:1C:15"}}},"request":{"raw":"GET /css?family=Josefin+Sans%3A100%2C100i%2C300%2C300i%2C400%2C400i%2C600%2C600i%2C700%2C700i%7CPlayfair+Display%3A400%2C400i%2C700%2C700i%26subset%3Dlatin%2Clatin-ext\u0026ver=1.0.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 17 Sep 2026 18:55:34 GMT\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18391,"size_decoded":1547,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c407282d7d8ba083c23269665b878388","sha1":"932d8d8f60e6ed7aa51ef531a926365406915916","sha256":"f3eb0a0ee6284a88266d64f6afb039aa560456860e27e0e5e90df7fc4ee66d10","sha512":"342e705e4ce9d960f636dc24cb28a3d3ff22dafd1b044aab9f2225cc0a11589b4b8f5e6b96f63da097913521d207589122f5dc450f63df1feed757315e5a7502","ssdeep":"384:cN383136NyrUN/yDNFw1N+HIgEP/dYeKJU2SMU2qU2+U2cJr2SMr2qr2+r2ch2Re:UwBrEP3lk0za7LzaYwV0lOabwm029","tlshash":"e382c2e2046ae65497831dc327cf7d329e8fb15470819539affe18dcec5ac2aa26570c","first_seen":"2025-10-01T17:25:16.210627Z","last_seen":"2026-09-17T18:56:43.93386Z","times_seen":9,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":12,"connect":10,"send":0,"wait":21,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/buttons.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.501Z","timestamp":1789671334501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/buttons.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09u9ASCEyIyngImk2hglZqI%2FutZFXElmBLWzAa5%2BYK%2BzX37%2FFXs26G3EEjHG6Rz0rYba8rrvQ9WWQUfGnn%2B07LQg7FEJewDzgEttoKD0KJnkjFkEbf4UzDRoDnh2LqPRwY1%2BXp8tE23QMw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370a8161a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5130,"size_decoded":1485,"mime_type":"text/css","magic":"ASCII text, with very long lines (5089)","md5":"ae5b6a9d9ff2a1dbf4aaa41478c8c9b5","sha1":"74945d156c00b12225678a54b12e85f888f49379","sha256":"8eebe01841aca35216551abfa42db07f6f64325427f40455374a5f36dc865d5d","sha512":"54febaf55d3da9369fb6a037c7bea2a0420a9a8a94fd0c16300b9f9068b6e6521bfd436988b767a14df199e238483b9cbca39b535151ff1311488c175bf5ba5c","ssdeep":"48:YHaA/7A4XCH03KAAH/7A47HaA/7A4JqA5bbLX/v5bbLTMm97ovP1UWXKbwAC4M1Z:YHVCH1Hqg/RzY","tlshash":"d7b17e46e56403568d0f67382bc9bd570235751ba26d31ad71b34cfe8386e4ca732b8e","first_seen":"2026-04-13T06:27:19.282951Z","last_seen":"2026-09-17T18:56:43.934623Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/tooltipster/js/jquery.tooltipster.min.js?ver=3.3.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.564Z","timestamp":1789671334564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/assets/js/tooltipster/js/jquery.tooltipster.min.js?ver=3.3.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2ZbXDb2o98%2FeyIREl3j09eb7DImOyXauqlzadx0vC2nzjOMGy2noKREQc2j9foLEmcgF6iUwrPLDozbIdSS%2BEElN3Y0zJ7e8NS1FPpaeNviOjTqOgMh0J%2BcIdv00YDn36EwFNqZUzup8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537108561a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17523,"size_decoded":5849,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17523), with no line terminators","md5":"ff2f685494b400ea2098c79332759a8f","sha1":"bdcc80d51dc627f9bc2e7d887adab7c6439bd8de","sha256":"95e9e3ea5a0771d7eeead1503d41cde92d8eec6da0bfbc97fcff4e9d173c967a","sha512":"be0635fae95e6b11449177d414b897079b9daf2fafe6e0af15ebaa527e0252459b02d525e53a80c83bb85e17404f3749ec26d7c5ba271d2f145ac11cd03f130f","ssdeep":"192:l0XS0XTcXVuUxTHmNEJD7uiRcxaIlRYqulfrT1r7mMzdnxpk:SoNTnRaq3Bb0","tlshash":"58729346f262332987fbe1f6402f720d413aea311bc34174a515ead16def605a2a7f68","first_seen":"2023-03-07T01:10:08Z","last_seen":"2026-10-15T04:51:52.519791Z","times_seen":3857,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/thumbnails-popup.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.585Z","timestamp":1789671334585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/js/thumbnails-popup.min.js?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wcF%2BDnJCjmTg3mmokdIvjYct%2FcPSNgqYpDIwRjRT0PeSdUU2G6a5vd5sAsj5NuzSL5ZTefQ86KbvXyIccGDY5avOezjfa7lpZjhaJNTy%2BzAnSKZpBXZ1TuWbZzzILCuchfVK8ndhTEL4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537128691a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7650,"size_decoded":3136,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7649)","md5":"0a832c3a4e99b1455df273ffc1320e98","sha1":"19c35cc92e6431c7a59925e8e85bba1bb5bbc003","sha256":"42e0a27138dff85b45f999c69c92edb8a36cc684628691907007ac0818253bfb","sha512":"640dc759e8d8501a8cd91f32fd3b47a0bb7cac2333943d9d3d42ebbc8898839f6ebe862c31a7ee018d74cde4be657e27b4a4502b01eea0a396698949f58ca9f1","ssdeep":"96:q9HqSDRxESvodwii0BvhOjYlIkC6Cx2sqTQGLcCAg1NLBH/6TNmfvrn1YTXUhHGW:4HTRxhwGF0j5lIfJyTVBH/gyrnDIK","tlshash":"2cf11f947d283241571652d5d13b570e61273536e222442e3c3ddce3f87acc623eeab9","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-10T11:18:22.631039Z","times_seen":135,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/custom-facebook-feed/assets/js/cff-scripts.min.js?ver=4.9.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.590Z","timestamp":1789671334590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/custom-facebook-feed/assets/js/cff-scripts.min.js?ver=4.9.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9iXx1FhhbhriN52WmvrJSxu4wcbPcMWHsQsVrGAUIihBSNcrAUplk%2B3l6KinTDmCfwas6sDjg%2Bt0EwPkeFQMcZxGzR5cwXTehPaX%2FaiYHhe5yo6HHA0xNBbT2l0V%2FxBTfWBMrNbQnif9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371386c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43529,"size_decoded":14866,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43529), with no line terminators","md5":"36ff58607ae2ebf7d4d5e6d3f77cd715","sha1":"fa632558417a83fba039137668cc7d31ad130f24","sha256":"1c6ec907add6b99edc1f520b66983fcb1b44541d831579c8be61d4ddcf6a2ca3","sha512":"95cf1aa97ae76c62be215a107e0c272700f73dd2faace1b195e3793891d8531352e56a7432c607aea4f0dd6075dd963ab6e0ad23fdc7f46d9bb2e7d3d0e2bb9d","ssdeep":"768:Ynhi7+FQBUmroBpFjsZ7zFG09CsCthMKGnJ2MAJk3KT+Z7hK+/PKwGg4fBAJCK32:yhpQBUJthMKGYOJCOH/PJn98WAdaX+","tlshash":"1113eb0ab790347442b7a175e6bf020f7137287cb94681a8b655d4f62cba98d2133f7d","first_seen":"2025-06-03T20:04:10.819323Z","last_seen":"2026-10-14T22:50:26.512046Z","times_seen":2949,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/fa-brands-400.woff2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.794Z","timestamp":1789671335794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca5378bb4a1a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btoxGXU6HZqIvUdQMPxHXwLhjNljpb57eUUSaHLhmHhMb7sGanBItuAkCn8ZO3ZSXiIB3Kj8YdDY0BP%2FcckzrsmqT1I9KYgiQmpw8k8%2BBQeXLI%2B1SbKvVNa4SErlaD7TcV4%2FcCXJc7W05w%3D%3D\"}]}\r\nage: 444\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:11 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74508,"size_decoded":75263,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74508, version 329.-1049","md5":"7559b3774a0625e8ca6c0160f8f6cfd8","sha1":"a403af3337e6207d144b998b9c3bed439af562a9","sha256":"1f49b8706547682e2c5ed6642a2f2dcbd287da458314b967c60d774aa7edb473","sha512":"392ca665ec105f4e3b6ae13ab58df7c74a06b9b9b4490db01d0c4711d21fc9158b3ca61de9a50a897a6f6f8f3c7c9fcd5a10dcdc62949428e464f20e570e9467","ssdeep":"1536:Uwog3I75UkTarcn78BMUmS1wtvvYEPeS4r7G7+HfEyk/ZOMqAFjSg:mRFb7JUm6IeVm7+HfRk/ZSAcg","tlshash":"677302f899297489d6b377d411caa85c55c51fb3273d2ad17ffb02abb1b680107bb028","first_seen":"2023-04-07T14:35:23Z","last_seen":"2026-10-15T07:05:51.821645Z","times_seen":3755,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.14.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.560Z","timestamp":1789671334560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.14.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDSDtQ%2B9ppyEQk8eh%2FNdqOP9bN1Qw7alKFFojkaN2LMTF5wBAOv7wZBrgXWoC%2Bg4xuovMfTBk6osto7DT%2FWlMH51t6%2FCyp3QapjF58Fc1l2gXql2vzeCjXrQA6NhogS2lk2NxidmvdVZMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371084f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36740,"size_decoded":12398,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36555)","md5":"b2cab78252b4fec15cd5bd2fa636f0a6","sha1":"79dbedbd5465ae156b674239fa70d79886ce1f86","sha256":"37e07bfb7f72a47dc1ac892a813f27bd1744ef4653ab6d9e7588b8ec228e4045","sha512":"3429fca7cbe63d69a7f25d398198283dfee4a67c145bdd4ce4db310332eb71676cc92b0c439dd80895a6ff1d297626bd686042bb270dadacb99c1771516a5136","ssdeep":"768:co1EZXteTlaCaedY5+N5SHf7nQWpB72z1EuPLkhDWucxooqY:cjZXteTlaCaedY5+N5VWpBqz+cxooqY","tlshash":"20f2c51e30007d2a927b51a6053a3a179233095f9d50c11cbd6ea6ee5b7cc45b3befb2","first_seen":"2026-08-20T00:13:36.00742Z","last_seen":"2026-10-15T06:46:02.017668Z","times_seen":2421,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/js/dismiss.js?ver=1749168163","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.592Z","timestamp":1789671334592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/js/dismiss.js?ver=1749168163 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anAWf9AA4omA2eROPOCe8T4X2mXMbVagHno5Vm5NGWqpa%2BIrjqEZy097JiALfkVYMnITUGRFYJRuhDPiyVb4IRIO9jpUZLbJFIQuSHVBmwfKzNxjQWcxoKgSd8tZ9D03Tiy0GC4DCp1M5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371386e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":680,"size_decoded":978,"mime_type":"application/javascript","magic":"ASCII text","md5":"fca48778f2f0abf88bfde5f805bd5ecb","sha1":"258ede6be089676026de1889e5b5ad905d5b58dd","sha256":"877ef36c4ceab3b9e1f394f606865ce12799bf52ece2e485319670378636fbed","sha512":"4281c18b6d25d690b8ab36be5cb07a3b4bbdb089af5b4b3f82dd24bb9dc8334844980f797bcea66fa13c5ac500ad5eceba02a46ee39c63cd70512c2c81e02039","ssdeep":"","tlshash":"1a017b1db36d23b201bdb3af46a926dda57a019ae018044a6c264c0418ebc1817e0ff6","first_seen":"2023-03-07T13:52:39Z","last_seen":"2026-10-12T19:02:38.275403Z","times_seen":76,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/images/flags/de_DE.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.734Z","timestamp":1789671334734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/de_DE.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3ca537218cc1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvpMIAbGgh8nsKQgROmPax0yfw9eejQ5vmeCMyWl4dCiKbUPq4t%2FOtEvmuZmHzfgjYaP9ez1Z5LHTNewxWyG1zL4js%2FLnjRXNBrN2IT28U4N6xfxi4zMf9oi5FPRdnB0a94716nmbjuUJQ%3D%3D\"}]}\r\ncontent-length: 250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":1014,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"9106b58cd67a757d34013ad61e826fcb","sha1":"5f01f848404a402ed52a377b718236d444d3205b","sha256":"fb8abf4975a70816d1ecb0e3dff7ed44ff73201795790a55b4abfb0d1b6d162f","sha512":"605549cf573dec874744991ce95922a0f6e2859351582687336e2dd1a577529753a2aaff3c33771a23d27645eecfadf752e9f00046c1617497f25aed014a0233","ssdeep":"","tlshash":"59d0a7e15aa8dabaf00b2cf713ea7901f4b71e27814256c5f80941350a855e4754ab5d","first_seen":"2023-04-05T15:13:06Z","last_seen":"2026-10-15T06:43:11.89864Z","times_seen":6529,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.274Z","timestamp":1789671335274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53757a0d1a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zg3a7%2FFMHXnILrHZlSqTohEsJ0BZWfUdG%2FviVAWKtjYjWhtyWc4Tici4%2FqA03j7E6RtFL1SUC0USlBHdHa3GszD8PeeKkuBBXpUaqYE80AtLnZ57Kto%2BJI5sZQjpZOVROj4Wjo4DBTqClA%3D%3D\"}]}\r\nage: 445\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78268,"size_decoded":79023,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-10-15T06:28:15.52002Z","times_seen":61335,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/the_grid/frontend/assets/fonts/the_grid.woff","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.749Z","timestamp":1789671335749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/the_grid/frontend/assets/fonts/the_grid.woff HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/the_grid/frontend/assets/css/the-grid.min.css?ver=2.7.9.5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53786b241a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SIBz%2FE8IAOG6Fdg0tH9E%2B%2FZ9dAuldBEzFpQZ1fBOjRaSsoPZdvvcts4fdsg2Rc6BcNlBFwFgTprSQhAkoDuc8YBPyN0CUplZrEQfNwVhnfG6FspdEhp1TobckP3di%2FsXIV6eHgeFZY4SPg%3D%3D\"}]}\r\nage: 444\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:11 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:51 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33632,"size_decoded":34386,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 33632, version 1.0","md5":"0d7e86ab47218caf3539973dfda36a3a","sha1":"1dec129998580f7d365134037d9fa9d6d6e1d911","sha256":"0524a428d505774fb59076ad6eb8c96000523b1eaddcc06404e189d3a8f4c8e6","sha512":"2c5c3e7e5b39d1fc66241ada903af16867165557a10bc435b2d28a677ced239e7c153623ba3daaaefa6ed9a2a6cd9cd5aae1f50963ef8ea77640455da049515c","ssdeep":"768:+XrAasAjord/KQ6/keecDqiJ9OuMkSS/iK0qfGwlg898+zzn/zR:grAa7k5ejnSu/HhGL898+//","tlshash":"5fe218cad3f5fd49de28e6b88599c63309f9b304f990533aedce15ec84568e4858e390","first_seen":"2025-04-22T09:28:02.029615Z","last_seen":"2026-09-17T18:56:43.939975Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/reflector-plugins/shortcodes/assets/css/portfolio-list.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.546Z","timestamp":1789671334546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/reflector-plugins/shortcodes/assets/css/portfolio-list.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Se4rp9A5%2BcvtOpwiu8oxQnzWrLakl7EwwPoHpMIRGxap4fwCw5pUXbJZW9ILadCX%2Fzu9xtB%2FHC0UEAp9yVCpIYyqjvKvcOV0FhaMJHN5HSrGONb%2FfhboVWY4nYO4QFJzIypxVR1jSpaUA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e8441a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16321,"size_decoded":3329,"mime_type":"text/css","magic":"ASCII text","md5":"8fb6772cdb90bdc8ef5f4b615fd70ee3","sha1":"bf4f49d6a42086349f50f747fb065c405733d380","sha256":"aad6a5d6dac062affef4373ab0ef65a3790c43e3a2d27465238e537a30d92cb5","sha512":"fc58afe5223aed8a1abe7d4b85d0c2a19bee33af36bf4733ec69be3ad7944dab7a3704ab9fc66667d92cdf37b2bb66270410edce7ba105d30904644c939ba52e","ssdeep":"192:x7z3w7wPcRPFMcfTrdXXtj8Pg9aPF/AbVSSFjFXsgElOkzmjIa:C7wPcKFoQSFjFM0","tlshash":"cf7252fb15700a44356f64380bce1ba92b7c9423e64bdfae79c1610ccf89794d2b2789","first_seen":"2026-09-17T18:49:29.962713Z","last_seen":"2026-09-17T18:56:43.941039Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2026/01/SNY03286-copy-2.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.716Z","timestamp":1789671334716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/SNY03286-copy-2.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8bc1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 06 Jan 2026 21:17:02 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VXkfyJajZqrOBX%2FAZUqvV8ERvWfDKOF8Jw7Onip9F%2F7P2rvdWj70hwjSmo5NBBj7yotcfk9eFpho9jz%2BPzMAvglMWaVExP7caSKq%2BI9uVxF3JEMAICYbZbogXtRFQ4JTzMU7bOlbTmb4wQ%3D%3D\"}]}\r\ncontent-length: 3442779\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3442779,"size_decoded":3443552,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=10549, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=7536], baseline, precision 8, 7536x10549, components 3","md5":"486e48fc8907e78d47ecb6e1357a3358","sha1":"3a541d04b64d4ed12d77683e08ebfb722745e26d","sha256":"3fed248b2febc48d72c33668c7ce13f07e7e7b16c76ef5d83de784cb4f1c2a43","sha512":"c0445a70d062eeddc94ceac69c5e86b4199a4db1eb9cdcd493b8ea83e564bd53804404f47ad8ecbbebe911ca331e067af0d4594b9d0783d575cb5a6380c0db4e","ssdeep":"24576:/f0EDUpA7J2qOKYkGHOxqIVzp5bdIXpRRFwVlq0w+:V55z5SsD","tlshash":"2d25f732ee2e03c349c678431701ecb1aa355fa4435327e6dfb5230e566ec5a98747ab","first_seen":"2026-09-17T18:49:29.85398Z","last_seen":"2026-09-17T18:56:43.94163Z","times_seen":2,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":589,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY05467-copy-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.717Z","timestamp":1789671334717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY05467-copy-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8bd1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Sun, 10 Aug 2025 11:32:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wC0Zl7hNqyC%2By%2Fy2qVEu1oXsEhTJc3HS3QZQzz9Smy3R2V%2F0PtjTKQyqT3t5L%2FPgQaxm4lZBMZ0%2B9oLqXP1lySexbZgNs8Cnx7zEKY63xFpHPYTNuQQXs1deU4b6Oxw9cj2U4g2tha%2FwGA%3D%3D\"}]}\r\ncontent-length: 470015\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":470015,"size_decoded":470791,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, xresolution=136, yresolution=144, resolutionunit=2, software=Adobe Photoshop 25.12 (Windows), datetime=2025:06:17 16:45:39], baseline, precision 8, 1707x2560, components 3","md5":"77604b28ea672d90df8526c0d18ffd65","sha1":"bcc3a80ffd778d2ea5c5e59410037caf04e24e5e","sha256":"fd1b4d2cb10b8b216a33c37fe5382bf624776096762af16c56122f63b8a8eb88","sha512":"6004e58f5b6bfd4f29ebafeaeee2b85dc1ff127235d98caeecb3de3540db9bfaacb8dd86c82cc379c9a634a52c2eaea3b937231e12c3265ae7a4887521a4d467","ssdeep":"12288:FJqsXaJ2qiklPiVcs3fkCRSwR5D8dSwYGQxd:rU/lcb3fkCRSwRFd","tlshash":"8fa42316d6c20862ccad3c71b8e063164b206121b9a1335372ef567dcf336eaed57639","first_seen":"2026-09-17T18:49:29.847949Z","last_seen":"2026-09-17T18:56:43.942299Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/ionicons.woff?v=2.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.490Z","timestamp":1789671335490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/ionicons.woff?v=2.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/ionicons.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca5376da971a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwrAXNdPumDp86V8J%2F69hqvALXJ%2BB9dV4Vnwj5y9R9VnCjhbtQ7tEyd6jW7dp%2FX93R7vqe80BSDw%2BcTm2eAvlIkACBDNFZbJ6EG8TwutwFNbbf6qUP5gkyJEUhq8cPof7YcLvIt2uAuS3g%3D%3D\"}]}\r\nage: 443\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:12 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67904,"size_decoded":68660,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 67904, version 0.0","md5":"05acfdb568b3df49ad31355b19495d4a","sha1":"e46819e863a46751d622c1190c4e8a83ebc20612","sha256":"709f2789daaff440820ebb975d3ae409af45121bdec47e39e83523490b1bc0fc","sha512":"b7968984229cc7d4756033654bc66cdbae293320ba197a12fe99b53cbb407a8045d4d91c1d125e5bb4ef8795f5e78e475c5d61631ef4f28e68c01cc623f053b6","ssdeep":"1536:oWDL6msnGPDV3swi74RvqWjsUbG05GJyMkYb17hn0M0Rm09Z5QOybirV5:d3MnaDzi4qWjrS05GoMkYb17hn0Nv8iH","tlshash":"fb630226a3fe48b2cd9be4392e0cdfdd138fc59c657c572c3238a0be294d245598d964","first_seen":"2023-04-27T11:15:33Z","last_seen":"2026-10-12T08:28:56.537316Z","times_seen":516,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/loading.gif","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.770Z","timestamp":1789671335770,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/loading.gif HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/css/lightbox.min.css?ver=8.2\r\nCookie: PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: image/gif\r\npriority: u=4,i\r\ncf-ray: a3ca53789b2f1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 445\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYACmtS7yS1eyUwygmIhNJfLTOQOeAJlb0raCoaRp3FK8bBZeA6%2BqNMD6zhOvaINDt8ms69X23rkiN20L8iy9%2BQUyWMua%2Bo08Gy6R%2FXfSjKptbYfoNEsU6uFJWqpDlTn4gZO4Lr6VsgBUA%3D%3D\"}]}\r\ncontent-length: 8476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8476,"size_decoded":9245,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"2299ad0b3f63413f026dfec20c205b8f","sha1":"cf720b50cf8dde0e1a84ce1c6a77788bfc5882d5","sha256":"225aa88b6ab02c06222ec9468d62e15fa188e39cdb9431d1f55401ad380753ed","sha512":"dc299ee8de6d5bb9d3a95a0fc200ea380c6dbaeb72fbff74e1e8bb260ee3deec6c981d9cfc05bf2409b8760613ef1c02bd7396456bec618f287ca56a7a93957d","ssdeep":"192:e8mZU0o1P1rUssaXA6RJiqlrcDUpTQ+ZSIWl7QBhr5z:iZc1PvA6RJiqYUq/l7Md5z","tlshash":"52028fece9242716ec37e7fa4248970edcc81de4067653096239360f3927139796a99d","first_seen":"2023-04-07T04:16:20Z","last_seen":"2026-10-15T06:29:56.868548Z","times_seen":29075,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/cropped-rooftop-logo-192x192.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:36.069Z","timestamp":1789671336069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cropped-rooftop-logo-192x192.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nCookie: PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:36 GMT\r\ncontent-type: image/jpeg\r\npriority: u=6,i=?0\r\ncf-ray: a3ca537a7bef1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 442\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:13 GMT\r\nlast-modified: Tue, 24 Jun 2025 19:39:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=anY4R5D1qnWGRU8x7A92Lif3YLFRDi3TL1aOM4UlfF%2BxNWoURiwlCzzg8DjT7O7KnkJ1Ms2PMSc%2BjjWd0y7Q3bmAjjQDzHq3UJLOG9TpeboE86IOVTe0KM%2FYz8SCknh%2BekS3QN3nW5wv8A%3D%3D\"}]}\r\ncontent-length: 8067\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8067,"size_decoded":8840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"9dd81e2a7d836d0dcf9de5f3fd8fa500","sha1":"640c7e2eb3bb8fb0cfdbeccf012749956eb9da22","sha256":"aedfade49020b5deaf31595a41498a250b584f480ed541acac23d39fd0a84847","sha512":"8b27975c1cf2925a41634fd57aebe3a91b2ea506a14fe74fbced470ae075248d81e04591b0c85e3dd28d7c96c35967e7ebd52b0fb313f18ce507203c5f09942f","ssdeep":"192:9wk6QthQbZQijAd5YocgP2dtvZtaklvR27:9wPqoACM2nx4k9R27","tlshash":"21f19dc273406a81f4583efc8d216bf2e7253a23b5a3adbc0a59cb012a50bd71824d84","first_seen":"2026-09-17T18:49:29.899185Z","last_seen":"2026-09-17T18:56:43.944528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/tailwind/tailwind.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.272Z","timestamp":1789671334272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/tailwind/tailwind.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brAASsbuvql%2BXuVz8SRy5DI1Kljx%2F5mQCds1o%2ByJD0GEBaoscgWHbsQgXbvVvcUW4w2EFfBxzM7n0nWtHelPnhjVW2cZreemPeBe8yKqbyxT9bsffp%2FWsaF9lYfVUBEhH5f6oEH5G56w7Q%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f3fb81a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":218377,"size_decoded":22643,"mime_type":"text/css","magic":"ASCII text, with very long lines (483)","md5":"86993cb0ec60251cef47580a7157209d","sha1":"6a4e5f795cc997926a1ef8e6f16f8a3479cc3cca","sha256":"2e616e6ff6de736354e6f153baac461de01843ae640197ddbb03d09e727aa546","sha512":"05ab78627b5f03e975c7ca10d4db8b736295310cf0ffe6e59fea6475c6c20fc695e7727895df39077a2b1171c49344aaea2038cf7a1520272f8d32666f08b75b","ssdeep":"6144:s5NEfSWqloYC5w1VzMBTeQ5pBB3Q42BsI889kvn8M+sivAVZ5JLhWrBRxBGiJ1d7:Xw1VzMBTeQTBB3Q42BsI889kvn8M+siJ","tlshash":"2f24f25df5f395bae827c57a2189777c3f2c5162ab09adb4738022750b813fe85a04f8","first_seen":"2026-07-29T05:00:35.592418Z","last_seen":"2026-10-04T04:38:44.354956Z","times_seen":28,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/modernizr-2.6.2.min.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.536Z","timestamp":1789671334536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/modernizr-2.6.2.min.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJwP3fa%2Bn5a3jcXh23iaAW6XbGCzGXZCKdbWbjNrpZgOoOLPZADSs4uW6PdIZpPo%2FLLCxudQvRnMcQnLrZNwqKbMpCeIQBwd2GkX5bPsYS9KU%2FKm%2BwNag7EuQ9hUKAOYgNnBHmCPfQ7V%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370d83d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15414,"size_decoded":7273,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14756)","md5":"42306a279a9e831515347ae319181cd1","sha1":"d069641242e4fe1beb6de8f53a77dd964c98bce0","sha256":"cf25ec18f223f4c51ce1128a42e644cdc2244d88f89d1a51440d9dbe51f4efe8","sha512":"2729e4c89ff5d7aeea9036d9d3d345506295dc04609e6c924b340b035a4402742e66a3e87400ff80d84f90f8eda85e6f329e053db20b156e35225ed9cb73be06","ssdeep":"384:BEDD9HW599TpJGd+xesmAnxpakrwHVXHh1pD:BCDKjebALak0HVXH1","tlshash":"6e620acdb153b116839760ba61bf460ff23e9899a8184854e059c5ecbe74ce8473bf1e","first_seen":"2023-03-07T01:07:49Z","last_seen":"2026-10-15T05:02:01.981589Z","times_seen":4878,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/magnific.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.594Z","timestamp":1789671334594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/magnific.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpVAbDybAggKwxGVE4ufioEskoT2LQsfyLy2RKCTDCCP6%2BFigc%2F6YwOHBjmpMovoLxjWKakHr2NQXrYKlZQ1tn9OCTCLYdEL2XOU3GCZEV1qjbnITa2QUL49LWIKyhp8GkKA8yDboQZqgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537138701a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21155,"size_decoded":8873,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21014)","md5":"f7cf72d6743fc3985651928a87c7f518","sha1":"811fc43212edd18d5f651b5c74586bc7d04c8de0","sha256":"729d43c9e270d593d9bfc0622544ce9da0710898678cb523d06bdec6c3fed8ea","sha512":"140b07baace5e85b2705dcbb16ea8f39e0d3c6a2e4988be38535f9cf0b098f7e57ceb014cf2cac5a1b880e0a87140d8d6cb24851d54598d1c59c2ba67df23f6d","ssdeep":"384:MPhVIFQ2G2XGtqVxRQ1giFCdLtA4Tn5h5/w6l8aZwHwztLCpz3sp:MPCgC1zn5h5o1qkOLCZsp","tlshash":"e2921954f2b2b26383a735b8646f600939729953ed06c855b55e84d87efcec89027f3c","first_seen":"2026-04-13T06:27:19.271183Z","last_seen":"2026-09-17T18:56:43.9461Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY07835-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.710Z","timestamp":1789671334710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY07835-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8b31a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Sun, 10 Aug 2025 12:19:21 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VIkyme03c%2BUwmUhs2utCx5Z3CuGIlc4x83utpm7baqSDdAwBTpsDJWcqtFnIrzPSRPwmPFS8s9aV3YKpRhLIjZMRKrgiLhAaBqfG8%2ByNNogOXkuULEZCF3D4NcoiQeS0I8MhqwmnqEP5Q%3D%3D\"}]}\r\ncontent-length: 897997\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":897997,"size_decoded":898765,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=SONY, model=ILCE-7M4, xresolution=126, yresolution=134, resolutionunit=2, software=Capture One 21 Windows, datetime=2025:04:03 16:04:40], baseline, precision 8, 1707x2560, components 3","md5":"884ed0a4eeab54cbdb95296bee65d62c","sha1":"5fb2fc85e0c0ddadd6acc1b27d758e975e8c7aad","sha256":"6b4d19236d6674c3b34b22c751c3aec023f4b821b2d87d4abe72a3800c76dfb0","sha512":"dfb4a2a65a1f0a6025926b68a7044411f91267c741d1a00a11d5d41e45ebe429dfa6102659bcb1f8a14f6dae92f444a021bf2c005160703b693216c5b5c49a55","ssdeep":"24576:JWHAFKdkYQiH8yALJEMFtkpgkj9J/I1kajgo:/c3zcyAFFyF9JWkQr","tlshash":"ee152378f981e7a08f4f2fb8d8ad6d562b1843d0b6c51d47352d981eeb8446ac10b72e","first_seen":"2026-09-17T18:49:29.926947Z","last_seen":"2026-09-17T18:56:43.94659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-brands-400.ttf","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.950Z","timestamp":1789671335950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-brands-400.ttf HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5379bb861a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 442\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:13 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byYDkiPnlvXdyB16nvH9LqzhvzMJwXjK7mHKV%2BlUk69RkYtlUpHWYVLMkP44%2FYNYmPUkWqij94e3nBtYTFg%2FLdEYYMB6WppTtOJHjmpNWvMmUlJNv1e9tZkhmJ9GVtLllAwyx99MvMvyWQ%3D%3D\"}]}\r\ncontent-length: 73821\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":116280,"size_decoded":74636,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Font AwesomeFont Awesome 5 BrandsRegularFont Awesome 5 Brands RegularFont Awesome 5 Brands Regul","md5":"fdf44bc43e8fa2358bbb7d9165d78455","sha1":"19e302760e39e25a5f8d90d6cd0164ef6cd74f8c","sha256":"365163b706c8cef5fc6c69a0a0ddfc40b5c726d5a955fc2a2cec50deacd77928","sha512":"14b19960560c6ff5a3914979d58f9858c437173cd3e68398b11f3c2c5cf5159b5928453ec156dd79c2b4fb79063d3400442aedb4283285c46c70e615704dafba","ssdeep":"3072:tyJ5tH9IIM6kW4V12uKKFrxknklFpHSKkLAQ8leIjg2uAyeudIrpNm1EsVtofR4D:k3tH9IIfk312uKKFrxIklFpHZkLAQ8oh","tlshash":"33b3af6a33fede6fc03298ff5894926236f15404e70112e2fe8b5e5e501a7dc0d6869d","first_seen":"2023-10-27T17:30:04Z","last_seen":"2026-09-17T18:56:43.947154Z","times_seen":9,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rooftopantalya.live/","fqdn":"rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T18:55:29.943Z","timestamp":1789671329943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wegMaTQ%2FAsxaknDSg1voI0tvOkoEHpubKKIoA%2FXDoWPOtD%2FArgYI2zDMpoxr1MGR5eRMoaQYyZ5khypKmb2KOrdszfUgtGRDKU%2FLQJ1misUmFPdd1FQcypfRFUlbm0EDfgdm6%2BOe\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3ca5355b86a1a30-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\npriority: u=0,i\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nlink: \u003chttps://www.rooftopantalya.com/en/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.rooftopantalya.com/en/wp-json/wp/v2/pages/11\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.rooftopantalya.com/en/\u003e; rel=shortlink\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=jbfllaigr589m4c49eg4o2le5k; path=/; secure\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"jbfllaigr589m4c49eg4o2le5k","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=jbfllaigr589m4c49eg4o2le5k; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hammer.js","description":"","website":"https://hammerjs.github.io","common_platform_enumeration":"","icon":"Hammer.js.png","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"parallax.js:7.1","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Magnific Popup:1.0.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:1.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"FitVids.JS:7.1","description":"jQuery plugin for fluid width video embeds","website":"https://fitvidsjs.com/","common_platform_enumeration":"","icon":"FitVids.JS.png","categories":["Widgets","Video players"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Bookly:27.9","description":"Bookly is a WordPress scheduling plugin that allows you to accept online reservations on your website and automate your booking system.","website":"https://www.booking-wp-plugin.com","common_platform_enumeration":"","icon":"bookly.png","categories":["Appointment scheduling","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Joinchat","description":"Joinchat is a tool that enables businesses to convert customer conversations into sales or leads through integrated communication features.","website":"https://join.chat","common_platform_enumeration":"","icon":"Joinchat.svg","categories":["Live chat"]},{"name":"spin.js:27.9","description":"Configurable JavaScript/CSS spinner that can be used as a resolution-independent loading indicator","website":"https://spin.js.org/","common_platform_enumeration":"","icon":"spin.js.png","categories":["JavaScript graphics"]}],"data":{"size":101226,"size_decoded":21078,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291)","md5":"f891ba2115006417581f8a70501d7fb1","sha1":"e4964745cac072cca47b1af67ffce4a3c6d8579d","sha256":"6beb4ecbb9e76f0be045bef74ecd1d532c2ecf26f6ad5c4421fec9b3b3915052","sha512":"e403688248fffb1aa6de38cbf12243ecadc45738ef304ca21d9099f93da130f9aa928a861f3b887e29440c7fbeb2b0b819ee0748df2ca677a5eaafcd4593459e","ssdeep":"3072:bFlZg1Nuq0uYasIStzTXOoopqJ2OHLVqRyrBxXh6/gYk7xvGqqQcJLFIR71NMPTX:MmDNaV","tlshash":"83a3d9b7c478982a0373c79ca026b708e69a743bda858769f3fd825d47c0fd05792978","first_seen":"2026-09-17T18:56:43.948333Z","last_seen":"2026-09-17T18:56:43.948333Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4127,"timings":{"blocked":-1,"dns":229,"connect":18,"send":0,"wait":3879,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.509Z","timestamp":1789671334509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7KHjNcStFKrKB1dfG3D0cdQwwEomf8FKGRKNKPRin76FZxxc0tnNaTViknGka5ubX7RxhAb6hES5alX6459z684SuuCiv0oio7uYv0I8BDYnYXcpvQJXyAdDP2Y4iifkBwgcGHN%2FoXZPg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370b81f1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":459497,"size_decoded":41697,"mime_type":"text/css","magic":"ASCII text, with very long lines (65366)","md5":"d77427569771b1fe1ebdc7dd630dceea","sha1":"ffa1b6a9e0c124e7f1dcf19cb61fea935ab7e825","sha256":"1bcc06cfc2f1514e951e9467b26987370ea236ebd7d616a132f5e650b7953dc1","sha512":"0655e008494e40f9e77eabe3b652bfb973911d6fca30ec056c0babc7fd0c1fbb01d13b9ecd390a296f3dd28f430131c4d90ddccfc0f64e2a62e6d039dbe3dd06","ssdeep":"3072:ZRxHr8xfGP23TkjgPGcHC1FHyIfeB1u6ed5LRXu/hQKV5qj4ixuztaCeVGNz+CoZ:ZR9ZW5qz","tlshash":"dfa431b2f894241b23a74cbd30e4b92a7e1701f3d4c21f7b7568e6945a0986f353a739","first_seen":"2025-02-20T11:42:26.127838Z","last_seen":"2026-10-14T19:07:15.637002Z","times_seen":1256,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/v4-shims.min.css?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.542Z","timestamp":1789671334542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/v4-shims.min.css?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=voUM%2FMC8ws5KU%2BKblXUu7TvPqHlJS46iZAN90S%2BQ15CAsX0jDpZrs7Pleqv8Dw3w3ZOa4WTYz6XRIvFeOfr%2Fm5Mm7TYTl71d%2Bnd0z1DZ3TMbqL8KNIvu9caFjHUR%2FJ4j3StmwRx%2F%2B1Iobw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e8411a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":26702,"size_decoded":4788,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"a034d3c71bee546f625877d7932917f8","sha1":"f217d4ded0bc9f786bd9ba1c09ce88aedbaed76e","sha256":"8fe2f1cb7bc41c640ad3ea24449cfa1ba5291e16dbbbab0ef61bfe43f3212910","sha512":"7c76af9016f2fe0705101dad69a05f1b40cb747446ae7be4590357559e586ff163e8b92881e71051dea8caf055b2b58f6874b1b39b4dcdae8b516fd8e80cfd95","ssdeep":"192:kP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:PRal4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"d5c20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T13:27:35Z","last_seen":"2026-10-15T03:18:47.127051Z","times_seen":12897,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/ui/core.min.js?ver=1.14.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.559Z","timestamp":1789671334559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.14.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UOknEbszAAJa7Aa9iyrMzYmNZ9W17Jb5Zd%2FArmBfrFBBCtigbEsbQidYG8N%2BEDYPeFRTzlDhZm0xxGyCDM1yGDnWnIgRZar9uDUVR8iZCiIVRu8KoP5Xm9ykcF5EirSB9drzIccNFZaR0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5370f84e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18674,"size_decoded":7495,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8489)","md5":"ffb9792c762c28c883fbda04cb87bfd7","sha1":"1d142a621d684714fd78aa415b1d13adca03fd13","sha256":"b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7","sha512":"5605218f2ca25c9bbd553aef21adcdab3819eb7a5ce0081a411d3ca82b26bffa129b8aa7013f6d18f933fc9e526380e1b92da6c87938eb3cfa660a05b3a7a98e","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSd:9P4k0vfSA4g","tlshash":"4a82e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","first_seen":"2026-08-08T12:00:35.066846Z","last_seen":"2026-10-15T06:34:15.276749Z","times_seen":22887,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.575Z","timestamp":1789671334575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzQ05YHgOVADpPiG0eAvaxem1EMWlctksGQ2xH%2Buyp%2BA3FyENWEBxFmyaCA3LJndT7n2w%2BYU0nYBO28MFCAlgvl6agG2YfJj2UfEOxjbu28YF7b6I7q%2Fz1yzIbEapZ8i223KyTBLzyXjUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371185e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5149,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-10-15T06:34:10.211049Z","times_seen":254792,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/LOGO2.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.705Z","timestamp":1789671334705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/LOGO2.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3ca5371e8b01a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 24 Jun 2025 21:11:49 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1h3RORP7%2FK1uWNWGVwE2UOYxTk2OTYlxqN8wgY7Rq%2FdHL3dpZOIRXfLEy9EZhp6W4C%2FiyrYlzCn1ZHoZfSJ5xEsIfey0khiLqbQliTT3maAwksk0NSMO0vn%2FwkqhetdOJNjOe6LHcQkaSw%3D%3D\"}]}\r\ncontent-length: 115068\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":115068,"size_decoded":115839,"mime_type":"image/png","magic":"PNG image data, 1071 x 804, 8-bit/color RGBA, non-interlaced","md5":"47755105ab27d9fa51c1de0456ebdac5","sha1":"0c81d5850f561452234b688f0a4d14e6ce5afae2","sha256":"71fb7c36c5d75679d1ae962c49ca391718722bf2cda4770a47fd4d231ad1d4ff","sha512":"b3086ca919cae6dd303b7462794bf54342997d50aaa7631a070746ac79c76a4adca15c47178370d7e6102370b25b7b74b432b2fe6f0683a00fe01568eaf0c2af","ssdeep":"3072:FGPvyUuCMWEVOWUVLSDtYcs0YI4takAFdad:44xWEVOWAYG59gad","tlshash":"08b3f1f83c4bcd52edaf7622a771a1432bb94d84bdd052b8c8bc7a6cfa4106990c5d43","first_seen":"2026-09-17T18:49:29.811468Z","last_seen":"2026-09-17T18:56:43.951602Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-web-sdk.js?v=4.2.8","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.268Z","timestamp":1789671335268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clientcdn.pushengage.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 15:28:31 GMT","end":"Sat, 12 Dec 2026 15:28:30 GMT"},"fingerprint":{"sha1":"BF:E7:FC:BD:2B:2C:D6:A4:AB:A6:8D:21:44:42:6F:DF:B1:BC:97:1C","sha256":"A7:BB:84:E3:15:7E:CB:EB:C6:E5:3F:BA:6C:B6:05:8D:9B:56:16:C9:D9:41:F4:27:65:8C:6C:8A:78:34:EE:4D"}}},"request":{"raw":"GET /sdks/pushengage-web-sdk.js?v=4.2.8 HTTP/1.1\r\nHost: clientcdn.pushengage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6016921\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=1800\r\ncontent-encoding: zstd\r\netag: W/\"db3a-1a07b2c5147\"\r\nlast-modified: Mon, 07 Sep 2026 09:21:37 GMT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 946, 830\r\ncdn-cachedat: 09/17/2026 18:16:41\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 1b4e97ee37b3855894279cb4ae414050\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":56122,"size_decoded":18839,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (56122), with no line terminators","md5":"c7eda1c304005e85d9a0ca041656296a","sha1":"476ef09985d4e5e9433bc3f6552b30482e1d2412","sha256":"c59832f5900a575d43dee093a977ed3961a2a52270a2936f9c04fd9d770fa9a0","sha512":"429bdb497ba69bcf46fc22d5666d90efe90525dae8d374fd03f54179cce1fc65e64dbaaf5fc4b1ce6674811cb373aba5f7c3d82342e5cf762b7f044bb81f8824","ssdeep":"768:JRKROHluK2/7xaqmWRXILIzp3i/NR+RrRsqJuYx1TRkR:F0tmuWIzp3i/II","tlshash":"0b431ad9bac2b0784353a6a0403f2106e73f3d25790d8850f359de91bb65a8ec12bf78","first_seen":"2026-09-07T17:22:21.777516Z","last_seen":"2026-10-14T10:54:34.253957Z","times_seen":161,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":26,"connect":1,"send":0,"wait":2,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/css/trp-floater-language-switcher.css?ver=3.2.3","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.268Z","timestamp":1789671334268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/css/trp-floater-language-switcher.css?ver=3.2.3 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUUcHDGywGHPUr7eaVgqbJ5cFLiLLHjMyJPdiIHR%2BkJGYQjKylH7700lb7s7sZhx1Yc9nb9pPCDZmGLDk0Re91Gv97nyqvZz8wHPKer8weCVKQSgED0%2B6r%2BzFbYErBTZwlEzlD3Qw49fCA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f3fb51a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22525,"size_decoded":2787,"mime_type":"text/css","magic":"ASCII text","md5":"3bf8eac2eca9553b53325653753a6f7e","sha1":"5b3f0a47502ff3145ee56efccb52dd4718a30f56","sha256":"3791e8200fbc99b6682da3376c0308da7aae1b953d048aabe240bd076eeb5c0f","sha512":"1f56af45b1c9e1dd8406aae9303037d66b6c2db83ee1419ebc248eb39b2620e926ee14d6182248d545c17a122f295351d1ff4f4d0a13c3ba9c3a8e37576e37fc","ssdeep":"192:WTl1X0y68A53k+W7/Q+zIIw8HNv8WEPMvEVEFEVE4n4B4v44EIEwEqEvAE9EVE9L:ABIH8HNv8WlMbNJQ/JBXKjZ/nTFMMK","tlshash":"b3a260a2de071001a41202ed9ee9ea5c47054d93c6c9fddf3a4cd20cefbb95bb4a6593","first_seen":"2024-02-06T15:55:43Z","last_seen":"2026-10-15T06:11:53.258585Z","times_seen":3341,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/swiper.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.494Z","timestamp":1789671334494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/lib/swiper.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pOqbXmw421J%2FdUE8nIpvKpsLlWO9fx2pw9WxXsFp6OBXMkB0BBHw4bih%2Bf06Z%2BZgu1T3meBZc6H3A39vH10NXJjNL2D9RX08eRaj9mDvEppWrMGt4PhnNZTWA9a0AthkKl8od63M%2F3JVsw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370980e1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19774,"size_decoded":3577,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512)","md5":"9aade19d0a8f3dd9b6e2f68e803a49ed","sha1":"cf296f579143913acc4c62f71b9cdb1eaf536efd","sha256":"e6dc47605fad19a3bb633afb7b8ef54835ac59fc2f6b5b511f5a176393a5401c","sha512":"14253864be2e6cce1e0f1bd043d4aa3261fe510f6dd27a0a1e3fdc7e4cb8c217569f2060a7e345db2914060b32c7c22ff97b4cdda5d9f23985b38b8b9d3f959e","ssdeep":"192:nnaNv/lSSyJWCh8zfi5o/mXDN3eBxwdJ5c:nna1/lS0Cifi5o/mXOGJ5c","tlshash":"3092612c17003057e6334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-08T02:36:51Z","last_seen":"2026-10-14T07:31:24.634185Z","times_seen":1042,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2026/01/SNY09515-copy9-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.713Z","timestamp":1789671334713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/SNY09515-copy9-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8b91a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 06 Jan 2026 20:49:24 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1%2FLS%2FAJC2VTdGyOYqovWpdQb2Ba3%2BwBq0lOzbln0eoRXAD1J%2B1dDqW3ERljhGFM9GcM8gz%2FTp8M0GOdwmAGuWVYK2UmwW%2F7E%2FiQZqykJ9su41xlC0qYhNC6LHEez0e%2FkGlJ2cbBfOgDzA%3D%3D\"}]}\r\ncontent-length: 865157\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":865157,"size_decoded":865937,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4672, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=7008], baseline, precision 8, 2560x1707, components 3","md5":"8f4ab6d79870a268c6864ff03ddd233d","sha1":"e5003988145ec6c8900869f4af67e48460859744","sha256":"3aed6a8dc5a1d448d4379cd6427f26d54f5af0dd73520c460bfd9bcd320a2e9c","sha512":"2497a336cb1c956d317e9374005efe02acf1e7c34ea8c80c74904b33de85be8f4e3cc5f6a5cb6b3c4a1c880c0fa62a94fde04ea315acedd902173818908b21fd","ssdeep":"24576:E+afbQYV2yyqh7bVii9QsdUhgjaYIF1YF/BP:E+az4yrN/ChAaYIF6BP","tlshash":"000523688f114edec9d85eb26360dbeb874e5dc0b5190fd9b82e240977b05e05f8e1b1","first_seen":"2026-09-17T18:49:29.94147Z","last_seen":"2026-09-17T18:56:43.954522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/images/flags/tr_TR.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.729Z","timestamp":1789671334729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/tr_TR.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3ca537218ca1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0lPsnf6aZrkGAaBx9ypUjAZTEcomnMXdlhjoJOko3QhJYhDnb0aR30qFkFQe6tB6DfpDiBwrq511dL%2F%2B%2BNKLL0t8OkEE5prMa0AiOy3o9MDtqnPjMsGmW7zesVygYRHuQS6%2BoOYIt8rAvQ%3D%3D\"}]}\r\ncontent-length: 317\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":317,"size_decoded":1085,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"1211611edff9fd00d47c7b65543c4243","sha1":"49913e914fbd1f0d6194a06b4b47aedb73b86b8b","sha256":"f9702551ec8535a7c5bb8187220d0c327e954a2f5f840d1b7d8658fc07dee194","sha512":"8b345f5dc20ddf11caa1aa8db5ff419a5ad9bd2b9a0bf63526d830b70eb50f9c7249f3eb056ce78bbb41edc3967b7cf000fb78af16f18f69ab119769124171c5","ssdeep":"","tlshash":"b8e0e7d192e88d6cbdefd91313561a337b3b453656070fb6bc17c8102a187d811473b1","first_seen":"2023-05-02T01:14:21Z","last_seen":"2026-10-15T05:55:48.885404Z","times_seen":881,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/images/flags/fr_FR.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.737Z","timestamp":1789671334737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/fr_FR.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3ca537228ce1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uaM2bwldzpaMKIsHl9jywAvMkY%2FBgSwWpdTeC%2FTsh2PrZik02ZdujR83KTUFTWmOY%2BnoLJ0N7IlnmnrB5%2Flfxh6%2FpiH9umu2mE3VCg%2BjL4P%2Fod%2BJEH6i1jyi6AuB2Ff%2FW9R4AOiYH%2F8F5A%3D%3D\"}]}\r\ncontent-length: 268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":1048,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"a6b419f8502fa8faca4c693b46989e2d","sha1":"fb3862465a32facd5b5e158b0544b567a01d343e","sha256":"9c86c0c02ccb446b1a50d0282f4d9715e45670be443c4c3f666c263601e36274","sha512":"eaf4f334519babdddcc868dbe9f813595863a8467072eb0d4fc7b9b26e2a201bec6cca72cdd63630544158466b8628781a5a72d4b8578e36d2f9ef22ba2389b1","ssdeep":"","tlshash":"90d02bc14d685ae8e15b849a13bd16617122099e50a94d26d41584c50c2c4f475cdb58","first_seen":"2023-04-05T15:13:06Z","last_seen":"2026-10-15T06:44:41.348979Z","times_seen":5805,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v6.7.2/webfonts/fa-brands-400.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.743Z","timestamp":1789671335743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/releases/v6.7.2/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 118684\r\netag: \"cbcf42b2e9228a8f5bad42717d8a88db\"\r\nlast-modified: Mon, 16 Dec 2024 15:34:41 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 149583\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFn8kDh9efuZtD1%2B8WAHhze2V6l0vjQ8pzvqyJgZxAf0s0jmG6rSfiZAaGfoUB9rS7sT2QNfiW3v0V5qetp5tiUbzAED0Z%2BEHLORlVpNCDAfjKzz%2FR2qoE9jUNcnJMZ1gwh6QsUs\"}]}\r\ncf-ray: a3ca53786e39b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118684,"size_decoded":119405,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118684, version 775.1280","md5":"cbcf42b2e9228a8f5bad42717d8a88db","sha1":"31c30351084e2670bbe5c47bd342e11540a68717","sha256":"d7236a19bf23cbb2027280e8f51dc99d6c45976a2ed60de73382b034b18a2b68","sha512":"3872344124caac5d5831dd08ddab3532fe2d0c0991c6ab0939c460c6ca40aab24bff5af5fed19ac40cb7cb13b13e24bd32756d579996024ede587a598538459e","ssdeep":"3072:tDqJfeFhgJI8f3pOO/qjV79EDtUynAuWKeWY2xKokhAmjjCoTnRG:tDq0hII23EOSjPEDWynAXKnYvotwHI","tlshash":"d0c31223c140cbbfd4f3909ee49da97506cb746734a1b2809335b2355e2e9997243eeb","first_seen":"2024-12-19T10:41:23.150574Z","last_seen":"2026-10-15T06:38:42.071981Z","times_seen":21678,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/prev.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.767Z","timestamp":1789671335767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/prev.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/css/lightbox.min.css?ver=8.2\r\nCookie: PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a3ca53788b2c1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 445\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fuQdovKLP3RALZiCYLUgvq75fUIGCD3iac5tDGpBzaY7p3OmywMxSnN%2FyrMVbz5PqaA0dyvjaDuFsBpKn%2BJ2A7fukIdplOsGdgT05ZBIJyGZf7LzB4MIQHJYw1ll6KAekULw4Dg4P5rwdg%3D%3D\"}]}\r\ncontent-length: 1360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1360,"size_decoded":2125,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"84b76dee6b27b795e89e3649078a11c2","sha1":"6640a3432f7ba7aea6129cdf7a5d3eabd47c295c","sha256":"7fd9273f20fdb1229c224341271a119020a5eee74ccf6b4605730917c864caf2","sha512":"f7128971cd4b6442ebac344cad93186e1fcc976470e2f5a4e758f3439c7b07421fb99a927450414b86b4bbfc0f2cc605b0e63c217057e094f9d866d9906960f5","ssdeep":"","tlshash":"b121f8b5a75040bddc73b70a4428be38ced1ba204dcdce0b42719c77a082c29d7f1082","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-10-15T06:43:48.211688Z","times_seen":22767,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/fa-solid-900.woff","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.782Z","timestamp":1789671335782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/fa-solid-900.woff HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca5378ab331a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65rWcM6ID4dp1uw3uAy3AvK1kNCGCEvLVki%2BMAVamGnVooMqBws7aGD88aEMC%2B8nIs4CNsDgYbUIItZxIXSGCnB0pArSntJnm4dqm4Ci2Qn7lvMke6ttVsPCOSfdbUwTKkm6lldsoTVkEw%3D%3D\"}]}\r\nage: 442\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:13 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":98020,"size_decoded":98770,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 98020, version 329.-1049","md5":"4bced7c4c0d61d4f988629bb8ae80b8b","sha1":"0f6fcbf47ded1a1c6ace0f67383d512b6a053dad","sha256":"c1450cddfd98668e6e593e2d26f11b4c43faaccb5f033b0b50ea6f1ce7bf4b58","sha512":"d02d0edb21ab77eb4cf756e806940ba8625afbc91ee83a1f5966d465cc40ee711f2e0a59668a2235c144ad55e0279d4c594d9f1607b65043a250419765f5f2d4","ssdeep":"1536:YJaqmnUz6+weA2j3iwd82gYuDM+Xh/GAm4UIJYSKw1tKzkwQZCkUCphYq37P0WRf:3qmnUOTMj3td8bYunh/XUIlF1SJQZeCv","tlshash":"a7a31245a7366ac04e9cff01c2f9076f7da75d9c04a0abc8afd1de664db4902319a4cd","first_seen":"2023-04-07T00:04:59Z","last_seen":"2026-10-08T15:00:49.393912Z","times_seen":97,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/ladda.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.519Z","timestamp":1789671334519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/ladda.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZbjyT%2Fw7SfKsmsnreKRImFzqA4n4KzHPSDNkTXO0Ch6EvVsrfygec6VRvRxDX7FQx1w4nPF%2BOcJwV7QqdXSC4oEkRpIptu9KyhVHZSx%2BMOoA9DZ7DJT9h7%2BX9gUbGSegNwwHMyDqAtgEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370c82f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3753,"size_decoded":2315,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3607)","md5":"d9a7f95a94003a95d03e1a3fbafb1675","sha1":"eae56420ff81459d25629daec0310126a78ebe36","sha256":"24cb05ccff63bafc2a18ba4fdb70b92bda051a3cb0dc223fe50aa185500ef971","sha512":"879f5ec5aa45c15b2da3f747500610cdea8e7662386fc61ff4daae4b2c5db1fcf8b6c830557eeb91ce89e19ac4b9d6e969b11bca437da5a8e1cc7df748ef8c90","ssdeep":"","tlshash":"a97154ed31807a772b9741f1583fa10ba4716574190f8190a27ddca5fca8d5d28b3e7c","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.238221Z","times_seen":1463,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/js/calendar-common.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.532Z","timestamp":1789671334532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/js/calendar-common.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YusBj9fEjr5Fi6bywrH6J4C1SW4imkEePCPv1zhECsF%2B2r0CK1MYd7QF%2F3AqOyap%2BuxHqP3ex5zwpi2rHi%2FpERe88wc6gpfcbP3OotDXmVX34klECDlUZp9wJ4n1QcUfN1K8tVsZUNOgpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370d83a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27941,"size_decoded":6429,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (337)","md5":"1b015fa81dd0c5152d38c1cc925adfa2","sha1":"05eda300a4b34c8755dce2bd12e0c1eb6d36bf4b","sha256":"cf7a37fcd60c5156a5d64ee52897340e1f2d6649fdb0448db435ded98cb36f37","sha512":"ce5a918dc404a186a0d08097511d36b49c54ab8c779560552f9dbeace2c8d2678de2196dccce00e1794746a87aebdbaebdc90e635c6350b77389013a939d4580","ssdeep":"768:TtE4vb2268rY24ciJFoMsbzVqbFZ+2ehk2:pEgb2268rY24ciJFoMsbzEbG2eO2","tlshash":"39c2540826b3222146bb717ccf5f520432328aa7944dbe187d4d9fc45f8592cdaf6be9","first_seen":"2026-08-01T09:48:57.397526Z","last_seen":"2026-09-17T18:56:43.961649Z","times_seen":12,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/functions.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.567Z","timestamp":1789671334567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/assets/js/functions.js?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jg53cGjAZ%2FCABht2mtpYHYWX4uAfUqfo1AyD765a%2B2FuMDrQvoJCvtrJToxipCe%2FtbZhS7b63TgGfmVKPz5QCA25MZf58z4fYPou3D4N6vCrV0l1ed6cd8dJN3hrbKXsGOE6hzVexnbA0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537108571a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48765,"size_decoded":11087,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7c3a7df4a25484dc6e09fde276e3f27c","sha1":"92e1876be1bc285197d52bee0748c1741e15f71c","sha256":"1838934855c5007b1cb3b4f502e640f74d6e64c1a73585d96a17179d59edbe50","sha512":"331a4664e8bb98354d6c0daaa8be1f6aaadf9c9020feeb94adc2601245b07e3744dd124e14873ff6d18e513a1f30f135a5017d0198590ed69422ab80fc2bc24b","ssdeep":"384:k05j35bPYeYo5fEIKzZk0dKlC2S+QvjR2dGuzs/FJQN8rVoelVq2+p6T:b5zDdfuzZk8XxvUs/Frm0Yp6T","tlshash":"6923b5da732f367a4db6233ed4fa89809f2ee03252412e3df5ad250c16d4c06a7a5d1d","first_seen":"2024-08-20T09:47:33.154487Z","last_seen":"2026-09-23T11:25:47.089197Z","times_seen":30,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vc/vc_waypoints/vc-waypoints.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.612Z","timestamp":1789671334612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc/vc_waypoints/vc-waypoints.min.js?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64A8G2yWs5vHMAN6oQ41kOFq7qUJdk1Sp4QarmuIG9IV5%2BDZWkM7%2FeYq19h3IBUgV7cVvWBHXfm91DW4UoyC7Q2ZqbyovZz0Ji8xbndPpszXSBB%2FknFB7YkqYTAyhkIXf3uajd5TbuBTTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537158871a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8679,"size_decoded":3346,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8679), with no line terminators","md5":"b8fe107ea97839b0ad0f83d30726aabe","sha1":"7c4c2fb9fe7e1ec8868fe40ba36e6b4b06f9ec29","sha256":"c2b4bb76553cd0132a047fe645b9041fb591bf97699be836b0066e3a61e573f7","sha512":"f416c8184c0b9e84fa0e9a35842e8efd605f8c1a1ce092e60ba91a6a8a6068c70eb130603faf9a81a39aa47570ce3563aa3c22963f93c711f363179453cf63b9","ssdeep":"192:+kIozHD9Djc06hj8XAanNLvfSMuRPecpsG+YcXYVr8SxRn6kJrrAlC:JZzHD9Djc0C8QanNLv6MuRPerG+YeYVn","tlshash":"770274887a0574321bdf81bae92f434ab337582c740640bdb0d8d4ed28f2569776bb79","first_seen":"2024-12-26T08:37:42.604148Z","last_seen":"2026-10-15T04:36:10.972579Z","times_seen":4938,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.272Z","timestamp":1789671335272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:31 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116584\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28528,"size_decoded":29341,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-10-15T07:20:05.320799Z","times_seen":11273,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/tooltipster/css/tooltipster.css?ver=3.3.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.252Z","timestamp":1789671334252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/assets/js/tooltipster/css/tooltipster.css?ver=3.3.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xc18AqwLzMZ91O2Xo0G772syPptI%2BBQuxJygBtvyV7LeshYB1yxnPClI3UA%2Fq2pMqCapWuejktYb3zb4xSwBc1jhFAzzIBN7AEaK0%2BQn0GBJcDKhaeIjCVc%2B6yYEjYx4XBLpYNFqn22BMw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f1fa81a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9360,"size_decoded":2314,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ccc2c8dfba39f4a1721c81a8e592e6b8","sha1":"cd5c8adf7b115ebe650bb45b84d3bfb94e812163","sha256":"3a24844f602ba89bb9e7e6c1d659aa3659d6c88542a4c41d60312e0f66aaf9ad","sha512":"e7153f934dbb5f73c5097b04ddecc549d0acb83db2c53dc47a264bb3ddcbff65dbedbb923dd9e17f90c0bd8d89600618ddf1eaeab2fb49c3399543c37079b924","ssdeep":"96:uRTlqeCX8Q/EwW4OwrbJrVSQZcj+dC+rS4915AtMeaGmWR:uGeCX8Q9UwvJRAtMe4C","tlshash":"1512edeef79132480e23dfa593f6f728d63d42712b3ba8b83382594a440f558066765b","first_seen":"2025-11-06T09:51:11.272416Z","last_seen":"2026-09-23T11:25:47.191479Z","times_seen":34,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/spin.jquery.js?ver=2.0.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.563Z","timestamp":1789671334563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/assets/js/spin.jquery.js?ver=2.0.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pphekywAtdisf4z7vU5M1pHGRNXoFevnom85O1kQRMyOqfWW4IND9MjCAu8i%2FBXGPuezOThIqB58niwYFz5Q5BTzpNjqy%2FnU14T7tIxzc99urbHGoqF8306E3bMpWC6H91x8HhqPlZmXAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537108511a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1835,"size_decoded":1447,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f1e10e6367463a7d3eab63305d6d18ef","sha1":"2c27f51da537099b9ffd1f266fd67f5cb8a0a4f1","sha256":"83de3722a63b4c796f71089c60fd1f92218211308b3b2446e8d1b2a96f25f469","sha512":"97ee7e98b84cd463dcba156ef75aa463a7adfd311f9e5bf55f7321780babcd389cb95e7dc8a4b6e7c2912141b32e3c90c01e9bee1e879dd68c4818a355ebcba6","ssdeep":"","tlshash":"cb319f6195eb2aba4133a378815b8189e713c167120606057cfc918c6f70f5e76b8fdd","first_seen":"2023-04-15T21:21:00Z","last_seen":"2026-09-23T11:25:47.21577Z","times_seen":39,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/the_grid/frontend/assets/js/the-grid.min.js?ver=2.7.9.5","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.609Z","timestamp":1789671334609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/the_grid/frontend/assets/js/the-grid.min.js?ver=2.7.9.5 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IcUdts1JazX4XJbYqbgJfCMdL3QgoVcvfhdDVK7KsLW3Jl2ofbZy1Z9TMglnw8rn8rHoKf08vOzPjyjaRbTNej3MLtEXlUzbIybpKWqxy0oHT8hC8b7DNOANdcjtrNfWy9VB3LiP%2BeqE9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537158841a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":97349,"size_decoded":31450,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65389), with CRLF line terminators","md5":"0ab2e69f0a2d0685271759b3b491dfab","sha1":"7ad038454a7b37fbe62aa97c18850260870b45e9","sha256":"1e83eef1589fbfeb3d23084cce052a9b2a33b1e14ec88ed1bc9fc2f013bd477a","sha512":"5821db211e455dfcf404fc9c2dbffbf23fd4cd001a2bdcfc93a6acf34f9aaed3d749322d46c1c6a63ca188a09e7796fdc8446d57d52e398f0b22e904aa556b04","ssdeep":"1536:RjRuuCZaPLnaNjNLdvs4uqe1s0LR846DpoihsS34A:Rjk2PLnKTe1BLi4Up7","tlshash":"cf931a49f7413435429770a661af060e723b782de60680acbb76d8ea1db9d8d2137f7c","first_seen":"2023-07-18T14:28:15Z","last_seen":"2026-10-14T20:34:09.521236Z","times_seen":195,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/js/transition.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.618Z","timestamp":1789671334618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/js/transition.min.js?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvnBAgj3QZlvSJ4BCtOQ0D7YBRuSjU0%2FPeigDaSYMOqQR7LUtJ9TR8lzN6kf%2Fu40CfcIj1gYP9ZjaklCJJACvIp4%2BcwGA843YkEG7DQdWb96IMaD5GgFLAsq6XfE0EomUs6PmEdiT603uQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371688e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":897,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (497), with no line terminators","md5":"fbca6faae80c5d06fbcce5f070d29729","sha1":"0f360ee5b276aa62661d29d39eec312507911e60","sha256":"33a5d109853841a797fb6c67bb5ef4131608f5f9c137874a69849b8b035925f5","sha512":"db4c833d94fda89a82e288616fa5059b9c49ceb07d69c0d77b4635334244bdd1c707d71b52a2c9fbec6130529138add725fe1e328c23a9133b931b16d7ee0737","ssdeep":"","tlshash":"55f05904a320a0a04107e72923ee0405353c68307fb2b09c7786bb8b6ce754da157ff8","first_seen":"2025-02-12T14:25:54.886649Z","last_seen":"2026-10-14T15:52:15.632919Z","times_seen":518,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/images/flags/en_US.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.728Z","timestamp":1789671334728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/en_US.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3ca537218c91a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raeMmnIHjhJwpiBWf4JuzySHye%2FhSiYQ5F%2FPqL2qbmKmL2M3ufcJzPSBrgiG3eBfnHGEszghfEt0W3fZL5KGIUCGDSxBSx4TKJWYDjSGOlKDHlVCw21avw51cM9%2FxkS9Drwu9Lkg4hOJtQ%3D%3D\"}]}\r\ncontent-length: 502\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":502,"size_decoded":1268,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"ab347ae5be9857bf2cd91fc8203ff20c","sha1":"136ee4ffb05ee0c980c4beae0bc45abe8c103a2f","sha256":"84554ad84b590aa4d161301d4abb95d5d3b7013f38bbb0c02ba0d506ce3c548e","sha512":"6dd5d91f93fa7bc5c6ed1e8b5dd80c3288524cefcadeba5f69223faa2799c91a272b210698daa059be48ed6d23f7b7aae0da4348a36991347990a1281c5e9c85","ssdeep":"","tlshash":"a9f00ec369e05e3ce0ab392f22633476627b55950c710b26ae0ac9342f260b24951f64","first_seen":"2023-04-13T10:02:08Z","last_seen":"2026-10-15T06:29:40.178259Z","times_seen":5394,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/the_grid/frontend/assets/fonts/the_grid.ttf","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.697Z","timestamp":1789671335697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/the_grid/frontend/assets/fonts/the_grid.ttf HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/the_grid/frontend/assets/css/the-grid.min.css?ver=2.7.9.5\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca53781b0b1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 444\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:51 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5lqK0D6rUXu5ScwrREVCiqmQxZFLNQQKOsjU0QKPyS26mgH%2FAVuglytSxDvVYgMNPnsMb0dppih%2B1AQyfgHZtDeMsRDyByGzAbhlUJoCDHVA%2FbgScOMhDtK4E7WOGVbMfT3iiTVfgx98A%3D%3D\"}]}\r\ncontent-length: 18034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33556,"size_decoded":18849,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, the_grid   ","md5":"ebd94e7766ab1038ebc2885064da3471","sha1":"f23e91fc975dc8377365f5b653300db3c52eff85","sha256":"a90132d0c3ec0a1cd36bf50e490740d1562bd1c836573116c5dca932b25c9a52","sha512":"556e154c6e95b6063d8f41c0d507a2a7f426ad8ced09df7bb6a4622e81326c675deed1316768f77939eab653806b972eb5bb08ee83e03f74c3a050ba25792bd2","ssdeep":"768:7XrAasAjord/KQ6/keecDqiJ9OuMkSS/iK0qfGwlg898+zzn/zR:LrAa7k5ejnSu/HhGL898+//","tlshash":"cae208cad3f5fd49de28e6b88559863309f9b304f990533aedce15ec84668e485ce390","first_seen":"2023-04-06T16:31:36Z","last_seen":"2026-10-15T02:48:30.414974Z","times_seen":1225,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/menu/mobile-menu.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.500Z","timestamp":1789671334500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/menu/mobile-menu.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsLQgDXrVgVTM%2F8GxvffqfnKGaHRdXYwPxw63goQkbPMEkJM0WWwSBvaaMCAtkkj4vLs2p2yAnGAJwxbZkU66sXv1l%2BRA04YLl7LL45OGpurVhRJHG3VzPQcOGR1iKzNgVI%2Fy5ODHllmnA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370a8151a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8553,"size_decoded":2554,"mime_type":"text/css","magic":"ASCII text, with very long lines (8508)","md5":"65ea85c71299d499a32313a3a37bfbcc","sha1":"c14a177c1a3f34790ddcf1ee71b98474a0fc4257","sha256":"1db9f1d3a787dc33bc0c6061636ee95d95149c09f1523cc9110e4ee29e228055","sha512":"5e206c23d372786fd6124fa3a5fcbfb577a03ea1db1b782485c1616789e7e2a221c2c75e4d4cf718a79968238f1aeb52a9bc9f785e0feeaad90d6deccb9a0f3e","ssdeep":"96:ILSPjjfC4bK3sgB8JShWu79nKnKX8tKJev:BfCqeSJypBnw/t6Q","tlshash":"c702754bd1643338a0779328d3ce876c623ca612eb6317acbb16950b43c776963d3d89","first_seen":"2026-04-13T06:27:19.196484Z","last_seen":"2026-09-17T18:56:43.96912Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/spin.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.517Z","timestamp":1789671334517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/spin.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZB925mBYOGhVCcGFny9BnKwyPgnVtK3SjmjuoEK7RLDTvaonUM7m4l5Yk8XtNa7SDDWngHXWZxfEuXH0cUgx5qym2H04ISDAaEtltrkVeLJq2fA%2Bn3Ed%2BchckvkXFkMCZGp2r6mQ7wpy8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370b82d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4277,"size_decoded":2770,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4247)","md5":"545405225c13b2f42ab103fca31a49b1","sha1":"f91e2b661f4feb976b5e260bdc2366763ad13562","sha256":"3e27aa13441d103329a705eb4f349942bead5855f75b92a4c91572175ccddde8","sha512":"36c0d07c15dee0f427f05509ced4f7e8d5d08974229bc505601dde2a67a2fb3fc4bf698c68d8049617314905a8ad89f7c32701db3e25ed4f0157f90e2920e362","ssdeep":"96:nr3zL4VHN+pMw1EEyjQU8vWeJWVPoDyfSUri:nrDL49N+phXW8vWv2","tlshash":"bb91b55cf3c1b15f66232195b5afc58f213814867c1e88a8d564d6c99e70db820fbf9c","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.495363Z","times_seen":5233,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/bookly.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.526Z","timestamp":1789671334526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/bookly.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vq3c8%2BBc1PZjCO8U01tfaTSPBczO0FC0O0z5NBhEhlyNlTlZulY2q0T8tJ7i2sB0y8qCWFMWJT41rxrL%2BIQ43GnJjv3Il3NNqrbqRtLP6Q0wt3bYPmCj6mCMW4abvBxj%2BeRjZktvG%2FHtCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370c8341a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243408,"size_decoded":72268,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54041), with LF, NEL line terminators","md5":"c16ea372b7df7ffd748b257c72d13d71","sha1":"aba0c4b7a4ce4216cdf7108f0a3186c58faf50be","sha256":"04cfa23d1ce0f7c19438a143fa466b43cee6f88c88178944e5ca254ed446d3e1","sha512":"095d082e9efab49356519e1e941a3345ee0c9a90b76ea33c57d851a2aabad387d95a6e613a1bcda0a75b18aaf3beba0ced6ca718a227b59c863ca6d7654d0605","ssdeep":"3072:cDrhX39yq1N+jUOiCJ0353Q1GwhNWHtbjHhm0Zc6e0MZ:cBX5IiCJGgQwhNWNbFm0xe0c","tlshash":"b734d8c9b292f0a553b7a17510af0206f33a6e85a80f4494f27ad4c53c7c94ee177fa9","first_seen":"2026-07-29T05:00:35.640705Z","last_seen":"2026-10-05T22:51:35.156711Z","times_seen":31,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/public.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.577Z","timestamp":1789671334577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/js/public.min.js?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K66Ass8FBVuCyb0a5twv6m7t92BTj60q9pjxLyoR%2BTsVzVuu93Ry1doRDwlvCdtHELoKjLcSJmaPqDqwpjIUaLuqu2YGDGI6clci%2FG7ILqnnxa%2B4DCYnRW5j8qTOhF%2BigCox1tF28D%2FBMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371185f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3397,"size_decoded":2120,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3396)","md5":"7684656781f1ed6320151a1ba5c6e29f","sha1":"9418c849793d6c3d0b95530ae4ce8282dbb4aa2f","sha256":"d10c0ee1d03c36095954b5347c8e68834376c93d1f83200146cc6fc69bf2d5c3","sha512":"f70d8bd45de75fca43e01586bb87ad9c1eabc0d2258c16aa687d5b12a809e2104177ef5790f26ff9dac4f16562fd397928ef8106dad0a308bbdf083ee0d24c8e","ssdeep":"","tlshash":"0961a569b19031ab00ff61339daf611832b779354e80d351249bc0a70d7de8c7167d2b","first_seen":"2023-03-07T12:09:07Z","last_seen":"2026-10-10T11:18:22.500612Z","times_seen":135,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=6.3.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.606Z","timestamp":1789671334606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/creame-whatsapp-me/public/js/joinchat.min.js?ver=6.3.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKEA%2BMacdNsrWlPdufUWc3GaxjLYP4elLo22sCGASEZIbL6qcYdj8lEoejMaC79EGGBCyC8Wlm0V27yvM6cNzVbhXQMAwkfx4RgxJ3VS%2FUtMNNqFNVrs57jQlo1kh25v8mQk0UPhsBVHFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a3ca5371487e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11451,"size_decoded":4838,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11451), with no line terminators","md5":"5b822748ed47275167bb53b6c3eaf438","sha1":"d6b1a24550040dadc6233d66329861b7ea6d0d88","sha256":"4b1825f9dc995eea67e69d5e9b9b20c4a0c3a58a076ab4e1b6d46460509fa1f6","sha512":"ba0d2a4ff4dee168bff10fa41de87c1d76a9d2e69ab99569be57d58d8fd926a9c45e0c1073ff94385703baf56b86cb9d55728ece13c20e88890a58054bae8c27","ssdeep":"192:iLQ20QyTGMS39maPewoPV44aNCu6p4fTzPS3plIhMHujlO:iLQnnS3h4PPPsTzm3MjA","tlshash":"3d32d5d4b32629be02db60b6f2e927a1922d16c5941ad4387d35ccf506096c93f36ff1","first_seen":"2026-07-09T17:38:06.148104Z","last_seen":"2026-10-15T06:26:21.348748Z","times_seen":1087,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.277Z","timestamp":1789671335277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 19:47:01 GMT\r\nexpires: Fri, 10 Sep 2027 19:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 601714\r\nlast-modified: Thu, 04 Sep 2025 17:13:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21292,"size_decoded":22105,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21292, version 1.0","md5":"dee058d759c62ef3f950a3a5fe2a91ad","sha1":"dd5d3af570f00b968c57812b147ecacc475aeac2","sha256":"e9dfe6f6288f73d10e1b3c9ef920f74411f8cf442515b71fc5c2ed5517c14ff7","sha512":"1893312677f3353c176cf10a5da93456f9653b161ffdccf5c9c647c1b95a5eb6bb97704c1cd3103395e9a23e731ac847c24f88067b7e404815252167a716f2a8","ssdeep":"384:/vWi6HqGOvDokmCTRko5h7tG3Mrh7uz1xCaqBOOuLLBCNJqaKtp+:/eioq/ZmCWeZG3MdyzSf0CXKb+","tlshash":"89a2e1e2ad969d6da9cdc13f1e74e8fe94d0506a501805e7444e00b3949f8fd2159f37","first_seen":"2025-06-11T20:13:28.859875Z","last_seen":"2026-10-13T15:43:32.939828Z","times_seen":530,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/next.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.769Z","timestamp":1789671335769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/next.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/css/lightbox.min.css?ver=8.2\r\nCookie: PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a3ca53789b2d1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 445\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHzHUsdSR5iOfIdU2WjrptCGGWkHRmA6MYgzxkJBx800Sfo%2BT7TAz5cZVQWwEqfxHpBJsaq6ZQGtXf6zp3Izp4%2BTK8xfsjbmaWu%2BJChUfiQbFNDLFRb3Uggm4hPFg1KPRvg3uBJTxtnBqg%3D%3D\"}]}\r\ncontent-length: 1350\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1350,"size_decoded":2117,"mime_type":"image/png","magic":"PNG image data, 50 x 45, 8-bit/color RGBA, non-interlaced","md5":"31f15875975aab69085470aabbfec802","sha1":"777e92c050f600b4519299c3d786b8f2f459fea4","sha256":"15b869b02c6fbaa8c6c26445a2dd2d9bad80fd27b1409f8179e5dd89dc89d90a","sha512":"edc920dcd2f5ac9a6e08098c6a59f888a9cb135ff4ef3dc2183931e065b6531e00e2c8acd3c329a3d90eb939ea3db318a9b677b5aa78a227815373d7008d40aa","ssdeep":"","tlshash":"c221d8f1f658249b813a8279587be1602cbf985e31b4cb8709ddbb3323b5c04e102376","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-10-15T06:43:48.195838Z","times_seen":22750,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/fa-solid-900.ttf","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.804Z","timestamp":1789671335804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/fa-solid-900.ttf HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5378cb4b1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 442\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:13 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMjZcpabpCpBb3FaWzulnGpVLFY0Okuckqpz%2FmanZbKdm9zWYVOWI%2BorZbVo45SN%2BcU7rg0UmSMFj6doH5pm%2F4xz15EuAYoE79%2F0A%2FPOIp%2BX2av2aZ6zx9POwofR4EGqsVdNJX1utN7YEw%3D%3D\"}]}\r\ncontent-length: 95293\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191832,"size_decoded":96116,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"acf50f59802f20d8b45220eaae532a1c","sha1":"b7f728ec591ed9dd9028ed3deb6a536d0038c8d6","sha256":"9313de7304bef452ff5ac93e0f9ca48c3971d2fbb502c3fa1e2c2ea1f91ad853","sha512":"184b0b0f44501c33109d014eaf7ac43cbab9ab970c1f40a18795e1e87778d631d8fde52dae5b7187aeda1cc483fefb243387ad31428b2e2e2b72cb568b79be58","ssdeep":"3072:JvtG5iE+nhbTOqjZ5pLL1CdvPXiazQYYtByVNaKL/rjr0hFlxwP+muehAMe9n:ZtG5iE+nhqip9CxXiMQPtBy3pjYhFHww","tlshash":"4f144bed769fcf67c18687bcafd0bd3221e05f10325237e2be46991e20669c494f056a","first_seen":"2023-04-07T00:04:59Z","last_seen":"2026-10-13T02:56:56.119976Z","times_seen":28,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/general-styles.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.499Z","timestamp":1789671334499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/general-styles.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbCj1VYFcl6bJLO4CCthouOPY%2B1lwkrf1rl7Lycad%2B8nPQx1wtTDwbhBnawVoyypR8JijpC%2B7XvDexCEVHIU7uTJhpfWAEJcGK1ahp%2FsoDtWaxe0C91bvc0DyZSRFM7WqSG3p%2BZ8niN8HQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370a8141a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5626,"size_decoded":2270,"mime_type":"text/css","magic":"ASCII text, with very long lines (5578)","md5":"4a2d56c30c29bdd3d5ebf45b3e10d5eb","sha1":"bd19ae5f52db3161a0b996b3375ddaf399a61599","sha256":"991fdcfe9317d7d238c1c3d39038c8c3ab36a1a1f92a503fab4df47f313fba67","sha512":"46d4655de1480c72819fc5f642b233939cb631f120a7854b3299cd22e6cf73d10ca45cab3c6e934de150851fffa761d36ceddc42ea0bf029e0ebc999a5383810","ssdeep":"48:ngRgvXZLpYUPITzyeunc2E8NH8GqHm+a/E1beaoGtkpRVAt7wbyPRBqG:RpYUPoZuc8NHfuSEJeNbCw+TqG","tlshash":"50c10127f9a5142df01b4a376ad0a778b238d542e6264bfc3925f7b14bc29e71323760","first_seen":"2026-04-13T06:27:19.238111Z","last_seen":"2026-09-17T18:56:43.97548Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/jquery-migrate.min.js?ver=1.4.1-wp","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.516Z","timestamp":1789671334516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/jquery-migrate.min.js?ver=1.4.1-wp HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsV6PAU2ilAGNnnrEkWQglIy61x779VJugKeTiBnRTUHybuZyYDO%2BUHHC7HpjaPFCFji7%2F3QwDqV3VyWcQBbVnM4rrCx0Qql1hxYrQZh2GpJcL6ho6D1wCPXAYxhnqBYqPzE9Q%2FPVOzeig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370b82b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10056,"size_decoded":4850,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9959)","md5":"7121994eec5320fbe6586463bf9651c2","sha1":"90532aff6d4121954254cdf04994d834f7ec169b","sha256":"48eb8b500ae6a38617b5738d2b3faec481922a7782246e31d2755c034a45cd5d","sha512":"b74a2f03c64e883b9a34de43690429327dfb4aa230a7a6afca8150a16e3d84e98461245ff264c26368d9904562cc34fe219f71f951d364fa5c68c039b76776cd","ssdeep":"192:kZrk/GNyd31svs7wkX8KzJcqSDdAcHX4YE5NLR:srhNyNO0kkMKzFSDdAcIYwLR","tlshash":"2e22c79db29a70625fba35f8617fc11b717a94fc2118d9e4a08c8ed1387dc9d403ab39","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-10-15T06:21:28.216315Z","times_seen":63000,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.543Z","timestamp":1789671334543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8W7w2GoeN%2BtzgCtfUWkHg%2BP6cwTry2ouJPMHxDPsf4lamLsvXF%2FBYnGhZUavISwfcFyJGCsNs7Wf5tmosUCla3WVTbK4oBjdSJpRNrzesJ5LFYdgy5VhW77uftdGkcMkg84wTs200orv3w%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e8421a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59305,"size_decoded":13182,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-10-15T06:14:10.226652Z","times_seen":50373,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY06983-copy-2-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.712Z","timestamp":1789671334712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY06983-copy-2-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8b61a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Wed, 25 Jun 2025 22:02:36 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQn2DXtH4c8vfDu0kcT1H5MD%2BLQQu3xGFF9%2FjLDQvbFNuH%2FdA9njakCIDo2qJefkUwOD%2BVOi3ArcKLzgGkHb9%2B%2BnSxyrubY5F5q40kMoF8CwUGZtIHaofK0DiafjkzvRCPhVh0VeXBxDsA%3D%3D\"}]}\r\ncontent-length: 698768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":698768,"size_decoded":699544,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=7008, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=4672], baseline, precision 8, 1707x2560, components 3","md5":"3640c18af12476c060ae976798aef459","sha1":"71a8b6160a6f81a69fa4c114632b208086589c86","sha256":"05d171ed46853c3fbc0c89a6c4f3f229cfa2b1dabe4939723fba0e7170bda922","sha512":"fc3592c0c1cf556f7995fdba6d776bcbc398eca0d30706c4951cea020430cd2b7b69aad698855be33ad65dbf8d03de6192fd05032bf94c9aa3ba360bb2156ddc","ssdeep":"12288:0UkfoNXgNOEe82sNc3zbxhbPEMeGuBOl3Tfy1rYjel2rSzOZIiyW:0EgNOEeJ8IPMfGuiebFiV","tlshash":"3ee423497161a802cbec7af741f6b58106a2e51fce984a83f8bd1f1c5b74c945c8e86f","first_seen":"2026-09-17T18:49:29.813362Z","last_seen":"2026-09-17T18:56:43.978201Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.210Z","timestamp":1789671335210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:31 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116584\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28528,"size_decoded":29341,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-10-15T07:20:05.320799Z","times_seen":11273,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":4,"connect":32,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/dist/scheduled.css?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.258Z","timestamp":1789671334258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/dist/scheduled.css?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dxDtILeR1sHPt9InQnk%2BgEhdKTQIQqFwnAlXOB5KnGEAWh0%2FRHY3Kaj2pGFohyyB%2FosqW7hMcRqnE8%2FHYPxnd2FRGSlim9fsdj2Hs6LGGlKIYhdIS4okjCSTBqaeWpoT%2BgistGAA5vr6Q%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f2fac1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66269,"size_decoded":9113,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (848), with CRLF line terminators","md5":"4e8c516419a4ff5da277090e3fb2c709","sha1":"2524e68799f5d26e073f99b080bf4b98024a83f4","sha256":"c4f5065f48a467908c13dad3a5fea3521b40207dde5a907589d34942cf5bfba7","sha512":"84f9032c39c6a16493b5f3de3e72ea5e23f675644926114e29586a1b0499beb7adb42661bd7fac51793507a4b44cf0f7568ab36acbeac094a3028e46f2b6ef73","ssdeep":"192:/RRkocmRXkeMJUw1Z8odOa9u0a2aTz6eU98PCA/IEnMidrG4Ptx5++kE0CDFr37f:a0E9IMid6a5jbpYCgEWrR4rHsGtCI","tlshash":"f653cedf96803a020b724bbde78165d26f36000537532b3dfa9c12ad92c945ac7e5ede","first_seen":"2025-11-06T09:51:11.230409Z","last_seen":"2026-09-23T11:25:47.184958Z","times_seen":29,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/frontend-reset.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.277Z","timestamp":1789671334277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/frontend-reset.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5m85jVjt5Agg6f0oodVAIt6ZrzlRwGmmie8LCBLaSiwWdKEbVSOyrszzJj%2Fhn2KlYZjdllGKvsiAUdo1V11UA80sP8spbGxMTCRthEeq92nBj6Bd3DmrqNR%2FSDqcM4zhi%2BafH0m5ulgxA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f3fba1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3788,"size_decoded":2002,"mime_type":"text/css","magic":"ASCII text, with very long lines (330)","md5":"b9e32ffbdb88cd0fe1bf928b91cd91ff","sha1":"acf8bc5b067d70b2eee9c1a9b41b9a817e4a5ad1","sha256":"642a177478e15dcad17fdb5298fd94491a234f87587328407d7ba6004637fc40","sha512":"131c3ff0b0ad272459a137cd93fb1567a63deeadff3ad24adb7e9f040a1088114df2048f238e17c60d74cc76b17eea064aa13f3bc08c14336f3b9a451495793d","ssdeep":"","tlshash":"1371432fb5721354741b4d7a238eaa907b28c077426bcd29fad46b24cf479162bc835f","first_seen":"2026-07-29T05:00:35.635225Z","last_seen":"2026-10-04T04:38:44.328745Z","times_seen":28,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/script.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.602Z","timestamp":1789671334602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/script.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6SzN7PIdjCMqMdO%2Fqq4dvNepYxloyUuaff4jtbB6BxUnzxrlq2BzIB0Kmo%2F0ZJATobGr3EOuLV0SUkxFPG9K9s3KIR0mYeFGHLwXQN4RLs%2B6rQBUKW9Nq9IaaaD993qdl%2BKvim6lPhQhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537148781a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23949,"size_decoded":6390,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1c4264c38628bf00a88e65efea1486bf","sha1":"f030f2f9cbacacf1ff98898b7052e2fe1f848744","sha256":"4459fbaba7c495fc0714926a3381a39d784bda91260b3782fe2bcc8b62beb624","sha512":"3e221ccee5c537b6c0ef2462d05354d65a9e5d9dbc7ec7ac86a641e00cd887ce0c34458936f9167736def4a842eaee48d4b31e877e7858739213261c250043a6","ssdeep":"192:HEleJMYfYWm4xCLJtnPVp567QSfGasqsHxyyhkYDd3dkCZTDZp9Enp4p9H5P1Um+:i4GJxPcGaSZZ32mqszb79ceJQrwTw5J","tlshash":"51b2635d3af21451453736bf4fafa0003269a053044bed583c8d5294ef98b2d7ea6bee","first_seen":"2026-09-17T18:49:29.939769Z","last_seen":"2026-09-17T18:56:43.981389Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-brands-400.woff2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.279Z","timestamp":1789671335279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53758a111a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqGKLXMLNHlzaCm3H0qoWNltyHiRuNh1vpY%2BVczJSBnzO%2FbB3c756WgBTz4i91o%2BFPHcDTD9dWTKKL1AjC4UsGqQJ1dEpUZVL0C9r6PPXytnTijJEsnlOlTUlBvtFL4TO%2FlGsbnPLh8i1Q%3D%3D\"}]}\r\nage: 444\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76736,"size_decoded":77491,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196","md5":"ed311c7a0ade9a75bb3ebf5a7670f31d","sha1":"0613c7ebba55ee47ef302c0f7766324692f899a7","sha256":"8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef","sha512":"6048e7ab94134b7200f0d5ed7fb8d577298d4831a2b3a4e0e5baa5c67468f77d4409314d63d34436ba6ba038c86faf87e46dacf98d311a74291b976fa39a9674","ssdeep":"1536:yVIKSdIKO0RtQIJwjZKd4jkC8Voun7L5XpeVQ+OEmdEu:SItm0RtQpAdofaluV99u","tlshash":"4d730196c3ca08de6994937ce960efdd1b0d4dc7aa72c7525e63c9a451c8ec83834b78","first_seen":"2023-04-05T17:41:32Z","last_seen":"2026-10-15T06:28:15.63466Z","times_seen":30117,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-chat-widget.css?v=3.0.78","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:39.274Z","timestamp":1789671339274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clientcdn.pushengage.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 15:28:31 GMT","end":"Sat, 12 Dec 2026 15:28:30 GMT"},"fingerprint":{"sha1":"BF:E7:FC:BD:2B:2C:D6:A4:AB:A6:8D:21:44:42:6F:DF:B1:BC:97:1C","sha256":"A7:BB:84:E3:15:7E:CB:EB:C6:E5:3F:BA:6C:B6:05:8D:9B:56:16:C9:D9:41:F4:27:65:8C:6C:8A:78:34:EE:4D"}}},"request":{"raw":"GET /sdks/pushengage-chat-widget.css?v=3.0.78 HTTP/1.1\r\nHost: clientcdn.pushengage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:39 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6016921\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31557600\r\ncontent-encoding: zstd\r\netag: W/\"4674-19f273645a2\"\r\nlast-modified: Fri, 03 Jul 2026 09:01:36 GMT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1187, 830\r\ncdn-cachedat: 09/13/2026 16:35:18\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 061dd1f936212506051bb1f8f1e3c790\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18036,"size_decoded":5046,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (18035)","md5":"ba43de0682e239d898354893f943e1f1","sha1":"01156fd44cdd502fbe465de74f21e84abfb91f07","sha256":"d324cf6dd532f1898334868309777865015e649c2efe3d9b2581c4f751bb4e73","sha512":"78f4adbc5b4d43c7c911879180fe3d1bb0399eb7fc81d36528520e8aa75f2b25e960cacd84260db1c432bdced615daa9c3d6f6979107a92ee64549af87e80a99","ssdeep":"384:w5eftP4VZLu1LnsNnwYqbjsNqiMXPolGdom27B4:woeIUxyPoloom272","tlshash":"1482b77055885126651bd3c2bbcc6b5f426cc541cf3b88beb1726632c8cf1db1ab4e6a","first_seen":"2026-03-12T06:22:25.743654Z","last_seen":"2026-09-17T18:56:43.9839Z","times_seen":21,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:39.285Z","timestamp":1789671339285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:45 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18938\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1443260\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N3IJBwVw6DGe9taVQBvkP6Tg5NSEjuetYhTrzYCXNkcCI5mFPcpkPLnnNu32NJOGVVmMBxjPfG6EB8agxKLN6VoD7g%2BeQqGTLY%2Fv94NGyW8Hs07PI7v6JIK8rP95RKYbXSKkwqxJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a3ca53b6cc8c5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103009,"size_decoded":19916,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-10-15T06:17:39.617118Z","times_seen":13984,"resource_available":true,"data":null}},"time_used":6495,"timings":{"blocked":0,"dns":3,"connect":2,"send":0,"wait":56,"receive":0,"ssl":6434},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/lib/lightgallery/css/lightgallery.min.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.491Z","timestamp":1789671334491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/lib/lightgallery/css/lightgallery.min.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U6%2B925NBdcNNcsxV0TIG23ZwSTnGMin6Sye5qBaO2AcouZ4%2FsDze4y%2FNHMk0y61g0s9cgEj1pWCa3kr8BJyAE1TDVPQhbiTf2tAaJugS95nuv8VxeGnzG20T%2FEZZO2MWtI4E2P4K55MgKg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370980b1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20458,"size_decoded":4313,"mime_type":"text/css","magic":"ASCII text, with very long lines (20458), with no line terminators","md5":"a94c4de3d8028fc56b148e8f66524e59","sha1":"1b7227237f9785c66062a4811508916518e4132c","sha256":"f2b7c76c9afe8eedce734f7d8c524c475c403eef024cf1d4f2e3f92775ff5406","sha512":"50c51a69a44afe2da2840ccdcab6a22d9cd3f1f79604363e94b9c19e1037f8c11f427e2368d24c18169dea7ca494899feddd0877a9ff25bd329ebed10a9c8d3d","ssdeep":"384:u7c/8PIPkzMzMzizBSDtbQrMD/Gvd5eUwUaBB/X5KdJG28l4ZtBo5vHz:V+IkgMd","tlshash":"1092513793032108b12fc70b93d99368657dc352f6325ddea72ee90787d369e103669a","first_seen":"2023-04-05T07:58:19Z","last_seen":"2026-10-14T16:06:31.883115Z","times_seen":2505,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/ionicons.min.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.496Z","timestamp":1789671334496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/lib/ionicons.min.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwaO%2BHBCY10qzGUg81dBVrDH3V8znNmK8T9zJw08A3LXpX4an49FPUSfW28VZui6JwMmnsZT2namKDe3xPbNJFp47QjPxoV0ueH02ZPB%2FaGvvr7Ywu5OYPKnzDtwIx1Uwo31JEP8EnkQ6Q%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca537098111a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51299,"size_decoded":8331,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50817)","md5":"17dea50210e071a2c4fb4833506e7151","sha1":"a119594a9abe759f4a1d6775bb871c45a32c2468","sha256":"a5005e6d8b252f0f4d8518df7ae51deeaa9639d2433bfdeafe5e0905c6e9fdbb","sha512":"ecc8b67b307663b03bfa689560d1b59c377b89d3fdaf1e35bee997cf4f331a164fa3edf099a5974f0c1bc3634a106fc4d48b642c561fe0b0e6e65c9092530a5e","ssdeep":"384:048WkhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:04OhhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"e333f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-05-16T20:43:46.208995Z","last_seen":"2026-09-20T17:47:21.047661Z","times_seen":66,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/menu/mega-menu.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.505Z","timestamp":1789671334505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/menu/mega-menu.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=84UYVvpSTNEOiMxIcSH1z2UimuuDYm74hSGq98zAwKraL1o%2BIoyQKapWKVy%2BrZHb2j5Dau%2B4GO2sh9lgpPc%2FDH3ng3TaAFnIZO6i4KNpRI3uWL0Fw8RDDHY1XieLTA0PX0QPL40iMQuSJQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370a81c1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":997,"size_decoded":1095,"mime_type":"text/css","magic":"ASCII text, with very long lines (954)","md5":"912415901c59f3883a1bed5e35c25675","sha1":"42e25f603d8c6942677d2904d80092d7b71f3200","sha256":"af13dc1dbf37d003dc64af24137f0c54a2d2291d8bc4a1c40de2b2c5a436923b","sha512":"cea496c486ec3ab8e5f77ca62c4fbd3337f87ec1a47546037d9fa8e13c7011e52c74cbf982e448b3b14fb8648ff9d9c3db4d9fa6e0716fd7f6a92907de2a30ae","ssdeep":"","tlshash":"f3117a7ac4f1d1a480ada31cd4dc66b8077cebf12bd889c637ea5e150d08b4e11f6587","first_seen":"2026-04-13T06:27:19.255387Z","last_seen":"2026-09-17T18:56:43.987397Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/qrcode.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.525Z","timestamp":1789671334525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/qrcode.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFdMsiny6taJfqq6%2B4lF%2BBVKmu%2Fq%2BVlrtcKi6phsD6bBJit9N1i%2Bj6dUCk75HXTlDPsAuwzClpizHR5EadJN%2FmkatYp3gLr2cAsXJ2STz26j%2FO7dxf6J7NOF8bJZ%2Bmq%2FA0us8Ot%2BbCYkAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370c8331a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33168,"size_decoded":11299,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3129)","md5":"663ef62276512200b83bd4076a4a039d","sha1":"9caa0d9a9ba4409a3f77540a1b15a7617aeb28e8","sha256":"3ee72de9f69c668f9567363a9358df955960bae9000d9ebd66414670f88e8735","sha512":"e6d35c0b135247e6b87377e233f735c558f211e212869860cf225881f628695b9a62fa55f764a3a00b56aec7a0838dd20c5cbc8300ba9a92dad09ca549bd56da","ssdeep":"384:7eJV0xV6jKC4z//wH2MGeWafAAdTRaysLh18s8wVLaX65YqzHHHsglI2MNURm1O9:6IxT3MRojrkGPG8JXW2uErCCc0uCyU","tlshash":"97e2f9d0ebad1256605ed498280e254efa7ca4335c48487fbe9cd5e15bfcb60a43eb34","first_seen":"2023-03-07T12:55:35Z","last_seen":"2026-10-15T06:06:12.270542Z","times_seen":7422,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-addon-pro/frontend/modules/customer_profile/resources/js/customer-profile.js?ver=9.5","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.534Z","timestamp":1789671334534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-addon-pro/frontend/modules/customer_profile/resources/js/customer-profile.js?ver=9.5 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2FpNqKs3LA9GvSlr6yoOMRL6iszcvGS8wigRUA3RxDFNm%2FFHHsZsnHxsa9KB1bhyNpv3rdkr3p8XPyg1Cr4mtPoLrWnI%2BreCDQOjzho%2FlshMsw6RnUGKbJRQqvhL6D7uIwX5pYf6XcvpHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370d83c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1331,"size_decoded":1136,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"068ce7705bc4a1a0f3372f7e0101667b","sha1":"3d36fcbdc54ad81e14b74e721cd959877d4a7161","sha256":"d490941981e9ea037c1117819e42cdd9316684bc523dd5d82a0c65fe5a6299d9","sha512":"99ac986e2b00c89010fcfe339514d5acc42d60a543f5ccde72e00fc080de0175d022b9ca3b3317bd26970f30fc922dc376be2a4f6a3ef6ea60a3cbc5711bbc1b","ssdeep":"","tlshash":"0421cc0972b7316050b3f8786bef4b2234142117480eaf103a1cd6c59f4089ff1b1cba","first_seen":"2023-03-07T01:18:48Z","last_seen":"2026-10-15T05:28:34.596042Z","times_seen":708,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/css/lightbox.min.css?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.549Z","timestamp":1789671334549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/css/lightbox.min.css?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nt9RIqAeb0%2FoiLBliwui%2BLXP2%2FyUJv49j1xaVvGpgYQQHD6tz892nRr6zJPUljTFkJ2pmH6F1nbykD3mYwXEsFOm8v5XL%2F7Ui6Hfdvmbv3ZErr2b%2FBYI4Konam%2FzBRiFHtyNJSse73v7iQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370f8481a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2375,"size_decoded":1509,"mime_type":"text/css","magic":"ASCII text, with very long lines (2375), with no line terminators","md5":"3c1feacaf53dccf92fb692bad1e14d45","sha1":"e044015f0e3a44bb061ff62106e9d6215b07be3e","sha256":"bb2a516ec02225c1489ccfe777223f247a7335ee83b543576961145843df306a","sha512":"c6d5771df60d6d05d2ff54758cfe7729b15c53d5978920354452b397985194981d3899b83b11c2598a6c926ea5374c69d17b4a1a901f5528696ef9451f730300","ssdeep":"","tlshash":"2241fb32b758b51bf437d24365d497d95638d193fa722faee288b131c68b1183c32e88","first_seen":"2024-12-31T15:48:52.715278Z","last_seen":"2026-10-14T12:44:53.214266Z","times_seen":946,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/spin.min.js?ver=2.0.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.562Z","timestamp":1789671334562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/assets/js/spin.min.js?ver=2.0.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSjPIzFLPEmspTRO8W%2BDOza%2FkJpnLxmF3ypDcPWrgr8hQ3vLn%2BqJogiNprtlBsGqbt3ZeBzdQceoipQP1VeMbni%2FZVB5E9vybgLv62tZlcTOAJ5%2Biob7cDkk8uudnYro2eml%2B5MpEMyKRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537108501a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4278,"size_decoded":2782,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4247), with CRLF line terminators","md5":"3e25b8f56cc63f0e6be2bbcd8f726e6a","sha1":"08f6b4b3b22d7e0df950f2e598e4f6486cf1f25c","sha256":"b9f9a432b70cb46ac75cd0c112ef9b2e81fbb1a18c4a17fcbd459436bab3a2a7","sha512":"38c1b7073f8c3256e23abd46e643c332742fc08bf553fa12fc1461a40a947d75b67b5e8df10845ad4adeb8ca59b36e6881479b60b347bf022efa0c831529528b","ssdeep":"96:Yr3zL4VHN+pMw1EEyjQU8vWeJWVPoDyfSUri:YrDL49N+phXW8vWv2","tlshash":"3d91b55cf3c1b15f66232195b5afc58f213814867c1e88a8d564d6c99e70d7820fbf9c","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-10-14T11:34:34.146271Z","times_seen":213,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/magnific-popup.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.588Z","timestamp":1789671334588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/js/magnific-popup.min.js?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fwgbRgNBIsRau6e8xjGUyZh6UrP%2BK1PsJE3NyZpfFJQZRvAUQDIJufunt%2FRFunCF4SjrIzlIeb9kE8I4cxvhoPEPfCesVuk%2BjicU1J0vvjmUZ7qxRzVNwx2LHu77n7tUIJmS%2FSql0EGNHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371286b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20031,"size_decoded":8409,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20030)","md5":"9fff3e6fa42c1650eac7aa1e1f7b7653","sha1":"01269a9d6dcb2f83d58aefc3101b9ef898b4cf19","sha256":"9c447f8aaf5858bcf3177c81596565825dadc9514d9a7abfc551d05e612271a2","sha512":"2062be98115602b11badb39d440c52cec37550ab9568896ff2f28126412d25bf9d0148284e05b3a9c8bf69acb2f00e92d54a005d4cb05db64961289f1886df3c","ssdeep":"384:CmVKik3bkupEfCqxTHQuyeiQotZyVqg/JBqjKo6vdSiMu5qWSZ9:CV/yJO/XyVqgBN9BSj","tlshash":"8792f868f166b26783e770b83c1f380836329912e806c4557956eda86cfded99127f3c","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-10T11:18:22.000349Z","times_seen":135,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/swiper.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.599Z","timestamp":1789671334599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/swiper.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEhz81BdAYd94Rm9oPyMj58NiVEI3ereOMnXBiZK0u3Pb0PwaOLHDncd%2BVMW3OcCRH8hWcKLA9zxfIXTNEYP0AzgoeMm8GFNVTjCfQNL7JZiF7iO2OpZMxcUGyttv6rQy5%2F4YAumzxZoUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537138741a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120705,"size_decoded":33938,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65274)","md5":"44de22616790b3d7173c3500d891fa23","sha1":"661c001aee47c2aa5421cecb6ba412d0bc35d4e6","sha256":"132a262dc2881ee4fe6974bdfd2be27f13fc630e1ab80951b3982250d9d1adcf","sha512":"8491138f0ee17bddaa101924ba0aa6f99cc1d7874728559d53182ba7be6321718fdd99d38c3cffaeafb3cd890ebb83a42c0fe57aacb8836bfeb6a1af292bfd13","ssdeep":"1536:yorVciYAwdCXrlnLtN+K8ExalQgYySj25RtYNluvpIXvH7WcWUwcPqYbaE8EtObq:qCXrDNFLxvOeluSfH7WcWUwcPquDHX","tlshash":"18c31949b35071d555e32256539ed201a3b62845b90ac1a831b2dcdbacbde8c03bfefd","first_seen":"2023-03-10T05:35:53Z","last_seen":"2026-10-04T11:53:47.279803Z","times_seen":235,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/07/rt-1.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.712Z","timestamp":1789671334712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/rt-1.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8b81a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 01 Jul 2025 20:07:06 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcINyZWUlMdvPWK1vj8pA5rMegX%2FI%2BV%2BW32AAd4xhCKZz2enO3GBQNNzDl9Ntqofz1xmIKQcdqwW4WDHpgWrThjX3XH8jf%2BCYrHlHwP1MBOGf0UtfuCi%2BOBYVwYbSuj8PXYqdo1g3fhpJw%3D%3D\"}]}\r\ncontent-length: 4576004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4576004,"size_decoded":4576779,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 28x28, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=7014, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=4676], progressive, precision 8, 10008x5560, components 3","md5":"f23b9d9951565bc75a8bd487b09e759c","sha1":"5f039be2330bd314340370228edf7e521e8efccc","sha256":"fcb4e721351bbdd3cc0c9ebbc118c9468991ed126305b80fed3cbf4174917ee2","sha512":"142128f084f71d7b49229a0d692f469c4261c391d1c59ea287dc14747cee38bc5572cbf658ea1009eefe0906f48d4897d7bc94a182775c74e9ab033bb6fffc51","ssdeep":"24576:X5qqXanbSS2WPDSFabO6/Bp2hAGquDuMc1p00b6+G2S4Af7jY+yHoR:Xg8abSS2WP2FabfjuDlYp0Zx2S4y","tlshash":"26253308bd427d1bc19c9931d8b6a75e0b1117d1d09002097a4f2d31ebfbe9aea8c79f","first_seen":"2026-09-17T18:49:29.96568Z","last_seen":"2026-09-17T18:56:43.99419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":687,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY00098-scaled.gif","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.723Z","timestamp":1789671334723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY00098-scaled.gif HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/gif\r\npriority: u=5,i\r\ncf-ray: a3ca537208c31a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 24 Jun 2025 19:26:58 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ogA79e5CT7Hj76UGzlqO7I2BKwtCC709eSuxZxhaIC3a5%2Famd1mrShGiEOqPSMtBaupdmIkbAEnzlEife0wMEAZoO3zf139%2BntaxPwm0RMy5wCtpsYy6ElG6%2B4Al4YhOO5yo82tkxNiZVw%3D%3D\"}]}\r\ncontent-length: 2576234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2576234,"size_decoded":2577004,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1707 x 2560","md5":"b3c4a9afa1eea0ad6501fc8ff3ce58d4","sha1":"20c9e3f0b87aede96cf44d67121c78ee84a8864d","sha256":"ccbd13aed3bae87cb66eab7ec74309ee56d92548ddf69c2ce5298694dd1ce913","sha512":"a87d57989ebfcd0ed017d06de89fc7e9d48e1325c53eb7685b71428b77251fddcd55636a1d79f3c7ed4d0c56e3e79b7c5b5afe746af2148159739a4120038a74","ssdeep":"24576:Tf5Zh47C1DkDnHTRhwImTEXZ/S6/HTUQXCdQQmoY+veKjpL1kn:TBbJtkHTIImYXHfTkQA9i","tlshash":"70253397e322a652b140c7bd87a8875ce7d4379c6ebe83120b19f813551a8269f35fc8","first_seen":"2026-09-17T18:49:29.958877Z","last_seen":"2026-09-17T18:56:43.994734Z","times_seen":2,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":541,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"web-sdk.pushengage.com/geo-details?sdkv=3.0.78\u0026swv=3.0.78","fqdn":"web-sdk.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"104.26.15.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.760Z","timestamp":1789671335760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pushengage.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 11 Sep 2026 20:26:37 GMT","end":"Thu, 10 Dec 2026 21:26:29 GMT"},"fingerprint":{"sha1":"39:4B:D7:48:81:E8:21:D0:8C:6D:72:91:B0:7D:2C:02:C6:6B:86:C7","sha256":"BF:00:8F:43:24:24:05:0D:99:52:EF:C7:E5:98:0B:F0:35:B4:67:A7:8C:8C:54:84:53:03:A8:DA:E3:45:DA:9A"}}},"request":{"raw":"GET /geo-details?sdkv=3.0.78\u0026swv=3.0.78 HTTP/1.1\r\nHost: web-sdk.pushengage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rooftopantalya.live/\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:39 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=3600\r\netag: W/\"6c-5usW4Kgm4ueCqAdHh15eJRTvMdY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlGuXbIwCB83RYpMmXujSOR1vhqWIjvFtI40lhz4%2FWKvpzHrYJ%2BsdKzkZ3z%2FsqFZUhO0QHxvC10nkKL8pXKfltVpcoIe9mwTVhQNqbVQLahc2eaytwCIOnXvko4BzxfCyhu5o%2BkeVeg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-apo-via: origin,host\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3ca538c0a860883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":108,"size_decoded":959,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9ebf7048408543eaaf10eb79d54c2837","sha1":"e6eb16e0a826e2e782a80747875e5e2514ef31d6","sha256":"02ed1051419c314ef7f4cc4ee5777fc38d3fcbd6e4fdcf03be8e3062bb355d63","sha512":"762d2d537b04615a60cffcaf7eb8bc11da0601fad3a0f27ad34e3dca8bc422d209dcab7dd6ad7427566e81f802f664f8a4b5a51f515ef59a22d7cb08e9c78343","ssdeep":"","tlshash":"ceb0122e18326d69481ce3c800de5050b3cb51da45cf9b0393ec6f65f5d41a4e5c0936","first_seen":"2026-06-17T22:53:40.957821Z","last_seen":"2026-09-17T18:56:43.995355Z","times_seen":45,"resource_available":true,"data":null}},"time_used":3479,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":360,"receive":0,"ssl":3112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-solid-900.ttf","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.890Z","timestamp":1789671335890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-solid-900.ttf HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca53795b661a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 440\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:14 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pxur%2Bl6w5jYma6mySixqEC85B%2B7giBcMFLR%2F71IzYtFbcZ26jALbxWSV7iV0A6gkGnvgexwnDvE0mZLryg4Mw9VlqirQyn%2B3TWPyln5%2BFmsTvrGVWxP52EuzZow%2B1l0%2B5QZD8JDllSFbrg%3D%3D\"}]}\r\ncontent-length: 78199\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":168176,"size_decoded":79022,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh, Font AwesomeFont Awesome 5 FreeSolidFont Awesome 5 Free SolidFont Awesome 5 Free SolidVersion 5.","md5":"132e9759d93e4eefd7cdde0d7a322991","sha1":"c445864a9646948e0d7ff44930ad732ee61427d8","sha256":"52f6d77a005727f4b92051119e76e9956b7ee71bf2c22385819afb1a86d28aa4","sha512":"63165601d5854dc3a54e28f358f0f13e728815408f2f2ef90d73eba0fc5366a7cac62ca63437c3ea3f7e474623e7da0eb81d41b37e21ccf049aed4a7c19b6c09","ssdeep":"3072:rsIjcmzxaKmzp2eM0WrczpnUJh1Va45VRIjdHmQtSCJ3X7XoxFsY8+N7R3+AzZnE:rsI90Kmi0WrczpnUJh1Va45VRIjdHmQB","tlshash":"01f33bbe774b4e6bc2670bbf4dd06a2233f05a10225373c36d4ea65f442bad849f0659","first_seen":"2023-09-22T07:55:54Z","last_seen":"2026-09-17T18:56:43.995892Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/cropped-rooftop-logo-32x32.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:36.071Z","timestamp":1789671336071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/cropped-rooftop-logo-32x32.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nCookie: PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:36 GMT\r\ncontent-type: image/jpeg\r\npriority: u=6,i=?0\r\ncf-ray: a3ca537a7bf01a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 442\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:13 GMT\r\nlast-modified: Tue, 24 Jun 2025 19:39:44 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKEADBCx7uMDkp1LKy%2FeTc2Gi9QRVdDELG4hmuHneit0M1ojOwK%2B1ayRnx%2BpqyaGbRRmSiA2av9wjud8U0Ynzo6AAOxzRE2fvJ9TI0h5NFVxjOVRjDsbxxSepvxXUnUUffSL%2BktnAv%2Bg8A%3D%3D\"}]}\r\ncontent-length: 1295\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1295,"size_decoded":2070,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"1b462d923244e7999979fd3221b2a2d7","sha1":"836929a4f33913ee59a9a3cd8d1bc660761d0ab3","sha256":"be60fe35b72ccb22e2d049196911e6824324ddc0689f5c947d6eb6d833cdc438","sha512":"024659d135430962786469e16bc2b6027f660ca3d63a45243dc92b29ace95817759bd692db257dee65d9932731d881e83944b10d3e5f8021bf5eab811b0890e0","ssdeep":"","tlshash":"cf21203e13ad13dce4089eb844651f6ae359bd319b8a9b2e96f2ca111b168c91c481db","first_seen":"2026-09-17T18:49:29.913137Z","last_seen":"2026-09-17T18:56:43.997243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/hammer.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.521Z","timestamp":1789671334521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/hammer.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wd0MgmJc4obI5IVLsuragZODyeAQhZSL%2BXlerMEyXuUN9weKRSF4ALkS2aiTeG%2BB0RnAHn8o6KoT5AImnWT81cKVPSl5EBGwvG7qYvnMcEKkEB6x2W05jpweuttbXmkRyWGarBaLZx7%2Bpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370c8311a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19721,"size_decoded":7998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19579)","md5":"ffc8426e73302e88a868077d0388a617","sha1":"ccc9e18b0bdb0dc4f3349b1fd575ac5ab369cc8c","sha256":"89a1a9c08abfb02f902a3c60be7bfc6064f4db0e7755f5dad68cb0b0fcf8bf59","sha512":"62f17e07430ae7ddf0414fc37f3f21859c6257de7a3d7793d9032803e8bb497cb49ea2c2adee6b3b398af8ab36f7cacc940546803747f9df967f4882540dab93","ssdeep":"384:MraovQkoTNISYtsryY3Jgwb/9t3qwUCn9C2HDcZPtr2:8aovQkeISYt7art3qwUC9C2HcP8","tlshash":"1392c68673c77281969720a1b06f010b613b8c96a4cd4968b4bdded17eb953c927bf3c","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.269835Z","times_seen":1430,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/css/shortcodes.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.264Z","timestamp":1789671334264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/css/shortcodes.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LU%2B4ONmeRp8twEeNgFOpY0mAwtsgQpI8PT64GLld5PgIsXMbdXAUc0TnwwOyXhV6bcptxMMzCQa1T0vzBTGvtLRJBEFuHGv7azfV3%2BT9XJvoLBw8ZBo4%2BHPpXBPKl85b8%2BvHnfpr4%2Fbzgw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f2fb01a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12092,"size_decoded":2268,"mime_type":"text/css","magic":"ASCII text, with very long lines (12048)","md5":"3da4b6c6c15e41e6ac5d729dda0ec6a6","sha1":"58d513ac4e3e024622fa5991f66c0fb96f3e920e","sha256":"82e49714f10a4c508d77ad2f67e82a397ca77c18064fcfcdbcea851ed739cf60","sha512":"9c13c10105af15c2bbbe4e846d98f021c7b524573a670c0575c654015ef13dbd3233c49894ad77cd9dee344593ce4bb9a20b27b8db5284f04c25fe227f682471","ssdeep":"192:IeX2be7Tcyz5C+4A11cOLw23YYavx/Z+nj+HvHFqHVUH7HfHmz/m0MHQL:IFgC+4C1cO023YYavx/ZG2HFqHVUH7Hg","tlshash":"7242bea35a6a3f1ac8679f38e3c951682d7dd5f2ee130cef7a551f060346a5400f3a86","first_seen":"2023-05-06T10:25:26Z","last_seen":"2026-10-10T11:18:22.05129Z","times_seen":132,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.495Z","timestamp":1789671334495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYUkR1yuaQUtE7t5hwFbTdGhGEOm6hPYq6Kf5xdmT5NB5d2jnDtJClMHTO4k96kKl6DNcnSRaKv9FbV4g8cWGftkPtp1PDNpWmDNokXgYqQfoAfo2rEtNc9F6kkFJCFcHAd1Ngsv4M9y8g%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca537098101a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46930,"size_decoded":10598,"mime_type":"text/css","magic":"ASCII text, with very long lines (46750)","md5":"af23b478869622f5b685c30dc7d0f94c","sha1":"ef9074582b279ab257e412aa2a88c2265da13579","sha256":"7c6eb7e3d724526fc853d423dbc700d322634b6c47813fd0b0d068f92ee54240","sha512":"b29c8a8817dd9cc31cab9ff7112ebbbb5aa58391a7232ec48c9b833c8e3766f7b20edfa37139de568ec769668417ebc13230a542e2ce6db959ea3f767b0ae651","ssdeep":"768:m31EUdlQ62oU2lfQkOt/rMdj3RScMxB8/q:PUdC62oLo35sINAS","tlshash":"27230cb8e54c41c6a731c44fff82b2b861baf73ce5854d95f00e691c2ad26a811c5fb9","first_seen":"2026-04-13T06:27:19.281639Z","last_seen":"2026-09-17T18:56:43.999868Z","times_seen":4,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/linea_basic.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.498Z","timestamp":1789671334498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/lib/linea_basic.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dGdwn8ky6qRkyGIih%2BT%2FTgn9LdgbXy6zzloBDrpqFeCm%2BkBNVGDQSDPcy1CYc2GjEMYzEuIH%2BVHRmNuKsoTEulMWBtWJcNMUDb9Ih%2B1vXqsqJlBQuUtskelRrbPuGTGW9OCrUNkm26l%2BXA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca537098131a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6384,"size_decoded":1982,"mime_type":"text/css","magic":"ASCII text, with very long lines (6384), with no line terminators","md5":"c18d3c6a5aa55ecb64b611539791b9b4","sha1":"c70cc15f14b3cacce92f313632a9d9deb57788f2","sha256":"587f1bcc1f8f2c89d62644d7f7bd35861c1a3766e42e7f386e435ff7e4dc7192","sha512":"b8d496969941258fba0bc744f12f7f54c2408864f1127083e2e152454b91340a1d4cffd248fe5b6f93ef351410b1e016d86b8e6adddbef7ad44664837383dcf1","ssdeep":"48:iUPGDwdfb6t+G9MJb0RO6jWV3dO3NvupI9XJLBfWGM5xoeFtd3BWidQVBOxdpwPC:i4b6tD9MB0RO6jWNcTRxM5xNtCpfm/","tlshash":"d6d1cba9d00e53efb322e5868381a358dc58f9219ee14f53f10f591dbaf1f558286e38","first_seen":"2026-04-13T06:27:19.202345Z","last_seen":"2026-09-17T18:56:44.000673Z","times_seen":6,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/footer.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.503Z","timestamp":1789671334503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/footer.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJxfjm%2BpnK4AHuat6EnHRN7rfhaD%2BNwcF0QFTOJTv9KfBAeMc1eW178F1ptfWWT6jKihKEeLNqJAB%2BGVgf7hr97WaXrbG4zhKLwPv58YJbqUvAsHEMsYDgrJ0nV6D0qsxGz0q2lSLsfwCw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370a8171a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10247,"size_decoded":2435,"mime_type":"text/css","magic":"ASCII text","md5":"6afa512c4077599a8030d5a71c4ae994","sha1":"e97c0dc4dc73340d32561bbc8982c1125d5ec33e","sha256":"ae25631ceb757603028777e9d28bd787e995f03454e9c84a7481f1c4f71aeae5","sha512":"e6c3f05e5cf7868fdbaa9b49d45e441592f9743b7502d2255cff89e14a87d803d44e766f575e3180e14b6eaf469592e4d0ab14b4d48e45f2b09a59a3d20af0e9","ssdeep":"192:mrN1iNPx0XHyCkZPVlzOIhKdHUKESqNK6K7KTNKrKZP5SOoKsSRVaXaTNKpSCXSd:qmxlkDJFP2TwGCUheqTwsBhVYoYo7oo/","tlshash":"cc228c6b7ab247192413cd0937edc354a6349823944fdbbc79aed700cf4b2e94295a8f","first_seen":"2026-04-13T06:27:19.245543Z","last_seen":"2026-09-17T18:56:44.001461Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/creame-whatsapp-me/public/css/joinchat.min.css?ver=6.3.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.622Z","timestamp":1789671334622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/creame-whatsapp-me/public/css/joinchat.min.css?ver=6.3.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uet%2Bl87iCGo8i7wlFMCGT%2BSb931lm8RLeA6RgBVXnpsUz3DnAaiJI5FL3NvtqHRM4JFgtx5M5smdgl4bjTxSibX9BzJ2PG6U69JIpIKFC4TD9MAxrKsy7AX2eIFcbWXeO%2B2v0Y9S%2FBG90g%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca537168911a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:17:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20935,"size_decoded":6003,"mime_type":"text/css","magic":"ASCII text, with very long lines (20935), with no line terminators","md5":"f9a6c7e10c20653840df48d7c1b8302a","sha1":"58915a07689ec806fb20759ce059478a6c29dd1a","sha256":"ab8d1d69a39a2528dc78b9b4521383504f8d66588133793fc4bada48531d18cf","sha512":"e836bf7db8df691f4828c9dfd9380841b4178c885d4e4cba6372ef60b71bdfabaecc3933a90429f85d0a709e078dd5ae30dcd3d91684e6e81f79ab9fee712053","ssdeep":"384:pSOaKz0xZfkkMYa3WxSdgfhFkt87sumdBG0RUAFLdky:cDq0r8kMR3AUWFkt87sumdcnsLdky","tlshash":"3d9294e0c744393d661bf162db85dafc51ac9a52a9121afdac01f27847c3af24fb2d14","first_seen":"2026-07-09T17:38:06.123645Z","last_seen":"2026-10-14T22:22:45.0361Z","times_seen":563,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/ionicons.ttf?v=2.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.276Z","timestamp":1789671335276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/ionicons.ttf?v=2.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/ionicons.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca53757a0f1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 443\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GiDy7HDOMNo2aBHCui7%2BTu7qvAQlZ%2F4Xsmthe2XEK%2F4hjsJl%2BGResmV0lJppB7usBoNrGU7JsfiWfjR3a5HOaerz4pVkbQe2M5yhkLVpcNlxtwjid8p7xS6OM25JEzvmBQtrsOa1kCcx9A%3D%3D\"}]}\r\ncontent-length: 104496\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":188508,"size_decoded":105314,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh","md5":"24712f6c47821394fba7942fbb52c3b2","sha1":"1b0a0de084905946a20300ca8c354865dec46764","sha256":"2ba7f20b1d8990e17a47fe3d88e4c766628aaa2baf1dd30fca0a0db59836f5f9","sha512":"e61d99095429861d335b7f1fa720d63ce3a5e7879aad0c02937b7a8367b8107e4b874637b3fa4f5590f8f3e5a68ad8c37d646e6cb315815af8b962dee1cf2777","ssdeep":"3072:ZevphGNEm96ksZlU9WZEwXnwY3Xv8KLyVT8s+mW0uu2r9FsysMgWU/:ZBEm9Z26kXWb+mN+cpX/","tlshash":"2f048e0bf7cfda4bd125a67e44f69b1319a8d0106e2353dbebce364994e76c40c6a0c9","first_seen":"2023-04-05T10:17:13Z","last_seen":"2026-10-15T06:44:41.371276Z","times_seen":13859,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/close.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.772Z","timestamp":1789671335772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/images/close.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/css/lightbox.min.css?ver=8.2\r\nCookie: PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a3ca53789b301a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 445\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mRE5wmnnLQVSAtxmV8MqINtBW2WlJtBc%2BHdLqFrNzrYhBziC6JirrRpTLt4scJ0r92PCKn4MCDw8K43wIbcFuD1eGAsRJvO8JVJa8m%2BOAh3XJE3j5roLZIhWwSLNXiZx4V%2F8KvwyO0R%2BEw%3D%3D\"}]}\r\ncontent-length: 280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":1048,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit colormap, non-interlaced","md5":"d9d2d0b1308cb694aa8116915592e2a9","sha1":"3ca48361cfe0e41163023d03c26296f375bb3eac","sha256":"5d62e6c90005bfb71f6abb440f9e4753681cb23bbd5e60477ab6f442d2f0e69c","sha512":"ae70339ec05f19d698a319cc265da583814711acbefd81ddcb7d6d5e59934b78b289e5a55c666af62216a8f9ce5de60afd6f41c54ef7e4ea569d5458cef78af5","ssdeep":"","tlshash":"14d02bde1679ec69ec90667161128210d83778517264a145704fa125944b685f515367","first_seen":"2023-04-05T16:20:30Z","last_seen":"2026-10-15T06:43:48.22173Z","times_seen":24065,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/magnific-popup.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.490Z","timestamp":1789671334490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/lib/magnific-popup.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiZ0ly9IdP0KGCQw9tbJdcGxb%2BXc75%2FS%2FNPuggyZ5nnqB9SbG4VzoRJKmsZ1B7BlJWnEKcwssBiFpPM4xi4D6z86so3uxp381Hzx7HrkrbkyZRdw%2BJqMqjGql9QTEtnSEyKBMXFACl41aA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370980a1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6418,"size_decoded":2395,"mime_type":"text/css","magic":"ASCII text, with very long lines (6418), with no line terminators","md5":"6ef0a9bf629bd27c49fe7737b40154d3","sha1":"c21ac93b1641cda82de8f5637b15edbc75e8822a","sha256":"0e0784930ca0cddb57d53a0cc114a2e0c13a592051ecd80308721775e7b2d52c","sha512":"adf7a432c397b067e26733ed8445ffc9742c436c7d2f85a48a253701f81b012bc984290478ff511b3753352dd9c7defa539ee082c0cc3c525721350d99d62fc9","ssdeep":"96:V+UcKSCO7EWP9U3JjIjZDXHZ39d5Z9M3sBUc/Dm5Mk97UcCWhnTWW:VQCO7EWP9U3pIjZDXZ39d5HqMk9WWh5","tlshash":"4dd163b3a641317ad632de11a6c39b9c3227a273f67346dfdf869918c6cf48c1525344","first_seen":"2023-05-06T10:25:26Z","last_seen":"2026-10-14T07:36:36.699099Z","times_seen":135,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/jquery.hammer.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.522Z","timestamp":1789671334522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/jquery.hammer.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZncBK10Ie3jaZL2P8oL5y1MCtR%2F6lUwK%2BrWmim8ibBupRJtNmCbLHCeOv8jBXXzwgh%2FzwiUb8NICORHMsBIKKk5BfZZNZbbKNr3yERRLXT0jFEHNb6a264OmglZ9DbIUFC7ycFmse53qQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370c8321a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":1056,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0655fbe8768d8c3b9afe31fbdc23f1a5","sha1":"878fcf75f300199387ffa723241238acd74ccf24","sha256":"6b7718a2c0e72e3f07e37eecf8c033fdbc2922a8016707299b0d26db76280aa2","sha512":"70860f93df5b3911cd3b7c7fbfa65e1cd188c2e98c9d24d3b2eb2d00c50c66f6caae2e27ee1d16d29ea9317f30c1391305b041f9e10ed618e904891209b3cb2a","ssdeep":"","tlshash":"b01132683bdba11051f735bc876f40c97139e10b540a9a923a8c57f21fad5782ba2b9c","first_seen":"2023-03-07T01:10:50Z","last_seen":"2026-10-15T06:06:12.239305Z","times_seen":1459,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/css/vc_carousel.min.css?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.547Z","timestamp":1789671334547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/css/vc_carousel.min.css?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUu5mSKLlyFy8ZESclvKY1SQ892Cdc8253GcaGKuFAAe%2B%2FqZgZHEsYsJm98w8dCrryHPbPiaQMhPwd3zIDSL5ihFleJ%2BOahoq2f%2BjURFbIMBgyW2cJqU6uhnjA5oQCl%2BGsaxxfTz%2BTGYKg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e8461a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10282,"size_decoded":2104,"mime_type":"text/css","magic":"ASCII text, with very long lines (10282), with no line terminators","md5":"bca954eda458c6c5e71eaf5e28a5d3a3","sha1":"7f51605ccaf7217f6e99983dc14dad4dbebc616e","sha256":"77e22e987d69748945ab73234a45b57cdb4967d689a7614357e08d077de8efb6","sha512":"4a9277a2620ae9c0b50754c6723bcb04fabeb1eeaa7e16e88c132113de5d06d6338a1dcb11ce193ba841bfccf05da1fdfc486fa7d00ddfa534d3a4feed3ed01e","ssdeep":"96:pkCITExtcOhdRKEKDJ7a/kCOswtrOgURK3KuJWkfP:zP7RTmay0jR6qkfP","tlshash":"0822352036cafd665c1293106188f14bbd1f5e32e5825eb9cafbe5994b9708f002ef4d","first_seen":"2024-08-21T02:52:52Z","last_seen":"2026-10-15T03:18:47.135047Z","times_seen":390,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.568Z","timestamp":1789671334568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HBK3jgRJes9nqF39vomY4ixFun3KjeI5Te2ub9tc8Z2lpnZ5ZLs9gs67BTu5iWVKp5%2BsvrbK%2FB3%2BBQOSs05FjB8iMLr6mPlhJQfuyBIunQxj19gP8eDs2rU%2FA1YtxfhJoGXVzhQ6uLv8DQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537108581a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5107,"size_decoded":2551,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-10-15T06:36:00.111819Z","times_seen":30909,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/foxlazy.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.601Z","timestamp":1789671334601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/foxlazy.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PsBzvOlZzEcaO4ss07EaaktUWYqpSJr4JKqP1iU66XSyHfAqD2eYO0dg%2F8AqHYlEEQqNvaWEDdLDsiYWXBgthp%2BmUBwhF9l1yLDKi71FE7VqdRmbM5dWcxJVDeWChR5jqam1GGehCKwsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537148771a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":997,"size_decoded":1128,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (997), with no line terminators","md5":"a152415b97c3b5883670f09a56d4479c","sha1":"a42c7a1c0ad50f73b8866f28e8c15b7dc8fe9219","sha256":"d1b2964fc77e76b2d52117934e4a02778ceb4f385dceec26f4a7a11e3eb7ca24","sha512":"ddaba30321114f474316c57e98c852b52d3e928266fd1096bf1fbddcb722d399536305e35e7a1bba0f7fbafc10ea037bc3b2395f2ce76a685bbe9a3eebc29ed0","ssdeep":"","tlshash":"02112539320139634ff5f66aa15f1748143e7a274147c122f10ee8e95ef4a243933d9d","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-14T07:36:36.526204Z","times_seen":167,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v6.7.2/webfonts/fa-solid-900.woff2","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.739Z","timestamp":1789671335739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://use.fontawesome.com/releases/v6.7.2/css/all.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158220\r\netag: \"4a6591ab5460ae5cbff1ecbd6e52193a\"\r\nlast-modified: Mon, 16 Dec 2024 15:34:41 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 149583\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOA0AIouONyYsWzEVtjnc5AiXJjvm%2B5b0gApZw1Eli%2BrXgtRG8EQRjS6U6a3XgooeUTts4gZMzP8Hyf2LQVDPdySbIpZfiCe3rm5QW5zpxsIR%2FA6Be%2FyHyUlPJ1I6IRY64cHpLsr\"}]}\r\ncf-ray: a3ca53786e15b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158220,"size_decoded":158943,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-10-15T07:10:28.642577Z","times_seen":38093,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.840Z","timestamp":1789671335840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53790b521a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kV2SJHEBXewNTyLqWERqwUQpUR1Ozj%2FPT7UoPBjFJTOIv2h2LwkeJWgrbUzwCoYtLKFCmE%2BT5ammO1ZDicikheTRFpwtgwoPpQ5hz5VMeuHhO3Tejftq1qwcqapi2IrtP1ogtiNkFRvTkg%3D%3D\"}]}\r\nage: 441\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:14 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":62472,"size_decoded":63223,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62472, version 1.0","md5":"b75b4bfe0d58faeced5006c785eaae23","sha1":"92da6e3c7121e21cdfde25ef08797a3937a683e1","sha256":"5c7df99df232586111917083a85aa31b82ee29e48ca2990e13fae0c0663a923f","sha512":"34abbe454074176ec90d90dd8125339eec1348943ef77c8529c5d0db9df593802a47f6a52cea37e2ed1f7da609893645b561ac0bc0054a06d81d367d2c702ccf","ssdeep":"1536:mt3IPiBbeBXYTcV2uesj65wJ6z4lhTg3Wqo9XsVEV:mNIMbeBIpE65wDlpgO9XsVEV","tlshash":"52530259247d3b87ed7e78c7737242df3490344a6b44c5fa631c705fc848aa6ad1a12d","first_seen":"2023-04-05T15:39:33Z","last_seen":"2026-10-15T05:59:15.496133Z","times_seen":7878,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-addon-pro/frontend/modules/customer_profile/resources/css/customer-profile.css?ver=9.5","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.293Z","timestamp":1789671334293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-addon-pro/frontend/modules/customer_profile/resources/css/customer-profile.css?ver=9.5 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Y2JbaQX5ySAeko4VT5Rk0OyoM8Wl1fi8JqJRLWl8QtSKAKf%2BGtYkAnzQwIBcb8MXfK2vg9PMVkWQFPdRpBhLbPXZryyAgK6QoW%2FBTns8ENNFc9s%2FPyvcQ72IgkRfGld32Kq2TlmVuxiYg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f5fca1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Wed, 07 Jan 2026 20:09:08 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1568,"size_decoded":1218,"mime_type":"text/css","magic":"ASCII text","md5":"578d351da9a9417be769b8b61bbf5ba8","sha1":"29df75607aeefbc0dd5d980ddf382d21f19c8fca","sha256":"e0e985ef257f56597c84a593f67a9087addc5ccec7b10e66d71d6887a6102676","sha512":"20dffe191ae749235e22a9c4aa766430780952f8e9a6a8cc694cb80d4ee9ddf33980359cd8816b471ff7a6d2bcb3a01c3c3ae31b0b927c352f17cf163030431c","ssdeep":"","tlshash":"60316d56feb314027069c939779ef7b6af2e9113864bdc34378032780f0659e4560999","first_seen":"2023-04-08T15:41:01Z","last_seen":"2026-10-15T05:28:34.588361Z","times_seen":691,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/animate.css/animate.min.css?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.541Z","timestamp":1789671334541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/animate.css/animate.min.css?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVUulnW5wg9dgHSYJAQw2sAFP8rqM%2B%2BHP%2F0QKAASB3mZQsDrORj3k%2FO09I5XURws0O0jXLARKnyqe1KrQUurhpF86VdIE5%2FG6TYZIhXZvXI0%2BQQBc3PVQvktYr99VxhJ1m%2F4zgZOtCGCZw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e8401a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":58129,"size_decoded":4810,"mime_type":"text/css","magic":"ASCII text, with very long lines (57919)","md5":"bc1a6a99c43f5ccc97d2d350bde13f74","sha1":"29a6f54569c193ffd6116f03be3eb42359c60eb7","sha256":"3c770e90f98eb21b0c042fafb49755af93306fbaf42e449524f94fae9fc83295","sha512":"76826b0bfa1c53c546551c773bdf7cd7ed9a6149f77ee5955afa8b8b553eb40d8c595cecc3e3552aad4fac4345d3733e4d804ff763e7614957147d595b41692f","ssdeep":"1536:UkZHPqwQ1OAPkWDL32ye5trKem0OTI6j3rwzlr2c:UkZywQ1OAPkWDL32ye5trKem0OTU","tlshash":"de43f8af5891229991270f66c7cc5ea8873dc66314721cde33866c4b8b46fde33ca617","first_seen":"2023-04-06T01:48:05Z","last_seen":"2026-10-15T04:36:11.377888Z","times_seen":16387,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/reflector-plugins/shortcodes/assets/css/banner_slider.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.545Z","timestamp":1789671334545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/reflector-plugins/shortcodes/assets/css/banner_slider.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlnoajOambxGx2oVF0skqymaZSPFv9Jj%2FTYY5b0QUbEch92TYLUx0MyS%2BN8wt8lT6HNsTvzl%2FafJ4KSsZWHvKVfz9P5IUl0rh6selTWDFWXBfMaemiZR%2BgErOSnOcV4p7T%2Bk8XUc3ZTdSQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e8431a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12088,"size_decoded":2597,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"c1b67d90f12a1bce883a8825dcaa94c1","sha1":"cf7d6f6d2b5a7fc5414feee54c977dd4e5465dd5","sha256":"0b3bedc7c8edd943800f0a4511e09bfcb7242e95889b284a082e4887bccdd9a5","sha512":"9c956ff61498008bf7509ceef5ca9df958d96efd7179b06ac789df53614041fc5d25175b38ba5001a19d30b1af302bd317f840ed8d0860be680db7a351f403c9","ssdeep":"96:DnCVvnzB0ETqCfnapJM3Omi0ezZsnPVVAuuU4/PLLUpeTVCnlp6YOrMrwpmpqps5:GFwJM3OJ0wuV63LTVCnjTrChCK1aR","tlshash":"cc42ce9e2ba0145861275b1d3f6a4ea8d7dc980bd50bed6df2c06028ee991dc13a5bcc","first_seen":"2026-09-17T18:49:29.829191Z","last_seen":"2026-09-17T18:56:44.008848Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.610Z","timestamp":1789671334610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6bQIZZ%2Fsc7MAocToEwX5sumOvd17M9m60BydLT8aopbye%2FNqQ8WXGliR8ajofG%2FtpIGTD9JVTchJK5lsAYKJeXZVaZJ%2Bbpan5dz02sp4yaffAL4d7M9SXuw8NyPfMDMyYoE6MiSMOQn12Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537158851a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17471,"size_decoded":6154,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17471), with no line terminators","md5":"aeac20526e21c2dbb9351f4be1090567","sha1":"cf643551f008903303f5e76a783661dacde93dff","sha256":"2196d9f8b32a0eda02e6be95e8d5892926c0c2ef84fb726fb9a8ceeca64c9eba","sha512":"705639a729d29aff5f84075619e3e2acde745b9c92c83a3114875e8bf54e8a72b7e2b04af409b74bdf15a711debd39a6c15385b6aa54ccf3d3632ffe427ec44e","ssdeep":"384:r8xD4MTE3f70738ig7QOKsxbRNEXSHPtDPzlR6aZW0I1:r8xD4F3z073rg7P2XSHPtDPzlkao0I1","tlshash":"07726669795470f512b32727b1377b1a7023383a958a1110251adcb83ebfd8f1626fee","first_seen":"2024-12-18T07:33:33.797305Z","last_seen":"2026-10-15T04:36:12.37649Z","times_seen":5796,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-sdk-style.css?v=3.0.78","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.637Z","timestamp":1789671335637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clientcdn.pushengage.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 15:28:31 GMT","end":"Sat, 12 Dec 2026 15:28:30 GMT"},"fingerprint":{"sha1":"BF:E7:FC:BD:2B:2C:D6:A4:AB:A6:8D:21:44:42:6F:DF:B1:BC:97:1C","sha256":"A7:BB:84:E3:15:7E:CB:EB:C6:E5:3F:BA:6C:B6:05:8D:9B:56:16:C9:D9:41:F4:27:65:8C:6C:8A:78:34:EE:4D"}}},"request":{"raw":"GET /sdks/pushengage-sdk-style.css?v=3.0.78 HTTP/1.1\r\nHost: clientcdn.pushengage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6016921\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31557600\r\ncontent-encoding: zstd\r\netag: W/\"1fa06-19f2729a3f7\"\r\nlast-modified: Fri, 03 Jul 2026 08:47:48 GMT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1319, 830\r\ncdn-cachedat: 09/13/2026 16:26:45\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0c6be2089ba61dcd3c4498eb1a3a7f52\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":129542,"size_decoded":11454,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4d9440d963f31df317c55a500829c6b3","sha1":"38168f8b201f61eea634c340e52803c145ba1f7b","sha256":"0f71e62ee95c3ef876069553e7f9de0dafc9baa6706608bef63e80577e8de82a","sha512":"dae88dc29eb371a9843e1a19a8d454ead5c3d0b02fae93fa4caf4384144d87f09ed065594fbb660edb4d13cccc1ae0e9a3d4b9e0c015e75cf0f32560e2b076c3","ssdeep":"768:PKT/Eqoz/513/3V3n3/fhf5faf1fMfTfdfif4f6fUfDmfLf1Rf1vf1Rf14f1Jf1V:oZC","tlshash":"edc38860dc41063cb3f617697cf3a418203a8e92d1536c9adbd17924a296ffadf5322c","first_seen":"2026-07-06T20:27:53.070297Z","last_seen":"2026-10-14T10:54:34.147922Z","times_seen":280,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":28,"connect":2,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/sdks/pushengage-subscription.js?v=3.0.78","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.719Z","timestamp":1789671335719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clientcdn.pushengage.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 15:28:31 GMT","end":"Sat, 12 Dec 2026 15:28:30 GMT"},"fingerprint":{"sha1":"BF:E7:FC:BD:2B:2C:D6:A4:AB:A6:8D:21:44:42:6F:DF:B1:BC:97:1C","sha256":"A7:BB:84:E3:15:7E:CB:EB:C6:E5:3F:BA:6C:B6:05:8D:9B:56:16:C9:D9:41:F4:27:65:8C:6C:8A:78:34:EE:4D"}}},"request":{"raw":"GET /sdks/pushengage-subscription.js?v=3.0.78 HTTP/1.1\r\nHost: clientcdn.pushengage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6016921\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31557600\r\ncontent-encoding: zstd\r\netag: W/\"4967d-1a07b2c091d\"\r\nlast-modified: Mon, 07 Sep 2026 09:21:18 GMT\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 951, 830\r\ncdn-cachedat: 09/13/2026 16:26:47\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e2257074aeaea93589385d326a24e0e5\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":300669,"size_decoded":68854,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"06c372452d23776b1efe97a855a3a9a5","sha1":"9f17aa65a67924ee2b578568145af8bad90f84d2","sha256":"c24b90109b429f51d0f8fe87bb7232406e64c239bafe817be08d53ccf5c081e0","sha512":"d40d8e4cbce950795f6f1b0275ffd6ae66c5a009a5d51c2ff3c78672f89c476ba37e66c21bdeeda273ae2bff92f94391ff939cdbd7189ef5fc35f1239a0c62a3","ssdeep":"3072:p6+98BDWY9c+N2mj/Me5j2cTYUwjvRVXgkBg:o+CkY6+Jj/Me5jBIHXe","tlshash":"7a545c16fe81f47006d721e59c77201893397a1cb412a850bbeecd82ab45fceda2776d","first_seen":"2026-09-07T17:22:21.844279Z","last_seen":"2026-10-14T10:54:34.190057Z","times_seen":142,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY07659-copy-copy.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.719Z","timestamp":1789671334719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY07659-copy-copy.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8be1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Sun, 10 Aug 2025 12:03:28 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYJo9TyM0YR88pis62Pb3JwhC7FzTTnDuGrGKbqrK7fkqGQ4qxKhp2G%2FU%2BXvFwtJ6llKxu1Ls1eeMbAymn8lCQNaCfJV45l8OI5VJioj97JllFV%2FZxw1o%2Bi1KEYaHWMgamF6VYxrhRkfWQ%3D%3D\"}]}\r\ncontent-length: 4143051\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4143051,"size_decoded":4143824,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=6256, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=5004], baseline, precision 8, 5746x8450, components 3","md5":"4ae989c43a6e07e652144c0c0ad5ea7a","sha1":"9355336c548a8a6dfe43cff3fcf545f1e6b4f870","sha256":"28003533f39303f744f9f74264c0493a7578debfa7a5875d07321519b27c13bf","sha512":"85da1e4de69402be5328c174d2d7c6b7a448ffe469e52410a678f31ab57c0ba4bb1203ece1c3f1f1c4f55e8ac349175d9588f931ecc3eb71117dac19f5cec7cf","ssdeep":"24576:DQVYqM6T+6GEu4UO7Z6d2hFlgTdvpCtBWFD1QE:MHMX6Du4UO7ZnGLRD1QE","tlshash":"b72523219e451dc1d00a3db7a44877f65b324bb54f619943fc2c6c92bb16d3bacbd2a0","first_seen":"2026-09-17T18:49:29.860289Z","last_seen":"2026-09-17T18:56:44.010908Z","times_seen":2,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":694,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY03286-copy-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.724Z","timestamp":1789671334724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY03286-copy-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca537208c61a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Sat, 18 Oct 2025 19:31:38 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2V5VjWaPVJLcJcrzK3oxgTef5zZFuYvnRLUgZq4%2FhQVkMFs8yTk27kXqJ8y2CsKcuwbP7YAdf5sxSEWMi7BjUedUiHVeVk4GVJKz2XQ3i54hbr2IrZcFfgaFFSpwEjKXxDqtAlI%2B9734dw%3D%3D\"}]}\r\ncontent-length: 649180\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":649180,"size_decoded":649948,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, xresolution=136, yresolution=144, resolutionunit=2, software=Adobe Photoshop 26.8 (Windows), datetime=2025:09:25 23:33:07], baseline, precision 8, 1707x2560, components 3","md5":"f11778439b1c8d2396bf34c4928d179c","sha1":"c6d1d1573a6a92e89105c6a57eeef8e00e615d8b","sha256":"24ca62ce1f0f12d9deab8e14c76932de9edd627384edda9d9832574834fae4db","sha512":"4755ea1314bb985650d0fd5806299c77b4607142c7bf853c89bea15b0a2581f1abbab1d4bdfae4114c30238c454e29515b7c4d2f53b78b2c6ee6faf0922735db","ssdeep":"12288:9tJUu6CK6lMvTffZIPcOB4vHjVitSZBTq6AiZbwLdOcjJfpkx7+x+Zdi:9PUsO7ffZIPMvDkSKssLswLF","tlshash":"24d42339a11a0e31e6680c3bd788d2b4c536a4f7564744c7b02f1beb1bb1bd84b1e2d9","first_seen":"2026-09-17T18:49:29.944584Z","last_seen":"2026-09-17T18:56:44.011467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-addon-pro/frontend/modules/calendar/resources/css/frontend-calendar.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.291Z","timestamp":1789671334291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-addon-pro/frontend/modules/calendar/resources/css/frontend-calendar.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CZ3m%2BdZ8fn2G1hJ0%2BnlThslcrPap%2BjYNN8lVE7lnVKKmYBzakEHYLcQLAMcrqURbuMrGZjn74YjqTt%2FI0TxWwTYV0bpclFp0y6vbeqw7AD3hT8tyo5oqjkfuRoXWpYgc7c7UMsv9qfILNQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a3ca536f5fc81a30-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Wed, 07 Jan 2026 20:09:08 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":167,"size_decoded":846,"mime_type":"text/css","magic":"ASCII text","md5":"064c132ff77c82079e200802816ca52f","sha1":"d49249441f4f0aa4b513c7d8d24aa88ed1e3601a","sha256":"7365721d8792a74ba2eeb84b166dcfbac140f61467cc933e5bf52b1d0e536477","sha512":"d73ba862a1d730f6e2bdc21f1fa9919728471b35702e982385aa986830fd024102b4c3877c94decf381a413bb666e610151d26e78748ef75a3abcdb14f3c8074","ssdeep":"","tlshash":"32c002ddd53a1420a506d6f86886a74f3ea51821501bfc5823172e680ad9aec82442e8","first_seen":"2023-05-30T02:23:34Z","last_seen":"2026-10-15T04:25:14.52645Z","times_seen":124,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/css/skin.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.260Z","timestamp":1789671334260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/css/skin.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ueAxNB0QUzsISgOiwYurRicWpaM%2FBYbIzVDIY1oAbWCK2VK4xRKJOIM84Clke0oNzsdEVRn7kZ0NoN9mG7DVM7q0jf4Bguxt%2BNwACPg6dbJKsJbfKVkTcITMLM%2BmWCnvq%2F215x52EDkufQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a3ca536f2fad1a30-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:56 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115,"size_decoded":868,"mime_type":"text/css","magic":"ASCII text","md5":"aaef037be944f5299ced6483074fc0c8","sha1":"371aa74333100cd25fa0f78751412adf55ab9a45","sha256":"d449ef1645b26382105970d7e4d39336178fce3496bed5df4b0b3f2d7b062000","sha512":"7801967648cda729b7bd52523009f7cddb4f26f372a04d1ce1290c7b3d8a26d7aff71fb812660770662e8dd890a79c9083bdf64fdd61616f1958db464b0d3627","ssdeep":"","tlshash":"ceb012239cb7896618338207030aedc8b7b89143d3452114f1a90de0af7cec7f282e63","first_seen":"2023-05-06T10:25:26Z","last_seen":"2026-10-10T11:18:22.436893Z","times_seen":47,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/modern-booking-form-calendar.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.279Z","timestamp":1789671334279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/modern-booking-form-calendar.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zcBfA3tK2k5olkR9jV4Eshw5nwVN0wECKMTPUWCLt6QltE3k21bhkO5Dw41PLqogSPeWcLyTyqx36L5615ihLlIgppfH7clHhp50OeWFrexnCvksw0LOkXeLJD0Rby3kT8ytdY4oK8h0aw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\ncontent-encoding: zstd\r\ncf-ray: a3ca536f4fbb1a30-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192,"size_decoded":901,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"70b89b38907b81e27f63385c2a21d9b2","sha1":"ce01b85cc9f2f13c8fb1f1478ffcda5edbb7995f","sha256":"e25d16be7df98aac5da58493a9be98919dffca727677b7311186ada65c199744","sha512":"139744e0f65dbb648bec1d7fe275bf4d07b396d869582b3835e70c43dc78be724cb8462cd83a6228f4cd701a4b228e3939aed41590b4d31969f105d064165f5f","ssdeep":"","tlshash":"c7c02200a2f3223ac08fa177b0a0431d23324245fc133a48a306f636022d9ca14002d0","first_seen":"2025-12-12T03:42:37.427163Z","last_seen":"2026-10-15T06:06:12.196538Z","times_seen":534,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/css/gallery-general.css?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.512Z","timestamp":1789671334512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/css/gallery-general.css?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58x%2BbUJFVqIqSAq7jl9ncvgm7MIih%2FbT%2BuBsLr1qqGOSK00rTwypuj0V2IyFT9GkoXTeB75e6OWzi5zjNrAH%2Bqhl4MYfm3DGVLOTqIUMRxwAGQotG3jRxPTVub%2F9BLytgE67IPO4CzCCQQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370b8211a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9151,"size_decoded":2280,"mime_type":"text/css","magic":"ASCII text, with very long lines (9102)","md5":"298a29ab64369c8f96a32a63ce559d0c","sha1":"4c5735aee1e69ac2cf88323c24c636963d283084","sha256":"74937c2bd2274a15ebea6e0468caceedef0ad5f4c1713d2bb41aa9dd32566358","sha512":"d76481f1ced550b7ff2e0f0f2f5b83a22695aaeb40b46a38473eacdb5691f2fdf0b4174cdc0907176559809ec4bd08f254ba8cc7db43f5e897d070b02c94f7da","ssdeep":"192:9iy8XGAVmJ3/sqZbgbenZQAMqghJfU5EmPD3aYlZU:9iy8pwJ3/s8gbOZjMqghJc5EGD3aYlK","tlshash":"0112cc31e085362f4d9b8338dbc514b8077da135bba72ceeed116d53c69aac818f3964","first_seen":"2023-05-06T10:25:26Z","last_seen":"2026-10-10T11:18:22.168952Z","times_seen":34,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.514Z","timestamp":1789671334514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=to%2FJV4BBfVF6HXApUayV%2Fhu5E1AT8rBVbqPMv%2BZpwNCWwj7T4A%2Bs8dP%2F0HG7Ji9P4TV%2BGzn%2FtGweOP0ifF1ab8Sh5CWvjdgeDyY5W%2BmicsxQqFyndscTp%2BqJGNHCINnJd9eCpa0KueeiaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370b8291a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":32889,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-15T06:37:40.361193Z","times_seen":1109809,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/instagram-feed-pro/css/sbi-styles.min.css?ver=6.8.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.248Z","timestamp":1789671334248,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/instagram-feed-pro/css/sbi-styles.min.css?ver=6.8.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2G2ZSMGStNhzvRSBnb2SnGboK%2BZueCHrx6t1GK5Q5kPDdPODqmNpifmz7UXej7KHwGLAVBJx7Sl0cIsBc1Xz7hpfeFZCbFJAwPI7g68fHto1CUXuTd63yWg%2FZFMsPzkga5Fy8JXgCQa7kw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f1fa61a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Tue, 24 Jun 2025 20:50:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":95786,"size_decoded":15746,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b288e7a667d8f66d365b6c96c1ce3f53","sha1":"8ee4f8599e9316943e411871c57b71e37e7dadc9","sha256":"07ec60bab49d69927d930db98595c56cb658e11a1b9b937e59f02d4541f36968","sha512":"e684cf5a459276c0ccdd6b41bd5eaec6288e0fa8e9b5d2bd56d8ccffe73d4348f90426cff651560bd87544262ff6b5fde44b5e04176ccad5a5c5ebf3174f0d7a","ssdeep":"768:ViPSWGBhjXoVG19k1YrAeWgbgY7BCjeKoAPqStsCj:AkhroXSrAJfIFK9PTrj","tlshash":"3593756526c02a2c649eb3115c81c7bfd718b1f2e6b51569f25cae3ac183f621c37f29","first_seen":"2025-05-07T23:36:46.164594Z","last_seen":"2026-10-15T02:37:58.857482Z","times_seen":2799,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/the_grid/frontend/assets/css/the-grid.min.css?ver=2.7.9.5","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.511Z","timestamp":1789671334511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/the_grid/frontend/assets/css/the-grid.min.css?ver=2.7.9.5 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EMxmVlH%2Fy7k2F90Q3S1JqT1TZNTRa3rWA2O%2Fq1qMaG02XHKuH77ovR67l0l8KMSkuLWcsU2o%2BCWmwvzITQY0NJavpsKACHKJGNLED08U6M4znpfmPvtbnMaXo9ajWlJ9CEUSkzrvZNZ9lw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370b8201a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:51 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":43866,"size_decoded":7962,"mime_type":"text/css","magic":"ASCII text, with very long lines (43866), with no line terminators","md5":"fe648fbf9e1fc4b723691f1ae693d7cf","sha1":"779511d5276151effc37773eb8cd8aec3bd87106","sha256":"9dab9e4666c7c0eadfdccf980e551cbe52ea71918ad2760feabd34f4dac3c003","sha512":"3982f8280bc9e4699eccd6212dc12c14080a11801733adbf521e0ea170a919d9e3f3841f18b8f706b41f869c7886a14eae2348ce20657117f48cc9745a424a38","ssdeep":"768:hz6YBG7G5/7sbc5kZBYCgwfwviDptdCs3ZO843J9ZEWfMh:huYBG7G5zsbvN60CT843J9ZEWfMh","tlshash":"40133133de53259aa233d201b7c16f5c013dd213f5525c9efb5b221d8aebbc42126ea8","first_seen":"2023-04-06T16:31:36Z","last_seen":"2026-10-15T02:48:30.408506Z","times_seen":757,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/reflector-plugins/shortcodes/assets/js/portfolio-list.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.616Z","timestamp":1789671334616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/reflector-plugins/shortcodes/assets/js/portfolio-list.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tiRSfcdE%2F0jbULt1XPRnf9Y3Tbg6ppYTJfHJ851MMAnbQFetplASAJN1gupW1lBZyqO16PXEZltvLs0LJ1X0Na%2FP6jbGuxt%2BD08S%2BWjKUusCHr5XfHoQ2YqXUaY22b6GdqkfP6pTIjlf1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371588c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4469,"size_decoded":1803,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"55a533612d91328114c3e8261205cf10","sha1":"0a4baadb0764ab901348ee018eba13b6a30c3271","sha256":"3f21d003ffc521f77ad3f12ea0f78f8be1aadcb5508c8a2d9153450a1570ac8d","sha512":"db50b9aff7879bcfc2318f85f9baff22ac1bb845de65b4389340e1661bcd8e8a7c36231d6798ab0618f3a194e03557e888eb6ec07d47d0d2830abeb2be6da3b1","ssdeep":"96:fX6ohXsGLPl/NobJXCpr6Crxz8WQl29xvaxjw:vNNL9ybVCpr6CrxwWQl295","tlshash":"7d9142583872062014bb307b4eff5a843a6aa8331d83ed22bd5d455c5fc4506fbb5faa","first_seen":"2024-08-19T19:43:46.051813Z","last_seen":"2026-09-17T18:56:44.015658Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2026/01/SNY02665-copy-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.707Z","timestamp":1789671334707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/SNY02665-copy-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371e8b11a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 06 Jan 2026 21:15:50 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6rbmHox6lyUrbl1P4M1R1o3L%2Bo%2B%2BbB5J2K9xALXYUAyfRc0LHANwCWC9onxDBzj%2B%2B%2FSQnRiivh6Qggy%2BeYBlf1M79%2FsgYiBdcJxuWmMIlh6YanOlFqZqi1DQ%2F%2FCaGGq%2F81TvcroRrw4voA%3D%3D\"}]}\r\ncontent-length: 374083\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":374083,"size_decoded":374869,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4672, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=7008], baseline, precision 8, 2560x1707, components 3","md5":"ab57af72fd912d117da5112852d9d95f","sha1":"08a092c51c7b09eecce76df101ce7797e6a9abde","sha256":"30733badc7c28b22924c649a7dab3b7aa58f55c3d05a47c1bd1a985b0ea6355f","sha512":"00393bd7d27d3499328f5bc9337bde8e1fffb1bc203302baf8d69a059273e180e87a7eb99bf9388bd5505f5cdc7e9fed4fd1185e4d416ffe7b36c5d9f1f86990","ssdeep":"6144:B/JSUnOuj6ha+s60pzqQJ/ipOvufQ55L8uW4kD5IrgO+of0vtao4pjKe4XLu2xrM:B/9Oumh9s601J/ipOvGYR8uD2IkOHRlv","tlshash":"3484225d39f32d14c05266b5f5ff438aebb216598989080b34ae7844bb70ee41d9bbf0","first_seen":"2026-09-17T18:49:29.832751Z","last_seen":"2026-09-17T18:56:44.016257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.280Z","timestamp":1789671335280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 16 Sep 2026 10:32:31 GMT\r\nexpires: Thu, 16 Sep 2027 10:32:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116584\r\nlast-modified: Thu, 04 Sep 2025 17:12:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28528,"size_decoded":29341,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28528, version 1.0","md5":"4316a5aa6c074dfbfdcfb60023405316","sha1":"0ff5ba86b13131add1157861d2fbc830432f94a4","sha256":"21efe1559a026f9ad7f880772917faa3a621186688e8e79e0568e4308c0bafa9","sha512":"3b136256cb1ab4ecd3b36d52ca9508cc45019a37ae2497388a3f1f7af7b29feb5df1adef533cb5a47b172c6e95c54e84254163d604b5ace76986f1d0da5152ec","ssdeep":"384:CVyhp48UoZw2f7NoTIwNviYobclKfQ9rSuNsztMKBSn8/Ex20kAOc0fqvV3dLnXs:BAU5NMcbl4JShaaOIEGAQ+TXKve+Tgi","tlshash":"a4d2e13745891dbad2720db2abc0adc0b600883bf7197d7ed2cf80836d2eca45d5264b","first_seen":"2025-06-03T08:29:57.615496Z","last_seen":"2026-10-15T07:20:05.320799Z","times_seen":11273,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/isotope-layout/dist/isotope.pkgd.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.586Z","timestamp":1789671334586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/isotope-layout/dist/isotope.pkgd.min.js?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ua57a2PC261KUebPhinENphzBkZj0ctj1td6uApV5gAkS1%2F6024r14fupxj95PbBy6tdcElSlOkBCX5z1jFHPerZP%2F4qHVKxICPQJQ4YgTIhsclO6fe8IjccLib71hjRbL%2FNV6iPAHw52g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371286a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35445,"size_decoded":11391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-10-15T06:12:33.925045Z","times_seen":27763,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/includes/add-ons/frontend-agents/js/functions.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.593Z","timestamp":1789671334593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/includes/add-ons/frontend-agents/js/functions.js?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fo3dCGCYtgCukxI0Mp0xF4p9YsmU3PoTLyDnEvrcMQKpWGzj6eweIResi5zxVpWhuQgGLJCsBCCzZyUlSmQBHs5DUo6ST6%2BVQGBU1xDrHlOjZWUayqhcUcG%2F58bOG3R%2FFSmaReleB0EgYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371386f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4973,"size_decoded":1914,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d23b478f2196456ce80ab5266820b36f","sha1":"b29be3adaef3f2e60878ed686a6bd45a17d657c4","sha256":"ef3afedf5c756a42b10db87d40c45041d974cad8942b31a80c3d8280a8f1e139","sha512":"83a25cd2078a065b8eb94043d47c71da501addab5c97d1993984f7a644ae9b34e5fefa80c7488c9bc5cdce97d662e9ac6fe29133eaf545ae28b398441eab40d5","ssdeep":"96:jDzfeNfe4hfUfNf7DLqNhyzHWR0owrhyhxWZ/mowx:jDzWNW4tmN2NszHWRkshxWZ/4","tlshash":"eaa144de736f74a759b7113ef83b4c547e1dc83162021adcf09a916ca8d8406fb99c29","first_seen":"2024-08-20T09:47:33.167753Z","last_seen":"2026-09-23T11:25:47.198976Z","times_seen":30,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/reflector-plugins/shortcodes/assets/js/banner_slider.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.613Z","timestamp":1789671334613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/reflector-plugins/shortcodes/assets/js/banner_slider.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPnoixGLyqdCzbxhga8kbARaZ6qM1Tnp3Bs0a%2FqUfmABCkmG4yRmGHB1C%2FGgmKex7nYni09pjbIMC3Kc8bdTnrSbUQFDmSwDU3XklBDtTEdHs7q3tXX3kbKAeoAcN92ys07EVoV6PRcXHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537158881a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":925,"size_decoded":1019,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fdbd9cdcabb218a5136ff9b021e6e0f0","sha1":"4acdabc54093d2ae9bd0d89afdf1975efcc1b13c","sha256":"76aaf07451ac9066b7da1afa9f115d8ad1519cf8fc96f9260aadf60a69ab8524","sha512":"52a841b26fe8dc46376d1b830a4595b0fe33a92845c79f95c7bc20c04fbc79461c5b080164c892bcc26a9294fadbf5d278fb2c20f99a162877f1d4c0e2783442","ssdeep":"","tlshash":"de116d4f35a10058517b32edabbf9918abe940031505ee98fc1c16909f9852f2636aac","first_seen":"2024-08-19T19:43:46.048148Z","last_seen":"2026-09-17T18:56:44.017873Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/css/animations.css?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.254Z","timestamp":1789671334254,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/assets/css/animations.css?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XoK74cJ%2BhYLPONP3DQ6%2FjKq6VO7aIN5HKEY1LUEfkvm5OLhmx9HkRzo3pkNIYDgOhBTXx7t6%2BErdAzfXGNmXDt0frf1cLYDRy16qqp3qsJSWEGM88sTHfDu3%2Fxu0DEShiagda7Z1xjnWdA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f1fa51a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4014,"size_decoded":1230,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d703384145d2ced8cfbd37fd252661cd","sha1":"4bafb73993db1d3e939c2b4cefc6d5492acceff2","sha256":"609f17b22291b0b4e3cd5aa7340ed56573f72a328d081e0ca3f2b4a19f0e6aff","sha512":"6f31befd6f6d85e0a7f27f08bad48d91856635929d4b4fac2cd173b8c10ba2c54d02a514841fb4442524149db52fb1968a50a872d9cf0bc566770df7374bd157","ssdeep":"","tlshash":"1381d5af2b816a84c9551b9cf3ebe6742c0c98d21b364ddfa1c4245f9b502d836caf17","first_seen":"2025-11-06T09:51:11.217255Z","last_seen":"2026-09-23T11:25:47.11968Z","times_seen":29,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/js/moment.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.520Z","timestamp":1789671334520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/js/moment.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RogASjRpmtlXpZgzNCmfHvc7L72dqdrv6f1QlOoh%2BSvrYnwS5hmzKJnbFM%2BjrYCVQ%2BNze4p%2B6J4FGvv6hagz%2F6uXn%2BN%2BzGuAqZCX4IuxWU5j%2FGCro0eYGYASYxVOMYIpD%2B%2FWcMWwR6spfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370c8301a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58064,"size_decoded":20771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58064), with no line terminators","md5":"c80207c947912a0a24c577d793c91088","sha1":"aff601d1102ead4000873722c46865db0102e1a9","sha256":"3abec75692735d0664a10337b1403620f8edf2b4cb4b9fc5216dea2e623b1f34","sha512":"f8852a55fb3137a48256bcdab05dad6fa7f4cc67cd9b30858b0e742ee85cf6867b36ca24a26bc8399398fc75adc76ad86e59f1f2a6724eea63373acd7e167a43","ssdeep":"768:H9LqJUvlnpLWIqCiFghOcknUU/aIkk/HRXHq4Gqjv35i:deAlpLWfWOcCBJHRXq4bjE","tlshash":"b743a3ce3546b012576212b5082f490bf33e6999680e4d2cf508e9e97979c6e427ffbc","first_seen":"2023-03-07T01:07:48Z","last_seen":"2026-10-15T06:21:48.512523Z","times_seen":4577,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/intlTelInput.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.527Z","timestamp":1789671334527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/js/intlTelInput.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1kwvG6p0f%2Fh4GFAg6XUIkq7rK4GD1k88DR2D3ExaNihZkclyPFA1ZkY2qYA7UuVmp8D3u9qufTpny%2FFqIFvnAMEnk%2FxphQX7U6f8BohrL%2Ft10EQpKauZ%2FWhoBz9fAQ2QO7OXGm4a%2Bc0SA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370c8361a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292952,"size_decoded":77310,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64136)","md5":"0871d3deecf94b9d5d0ae4e1a78dcfd8","sha1":"aebdc1a665df113b499a6b5faabc2ce70dfb845e","sha256":"0f1d7e19d9cbac016501e0d26cd76aa23ce33ac663b12a7415647ec82ee9e0ab","sha512":"af1df07605d31dae26f859a304fc8f765349274d7aaaaec63bc204600e01283e155403a7a854df9bba80a8db68f738fb550a64ad252636f752332eb52287e379","ssdeep":"3072:o+5lNwmbE2xBjN03k4Pc03C4PgQhNd0EZZMyM+V0ex5Xm663R1iUQL7b4tQI2l8P:Nlbfx5UdZZMyM+V/e","tlshash":"885400ebd67c973aa1e97b35968db3cd1a8c7c93c848527826d3b58f53788e0706c205","first_seen":"2024-10-04T07:01:31Z","last_seen":"2026-10-15T06:06:12.216556Z","times_seen":1061,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/jquery/ui/effect.min.js?ver=1.14.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.607Z","timestamp":1789671334607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/effect.min.js?ver=1.14.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mZRlfnRSfiCQ%2BmJteNwui7nmfS%2B1hi7Y3WJptioLa2BJNxJ4HwM5f4b%2BWrThWqhUdodQByc5ZNU1X5BeavrxYLcsRodGvUwy7j0Wb4GL1tUdQ7dgXoBnF6ESwFpK%2BfBzGGIBexKejrqig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537148811a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10092,"size_decoded":4701,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9910)","md5":"a9381ec7e41a0dc564c40715df024f63","sha1":"7961de4d7cfc26c015c8d96f7fe6adfd3c4a3f7a","sha256":"60592e9b903a1b863b8c517bc334300e33ac1f92086b9c77f1296f89a86b60cb","sha512":"c62cea60804587d72abb0660abd0f2a1b4310e4b58dabef994b8ae54421562b2923ff7f9e772b6324d58f6a88647d40dee8c21f850ea17d16890f620eef732a8","ssdeep":"192:JwtNLOwpLA/jq/XOnA85Fq5f6IyfGmjjJnd9:Jwt4GE/DXT1jjJnP","tlshash":"8822d79cb44178154beba372406f9e0fb031546cb19b4544f239c4daa9bea8e1037fbe","first_seen":"2026-08-20T01:03:08.936576Z","last_seen":"2026-10-15T06:59:40.227076Z","times_seen":901,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2026/01/SNY03834-150x150.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.727Z","timestamp":1789671334727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/SNY03834-150x150.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca537218c71a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Tue, 06 Jan 2026 21:13:25 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iwi2h9tzmf8lYP%2Be6xnsY6FzMC%2FBQGQc87uLsAZ5TW5XBPnNg86y9vh0AAlKVGcPoBDZjz0DxxA%2BIoHUok3vZRNiyrnVZ0HlH6MDg5Jc%2BH8u5IbB3s9norAphdjxWbPMIC3nTiy%2BQWz9fA%3D%3D\"}]}\r\ncontent-length: 29103\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29103,"size_decoded":29876,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=8, manufacturer=SONY, model=ILCE-7M4, xresolution=126, yresolution=134, resolutionunit=2, software=Adobe Photoshop Camera Raw 17.4 (Windows), datetime=2026:01:03 14:04:19], baseline, precision 8, 150x150, components 3","md5":"89eb278426198184bc17dd7eb4a1ae3f","sha1":"7987fccf9fc0bad9749fdcf4d8f0b45c900e5466","sha256":"bcbfab3aafd1ca41151da6a229defbc121fe70745a1199c86e0ed6e386410c3f","sha512":"149a46541345b3319df4724765b00c1c6bdf1418fac5e2274ecfd299f517adbe70105284551dac8e1c974c6b8378377af7e0d889fed0b5c7867e2813f2318e64","ssdeep":"384:3yE6FQ3OzFRqAW1zS9UbJLnHMnYTS19lLwcQpiOYbZWYjSnvYii25c3WWdS4Bz9l:IFQ3Oz4dSGHMYT49lmiOZ15c3WWpxl","tlshash":"60d22850fdb02dc2c46d1d3f59e722c8a7626766d8924d0bb0fca604afa6bd40d17972","first_seen":"2026-09-17T18:49:29.841167Z","last_seen":"2026-09-17T18:56:44.020613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-brands-400.woff","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.491Z","timestamp":1789671335491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-brands-400.woff HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca5376da981a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qggV8hfnaB0Qz%2B7MmPaY%2FR09MOB%2FGaYSZkpEguOiz6rBNjsTP7UJBdH29YeLB8hSUITbyA3C24MvBirNf8Qgvnet%2BPd9pkTduReMkIssjxuZQz9mW3dZl7TCz5ULKHJWzXE3a3nCISDswA%3D%3D\"}]}\r\nage: 444\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:10 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89988,"size_decoded":90742,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 89988, version 331.-31196","md5":"1a575a4138e5f366474f0e7c5bd614a5","sha1":"1e1f02bfa89e179fe2dd1383273b8812aa873418","sha256":"f9217f66874b0c01cd8c10b6a295dbc4f609acb6f5adc41c37da46641b57eb02","sha512":"ecc84efeabba90f139c02a98b266d1d46f21adb5a7b37fc7660d2f5fed96b1119cff8b3e2779ce3ae7fba7e62ab6b7b52555fa79259ac687babd223405554c36","ssdeep":"1536:HKgNkD0upvKBzjjeb3pDZ4bYUalLiXr7L8AgjQWaqJiwlyITA3aFmU1fQ4gKF4:HkD0OvwBbtalcXL8AQfaqJivITA3aFhA","tlshash":"c89312163808d9d0e0aa395aa728e19a549054b6cc4f1569e873f0f3b8c66f49bffd24","first_seen":"2023-04-07T00:33:02Z","last_seen":"2026-10-13T11:19:25.335061Z","times_seen":263,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/custom-twitter-feeds/css/ctf-styles.min.css?ver=2.6.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.250Z","timestamp":1789671334250,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/custom-twitter-feeds/css/ctf-styles.min.css?ver=2.6.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEzVyv2AFOwjgkqcV8v0sDqqYxRyQB6zmT0roFgUJh3YXdmUrBmyVraXz05NLK8HEd6MWx1or96zTWV3yEPVdCNFj9JWkgsFak1Pr14ZookNSEWySxDecwiXB6WTzsE5d765HzUGMS8Raw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f1faa1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:09:53 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16245,"size_decoded":3661,"mime_type":"text/css","magic":"ASCII text, with very long lines (16245), with no line terminators","md5":"37c2b469389d9b4f2c3722618cc7f6f0","sha1":"bf6781d7543373a0fee3161d182a03319f090b90","sha256":"40eded4199df55e8a5d634701767422ac6d0a210ccab1d7a687a8f75689bdcaf","sha512":"dcf67b72d72498393b9b2e5635e0cf914ee11f0c2ba3345275cb8079d29e2c87fe7224f55b0a1dfa176f13e18de735b384ec3788ed1d0f846a8facc8a292d9ae","ssdeep":"96:eaQDUcSS4fEv4aRGE6CXC3XXs8hk9aYVgeDzDhKLmESqiIEOZiCoufb75LPPITbX:eaQ+o8UaYVgIKLjiIG8Uk6GkxFPLrD22","tlshash":"f3720023794ca21cf03b86b5d6ce67e3312b47f2df12c55af699b927c1d18d42b22984","first_seen":"2023-10-25T14:47:48Z","last_seen":"2026-10-14T23:35:44.84397Z","times_seen":5941,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/style.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.507Z","timestamp":1789671334507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/style.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2jDcF9NhQTJOYBXrj1cV3tEbgC0VueEWriJe8ozWq0lcmA0SXZTeIUVd95q9uGwCN0QTZIhh9Cf%2FvLg8KRk7fCRbbrZv7%2FUWJoh3sdfei9rV1dBbG4Ri9ON4SczXH5ZShuhSQStSj5Ofg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370a81d1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77767,"size_decoded":8420,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ea4f6f5a3552dbd6b0278399307d3047","sha1":"452a5899e5151008afbaa20378b25389cc205d16","sha256":"0310e18f70237cf580bc845314d1d74717ab4e683bf57a10b5f83ce1e4f9574d","sha512":"9605fdca41ff68d51037db456398e89b435f23f291faf5040829d5ea9b05050e0c653e2f404e4d43615d17382b8874ed6841177187a01a2fe96730916c1a357d","ssdeep":"1536:bWnKhe8sFS4xHdKNiDj814f3M8abxab4ZWKufSPkOH8nev3B+3FSIyzoPkvNaQa8:KnI","tlshash":"7573ced7fac1200c952b4b81c2ca7678fe3e8d5297068be7f305a626cb427c7616561f","first_seen":"2026-04-13T06:27:19.198706Z","last_seen":"2026-09-17T18:56:44.023035Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.571Z","timestamp":1789671334571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2F8CCuA1mwG%2BcPIMLkLQTLazDY8I9nuYvGzWu30XxGR2s4Lg3iIW8glOnpxF8LGu3ODCaIcBw%2FQ%2Bievb96g72Hzyjubdz6VCD5wEN3EpxFpLcCAiQbzh9Dw84cl38VFIyIhEuJRH4lDTrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371185b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5791,"size_decoded":3203,"mime_type":"application/javascript","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-10-15T06:36:00.269461Z","times_seen":30357,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/lightgallery.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.580Z","timestamp":1789671334580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/js/lightgallery.min.js?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6B%2FpwuPZGeegVI1TsKPIfYhrOSg%2FmOzurxgumyE%2FqaRGAv%2Fm5ATlixvxjllaRDcGBxF11KShdYlzn7lr0fGufRqj3w6j1kSyPEm7BbDDb0EXyOBKya%2FZjLYA0HighedstbYTgbis0y%2Ficg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537128641a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25575,"size_decoded":8327,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17407), with CRLF line terminators","md5":"4906df82938de71da7ab54a757ad5cbd","sha1":"f8cf690574dab474b9bf93ef0af79b96efb58cf5","sha256":"f761e536155ec8d0f7c9bf167d1ea3457edf238aa539311bfde3bfb0adc62c0e","sha512":"032d0db04ffa2eebdab7c229d41a53a266b3109e398dcce3225fc28d00aab13a722cd214f327d8730997bd2577ae365606e34c560573a9403dae4ff94c6a8ad3","ssdeep":"768:bsG4leTSa1HxUQIqmBT6AQd7N9t4nmGyb3cVpium/jA0Pcs36rxEWRm:bDAQdFao","tlshash":"4eb2b82a31391386176b29e1610bad0d21ea712ff10384aa7cbdc4f565f5cc9354aefe","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-03T01:54:12.822833Z","times_seen":138,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2026/01/SNY02665-copy-150x150.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.725Z","timestamp":1789671334725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/SNY02665-copy-150x150.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca537208c51a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Tue, 06 Jan 2026 21:15:52 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BUOK5ZXCrVpbeBmalksDLK4V%2Bo9fsE8dlJTDsUWohFcZOyoZybtyMm2Ab0cYaM2vR5s6MbvC9gUKOk1VqR8nwQeGXo7FaP2cpzVVeKMUC7FLlaCW4mfbsxv4kHCPKSbdxLhdunZbOcRqTg%3D%3D\"}]}\r\ncontent-length: 23244\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23244,"size_decoded":24009,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4672, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=7008], baseline, precision 8, 150x150, components 3","md5":"3d0e613c68ff682b03d7938b2f3d8f42","sha1":"4c90204dd4b698100a5e14dea9df5198a6e66271","sha256":"aa271a98d8f1677c91f63529b8de5b86c9fca72119e2fab6e2f926bead914ed6","sha512":"5fc9f25c1ecd1b97ba02c6217b3791247fec084421c9ad752fd7f13e31370aaf1bcb3fb02e0a341b8e7eb2c77d0d05aabb7efce831ba2f75c6034a21db98a590","ssdeep":"384:CHgz/3xuWRp4YNe+9tDLpnZt3oiics8EUcOE7IZATknUAIZADh3Eh/hSNfWMCQhI:MgtuypTNe+LpUii9LhMvRmT","tlshash":"25a2f718f6212e50c4892d7aeaf993da97b32792cc81404b75dfd524ef71ce88c572b2","first_seen":"2026-09-17T18:49:29.989304Z","last_seen":"2026-09-17T18:56:44.024528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=3.2.3","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.271Z","timestamp":1789671334271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=3.2.3 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g9l%2F4bKwUm0sbi%2FpnZao52tBEppxuE1vLS1s4NbL%2Bm8nZmhevkWbeLfwZ3DTq5SxJDlCnHeTcyg3%2Fnnca0OPvCPpqw1ZcqHOqmT7nBmf3lvHG0vpAqiZDxYGVprHAh2mcR6N%2FMUzYNFbog%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f3fb61a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2944,"size_decoded":1597,"mime_type":"text/css","magic":"ASCII text","md5":"766e46f8ceadf449552f0100bae0bc3d","sha1":"7a69344776a939238e9782bd44b1cee3cd5940f0","sha256":"1c116d64ae7b717ab36fa0a899f7096955ed7a000ac63c14a9f47a2b964443e9","sha512":"fb960b0749c892818e327649e9c266b4abbcbeecf97480332eeeed1eaeabaef7162d31e203d5adfd2fb3995d29bb8f07d1ba43f6a6f905fbcd125682c8bfdce9","ssdeep":"","tlshash":"ab51e1a18a730541f01b83607aeba79d12140c33c009ed2dbf9d721ddfea5b4ea71b66","first_seen":"2026-01-13T16:51:45.911622Z","last_seen":"2026-10-15T06:29:40.146808Z","times_seen":3232,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/parallax.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.537Z","timestamp":1789671334537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/parallax.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xy9rsQ3P7mPeLOByC75hzTkpTvddaxXG6NfJvx24WmrnESIPBVK7rmgSlMsDVlTEEVThLP1WinygoBjvW92w%2FdW8UIGE2JobJsa%2BfD0pdzMSU23s3eKcwPqOS%2B2LsgQVfg5mRDevowU40Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e83e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15324,"size_decoded":4537,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9f2b84a401693fec42387ab69e6eae78","sha1":"27460fece824f69a257dbd106420534f1fd891e9","sha256":"7cc6a6b59fed35bc0161442e9711e1427cc5118bd762bd99fc1941cd55ed7b95","sha512":"d376378ac0b8badeb92b83be84a5a1fcbeb35d5f9dbbac70b847438838394f3ad339a1b5e223a03d6e9aefa9cad4995163147c01760e6f178e265b611c78c47a","ssdeep":"192:UWb1DHr4GI0dd5d8BW8B6CNowTYMCGW0FT0+4Tgf2pYQfRKnCgyIOzQC4:Ul10Q/4cpGRK","tlshash":"47621e0a17b71012e1a7b3ad1fbf42097235806b280bd91c3e9d61d89fa193556b7ff8","first_seen":"2026-04-13T06:27:19.222506Z","last_seen":"2026-09-17T18:56:44.025627Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/reflector-plugins/shortcodes/assets/css/video.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.539Z","timestamp":1789671334539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/reflector-plugins/shortcodes/assets/css/video.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h37vW0dZ8CuCFBEXwdpScuyCEPx%2ByXkjEimgkNRqC8VMxYJrb1px%2BdzcV58q%2FDhLNv29JECYhllemOJM3xJXHayvONrhJlOoAOdy0bB4iDEkhGf68HAtqaa%2BVobldJubO6qGGyw%2B4IavGQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370e83f1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:45 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1802,"size_decoded":1282,"mime_type":"text/css","magic":"ASCII text","md5":"06dfd002769bfbd9e6ab1bc985132d48","sha1":"f465e203d7910d57f4469d5ee80687a08f727901","sha256":"8b7db2e9acb32acf0bc9c393575faf67f0a1e4507548c3eb07b3531247f995b6","sha512":"8807f4d2fda5fa4f47836ef225ff1356eed14a7a2f6626f7ad954273415c89c00675d887063b87e95850a54f617ddeb4387866a5ef281fe03a0f81ff36217df6","ssdeep":"","tlshash":"62319d6676b19928712ba22c7fda67a4b73cc012d123c92ce3f7121acd956de41373c9","first_seen":"2026-09-17T18:49:29.851089Z","last_seen":"2026-09-17T18:56:44.026746Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-admin/admin-ajax.php?action=reflector_dynamic_css\u0026post=11\u0026ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.550Z","timestamp":1789671334550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-admin/admin-ajax.php?action=reflector_dynamic_css\u0026post=11\u0026ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfCLecTG6eib2ffa5KDzcKxiaVQdYreB3rNR0kQgL5vBGwf8fHwoZYBEQQ0E%2F6Fo8ai4Rc7yw94uwj0Y5arsvWBNT%2BcTGDLAka4D%2BPaFODO655ORigGVL7aEbQTwjxRkggwgmOu6xZhL7Q%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: text/css; charset: UTF-8;charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370f8491a30-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-encoding: br\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu; path=/; secure\r\nvary: Accept-Encoding\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: frame-ancestors 'self';\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-robots-tag: noindex\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"4cqb9fon1ehqkhk8jqamin4vbu","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=4cqb9fon1ehqkhk8jqamin4vbu; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":447,"size_decoded":1223,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"b2fc3cc45c7f986ce8478c4492ce2000","sha1":"8c289d6649c2e02be38e8212ec1b97d492544c21","sha256":"89f7081ecb09d51d013fdd3c014e2db3ba815df9feba1998edc9e62b6e28bb71","sha512":"0d973431af495b4709f1937f18c606f560dd064b86ea458b54cfc4b2e9e9796127c734f38f0f37c57bc9ce55d05cb4401de2f42399a4c4457c30a6f8df1af89a","ssdeep":"","tlshash":"42f0a70bb7172643d81692bf1064e7430b9d7563a4255b80ec250aa703fda24e929bdd","first_seen":"2026-09-17T18:49:29.921758Z","last_seen":"2026-09-17T18:56:44.027318Z","times_seen":2,"resource_available":true,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/jquery.mousewheel.min.js?ver=1.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.584Z","timestamp":1789671334584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/js/jquery.mousewheel.min.js?ver=1.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xy5AveWpktrsettpzi845HD7iZd7oDYprWdG4BkdNaswr2tgUzhP9klmjCI79kU0%2F4An5T0Jq3Eg45emFN1W3l%2BaDs%2BttxKP6t7eCg5ANfMr3LKnTR9%2FvGz4TJZPJpSWBkj0jKnh9Zup0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537128671a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2784,"size_decoded":1934,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2609), with CRLF line terminators","md5":"2947532b911952f6a184695c97aa964d","sha1":"db7194b7ca01ee3245d0f3871ab1b8c88963e07c","sha256":"a80f860251402c6bd55adaa519fe7260a90e6257d4255d5652b734df3f38f39f","sha512":"a3d0d26a69ad0fce0d3197e32f65a0bd8fef822af6e297505622ddeeacd6fd7ffc76899cf0193d880e650dcea3bacf110fe154089eb47d5c2a77988417082571","ssdeep":"","tlshash":"41517141770672f381f64f36b22fb603713ac005140328a279bc9d946ba5deb5363d1e","first_seen":"2023-03-07T01:42:35Z","last_seen":"2026-10-14T22:19:49.824555Z","times_seen":750,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.273Z","timestamp":1789671335273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/josefinsans/v34/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21292\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 19:47:01 GMT\r\nexpires: Fri, 10 Sep 2027 19:47:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 601714\r\nlast-modified: Thu, 04 Sep 2025 17:13:43 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21292,"size_decoded":22105,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21292, version 1.0","md5":"dee058d759c62ef3f950a3a5fe2a91ad","sha1":"dd5d3af570f00b968c57812b147ecacc475aeac2","sha256":"e9dfe6f6288f73d10e1b3c9ef920f74411f8cf442515b71fc5c2ed5517c14ff7","sha512":"1893312677f3353c176cf10a5da93456f9653b161ffdccf5c9c647c1b95a5eb6bb97704c1cd3103395e9a23e731ac847c24f88067b7e404815252167a716f2a8","ssdeep":"384:/vWi6HqGOvDokmCTRko5h7tG3Mrh7uz1xCaqBOOuLLBCNJqaKtp+:/eioq/ZmCWeZG3MdyzSf0CXKb+","tlshash":"89a2e1e2ad969d6da9cdc13f1e74e8fe94d0506a501805e7444e00b3949f8fd2159f37","first_seen":"2025-06-11T20:13:28.859875Z","last_seen":"2026-10-13T15:43:32.939828Z","times_seen":530,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-solid-900.woff","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.866Z","timestamp":1789671335866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53792b5d1a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wi%2BlRESudmo7dD2N05X5QnYvS59kQ9fCFfgqpM9bs%2Fm%2BBxU%2Fip%2Bu%2Ba4EUbJ1MBwYsqudRCZO0G7D3%2Bi6OM2brCfgdmYXI0k6B90iJwQVsS8SF5CGC4BHtdLcUiUA1qFBkPDFabqndjs%2FgA%3D%3D\"}]}\r\nage: 441\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:14 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80484,"size_decoded":81246,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 80484, version 1.0","md5":"2d0415fa29ea596b7a02c78eddeede20","sha1":"80d33a73cbb60e206ef6f5c898988641576c7dda","sha256":"48745629a252fb4e8d2750527c0d49341c2c17d5fe5bc6a37ec82b062ae84c9c","sha512":"da41eeacf2ba370f044f14f61b6b2df9dfb7cc5b4b8518a5fa822909958213c64852fdbf1093fbc8947066a8bbee97639a0ad257cf65eae2b839141837ec42b4","ssdeep":"1536:OowQDx3FIFA2uOjEAmY7oRFjji8iSVl4qeosQ/qeLr0mLv9:OowAx3WFA2uOjLncZiLSVx7/qELv9","tlshash":"4a731285933a5bb2b73a4ebf464f707976be76d9104d428cf501fa28e4b4731c0e88a1","first_seen":"2023-05-01T23:23:01Z","last_seen":"2026-10-06T15:16:16.299783Z","times_seen":88,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-brands-400.woff","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.919Z","timestamp":1789671335919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-brands-400.woff HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53798b7a1a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urHJhcmyPFroINGgko3EECke6eBcjf%2FxseLKdi%2FuNlxuZVV2mEGM4oPUNfIQdEsCYg3YsZFQLmsd8uJnn%2BFYwZxYcaOk9cDt6e6lfwW%2BDuOV6ap4qdMG%2Fy9GpFcTu2EAZNOArpmUXnutjA%3D%3D\"}]}\r\nage: 442\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:12 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":74928,"size_decoded":75684,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 74928, version 1.0","md5":"da408238128b876cbda6424391f1566f","sha1":"f9d835a0f9248b1bb33d66968e87c4a50103ed8d","sha256":"52d02d730e65f74a08e79ca39fadb061c14e59de2ffa830bcf05c030fcf700e9","sha512":"86a03e30cade1062d0ca9680d3468cb5f950ac04abb30f0d91fd7ce51418127860e7af53aad9e997e37b8219abc20cac76c2c59ae711a61d340af0074c4909f4","ssdeep":"1536:sb1Y4+RKE1SL2GUBsndZR3sp5PwS88lzx4TSVSo:sJY4PKSMWdHQ5Pw6lz2Do","tlshash":"8a7302938f00a742d3298e6826acf377b586a1b21eb7c697bcae9c1575c734904bd900","first_seen":"2023-07-13T07:43:16Z","last_seen":"2026-09-17T18:56:44.028919Z","times_seen":18,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/style.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.489Z","timestamp":1789671334489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/style.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALcqHbBqozgKhqKQIRWMgPbxi%2B%2BsNjlWAwPUgjM3tjdMxVCx5zGfU%2B%2F1ySaSCeEMTkEj3G3VsxajCVIXkR01D79Mwjd7PRdWm1MF4iYGp6iTOrEeXvLfjKMegP1CSiMdCjXIBqxeS6kTLw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca537098091a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":583,"size_decoded":1131,"mime_type":"text/css","magic":"ASCII text","md5":"dc73ac8fa94f1b0139b11476bb69c2f1","sha1":"c5d34b9c673444d675a2ff3d2d7ea1814c66f5a6","sha256":"89170dd6471329ae28074d4a5d5d64bedf4c3f97b098824dce1852f094540107","sha512":"a60ab0ee5a23d3904b76bf63bf69e240b7ee9c6f05dfdbcad9d82084cb7161634e990893fb3aaafb810332797e2946fb1e65e4e45fda7af8242c1a6b459d51ec","ssdeep":"","tlshash":"39f0ac0e5f26423102e502c7f8b32647df2a938553dd4491f16e8659863a3363ba8b2b","first_seen":"2026-09-17T18:49:29.827168Z","last_seen":"2026-09-17T18:56:44.03004Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v6.7.2/css/v4-shims.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"172.67.142.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.513Z","timestamp":1789671334513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 06:00:53 GMT","end":"Tue, 17 Nov 2026 07:00:48 GMT"},"fingerprint":{"sha1":"C1:F8:7B:6D:E1:C5:FF:2F:6A:0C:24:9D:28:61:CF:AD:73:C0:93:77","sha256":"4F:45:62:98:5D:83:FB:FF:D2:77:E0:3C:78:CB:71:D4:E1:09:FE:CD:6C:74:A3:1E:91:95:90:51:1A:80:D4:0C"}}},"request":{"raw":"GET /releases/v6.7.2/css/v4-shims.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 16 Dec 2024 15:31:49 GMT\r\nvary: Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEz%2B7tKJ369uLgztSBMZMGhlFoIcaZRAgt4rQRBX7j6tpIssE44lJdUM6tIb9tPhe6EizCvA5r3pK5lFRp2y%2FtcPqx%2Ff0DXJCtnmldRxpNsrsqmToQ%2FQMwdSfaUnhjULXiNj3%2B1X\"}]}\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 149585\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\netag: W/\"251f5523643f01abe4f116715b06a6dd\"\r\ncontent-encoding: zstd\r\ncf-ray: a3ca53712c573181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21211,"size_decoded":5082,"mime_type":"text/css","magic":"ASCII text, with very long lines (20992)","md5":"251f5523643f01abe4f116715b06a6dd","sha1":"2f24dcbe757bcceb59facdf0010af498e4cf60a8","sha256":"6650a50d8591259400ed356b424ff4fe633bc0d1fc7be58e17c78fbb1312a707","sha512":"53e7e2abaf470cce1eb4b554899790c66244e406687ede2d8b84c833de4ca97574223057813da81f0e5c35e205ab3dce13f6b14ca40847c7bbce59b7c5b3959a","ssdeep":"384:/ml6sTnnbF+PJeQlGngUHPAHyw5+E9mu1t:/e60OJigUHPAHyCtb","tlshash":"579248051b2d90a3b2dc3c6bb4417ee42776278919d64c51e3273c84bee789b31eeb61","first_seen":"2025-01-17T15:05:24.625237Z","last_seen":"2026-10-15T05:38:39.222684Z","times_seen":6693,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":15,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.488Z","timestamp":1789671335488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca5376da961a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJxjJ5%2FvVq39%2FfEtTKC7qWvri4d1RAzEWwuSZJ4z44EqR00vbs6jPr7a95Yw0zbE%2BJ%2BIWfCHMrsE57Q5vhc7fTnp27C%2BrIy%2FaAWvWpnDErMhBNOhyLuDpr9%2BT1WUyWBIlpv3xl8mimeSKw%3D%3D\"}]}\r\nage: 443\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:11 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101648,"size_decoded":102410,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 101648, version 331.-31196","md5":"d745348d289b149026921f197929a893","sha1":"a22acd7697f36e7d4cc31a853c70e776eac54bb1","sha256":"3f6d3488cf65374f6f676c315340b0ac2be832bd55240c809448e36ef9b96326","sha512":"d91b18a923a9073f1fc1fecf1b010938f79d824d2107667597f45a65d3843e350e420b82a9506d7ca62c02a5aeabb1d3676635f825dd37b864d30f2835714c42","ssdeep":"3072:8/ur724apSAm4tN37n8KMCsOK9UJCs8HWCInRTuT:8WrlY7L8RCe9y+HWCIRk","tlshash":"4da3124c9a91dad7a0e6fb6fe04378a9d312d7c15e4987449da3e3485b4e24b0ff042e","first_seen":"2023-04-07T00:33:02Z","last_seen":"2026-10-14T08:35:03.539606Z","times_seen":576,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.892Z","timestamp":1789671335892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53795b691a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8B%2BvGh0eusieFUcJpfigQe2XafAqIRxzWWiviaa01%2BwivUHl9%2BQQ40jyq%2FiW%2BVs6ahs%2BlseMQFQlUpPaqhJxu9PU%2F%2BWi5mu8g%2F4bqdJFmOmWcXjE3V%2BunS8w%2FHzIw%2BLkY6V4JqAk%2FCBNgA%3D%3D\"}]}\r\nage: 443\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:12 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64144,"size_decoded":64917,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 64144, version 1.0","md5":"6814d0e8136d34e313623eb7129d538e","sha1":"d902f8db3e021155f177f698a252fb98d6e61768","sha256":"4d0130d314f1669c9ea5a911d401d6250f96386a52b0c38f7b3fb43cdcd10589","sha512":"f12c4a1b66fd280445f0caa0c481c66ab18ad708088c3c030735556b9b1e94f005321d88722af5bb105ae44e59ed07f84940dfbc0467c220c2c73c48ee1ce41b","ssdeep":"1536:Az40mxTEnkIymK648xEMRfjWAygmv1PxmfU5DT6/:24Bb7m48yc6dl1PQGnC","tlshash":"0c530259352c6fc9e28fb0b0e8bf08a884afcb19765f98264c10762546f9d6ddf4c817","first_seen":"2023-04-10T05:49:39Z","last_seen":"2026-10-15T06:17:25.017844Z","times_seen":1431,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/custom-facebook-feed/assets/css/font-awesome.min.css?ver=4.7.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.267Z","timestamp":1789671334267,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/custom-facebook-feed/assets/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AJQOMx2nJgRCpuePZQP8bOC5spXr9Ec3ARqmGK3l8lYeuQdIXeT436082%2FITEikrlZ1jmBJRqaSk90kdE3YaTaZNGfwO6%2FY86zBQrAvFMM9yfnK8mxdLRvOrnD8GK8%2BHeYMy2eoL0aHZbw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f2fb31a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:19:01 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":7455,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-10-15T06:36:15.000213Z","times_seen":323768,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/js/vc_carousel.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.620Z","timestamp":1789671334620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vc/vc_carousel/js/vc_carousel.min.js?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snPs%2Bof%2Bp%2BQT9ofClZpKAFb%2FFCvEf%2FI7QFhkx9nUuUV4eWl7c4%2Bo6xcPDxCCuP22chZJPy6Fw515keirxYl%2F%2BnjXO8kxJ39BhLVtITi6%2FbKUxre7VdMHb4sPfWcGviP%2B6sUt6fFeaOw9aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371688d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8328,"size_decoded":3271,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8328), with no line terminators","md5":"64b036e39eab04a74d6b916c19d45532","sha1":"7e0d5980570bd7ce910d2811fc97ffef444305ee","sha256":"dee1bfe2e02e6587d5f9358e7b643e7a70a80536be7dc223fb67bbf06fe53722","sha512":"f2ae9d5d367e0376347dbd9d7986ae137705ad69379b1d1e051728a98dcaaf054234ff2a6563245fd6ac0eca9f2b7ed8cc8d4c4a0837265e168dbb6846014086","ssdeep":"192:t5htlh2uVlK2jjtJhnmwkt+YWP7yX7/Zdw9DjTD54PdPO7CvT:fhtlh2uVlK29JB7kt+YhX7/LwJYPV","tlshash":"b4025216b22076b04767b2930109870d373a7e3ab44250acb4bdddda5ab5c48b12ff7d","first_seen":"2025-02-12T14:25:54.888527Z","last_seen":"2026-10-08T01:46:51.269086Z","times_seen":82,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2026/01/SNY03118-copy-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.711Z","timestamp":1789671334711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/SNY03118-copy-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8b41a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 06 Jan 2026 21:03:42 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY27RbgLm4TDxmyXYRIT3E6gHEc%2FQIH45Weg5X4MoYR3ZKd2sUg3U%2B3Wz0J1HoCi1h0SSpBZM%2FCarMcDANj09YseDIRNV%2FyeWbMWMiSlU7MRuRmmByVK2J4zFu9N%2BZ6erhKCuvQcZQPbUA%3D%3D\"}]}\r\ncontent-length: 836606\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":836606,"size_decoded":837380,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=9, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, xresolution=136, yresolution=144, resolutionunit=2, software=Adobe Photoshop 26.8 (Windows), datetime=2025:10:28 00:29:22], baseline, precision 8, 1707x2560, components 3","md5":"1728b234d97c0766957ce41384efabc5","sha1":"1c3fd61466c09986585fcb108b3a384f63587106","sha256":"8d21bc3b25a92c1ff5b6502bcda0ef14189f3a748d3946e849b3f66c1113016b","sha512":"60fc3333e21306a928a72da78a90ea40267c32dd449014b31d6317df15ccd86eb76f6e12447bf15ce5cc3026ecf30a2989e7b7c227981e0ea5bf3c28c36e96ba","ssdeep":"12288:18M3vAwGFoX9eHMjslRiy251quD54FSN9unhb7iz/2nb/u7y0F8A4GDhirhi0xls:1zuouOURitKuDd9uhb2O/30uAh6ZLQP","tlshash":"be052374075f58e2cac69bbd8c3d0381d6439a281cc1cd5337bf7169078aafa15a5b72","first_seen":"2026-09-17T18:49:29.834226Z","last_seen":"2026-09-17T18:56:44.033797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/images/flags/ar.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.736Z","timestamp":1789671334736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/ar.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3ca537228cd1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7W2Ao1hWznerJX1GFeS7INQ08cI16A9btRuiYu0o9QZkakgmWfixHjicmVDiDpba4Ram0%2BJbe35TEaQ9m6zj6ldLDhNmJ5rxxtTg3inYVEV%2F5D3XDRlvinnTPu3Z3Zxc4xqq9U3szWTew%3D%3D\"}]}\r\ncontent-length: 474\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":474,"size_decoded":1238,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"3285cf9ab85d3c7763ae76dbe359f0e9","sha1":"587f4e8a907116cff37520d3a1938dd7ae5974e0","sha256":"80ace833a4140bbe88c886643a1adb101ed85daa362f67e1aaadd2d264badc94","sha512":"e042133adc901b913e9ada89d3026c6880997046c3d954f43b38714e27a4dde2fd447ce0145b6885e74e0795881151153956392491487679d25fc6ee9dfd99b3","ssdeep":"","tlshash":"67f05cf3aaa59e10c02b28a9246220b9b0321dcf16021c8dec1cc8bd260c6bb0a75602","first_seen":"2023-04-13T10:02:08Z","last_seen":"2026-10-15T05:55:48.872763Z","times_seen":694,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/intlTelInput.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.282Z","timestamp":1789671334282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/intlTelInput.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9caVe5Tr5dw9XFbN6qCzjvQ%2Fc5Rkn%2B%2BnHd99O4CNGNx58oedLVE7KzqfTTzXEN%2ByCCa%2FHj83mhgCB%2FsuoDBcf4qXY%2B7P%2BJGx3pFswFtPhn0giqNhd1EANiVdoH57Jjx%2Ba5xxDe6c4RWhg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f4fbe1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17841,"size_decoded":4357,"mime_type":"text/css","magic":"ASCII text, with very long lines (17038)","md5":"d5d1e954dc646c341a796e377971efa8","sha1":"6d6e881a1d7e6449f21e826c228b97ac770d0507","sha256":"a2eb6bd0f160316fe9b255742fcb9f9d0c6949fb567a8b18441cac2cd4fae7b3","sha512":"988ef78b88a38fde62ac4cde367d0a6e439d6a53ae921c1d7d4c50bf667f28df6883f896c6901bb55ca5dc5f9463ea1afd6d2d32f1ffb6054708ce956518c4bb","ssdeep":"192:/nww53ieqyn4P5vrIOEX8h2EvVP7xISS6li4IYhYAZJ9oe8uK3/0fdKTeM5c3ygM:/L33IhREXP0ZkMQ","tlshash":"ff82d5130718913ed792c1397063c5bd3bef6f44b9d7cae2d6c9821f5883580c9aab59","first_seen":"2024-08-23T15:54:30Z","last_seen":"2026-10-15T06:06:12.303766Z","times_seen":984,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/bookly-main.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.284Z","timestamp":1789671334284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/bookly-main.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3nW6UBC1yRpVXmgyNZg636xzOmZxPyZU%2FRrn4zlszlE6sctuJcq%2F7gtocWY3xMyDCwQMFSkd4fMjYdR3%2FdJH84A66GPzGT7xj9zmPja%2FweH2wSGHqCOeuMg%2BClVU7Q9uq%2Fp%2F7V8HSOL%2FoA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f4fc21a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":40459,"size_decoded":7401,"mime_type":"text/css","magic":"ASCII text","md5":"52a364a9b1cf9bb3fc067085319418e8","sha1":"58811229249e7fd0d172b817fb9cf1ede8548ddc","sha256":"0ce2dea7778fea0d232089a7754428b5b6065c48b0cd7371b39f22ae63b4c58b","sha512":"9ad0ee57a47694556c97b271ac66ad00990d0f4fbfa05b82e0c90730eefbb56a6a252ac3343d345225a8615dbf21fa5b890b6b36b112313c73cc0ccf122f5c64","ssdeep":"768:N4wFfF1QU4PtIcWDF4F4NaDLnbC2EutuRnc8zF3z2eMP:N4w5bQU4PtIcWDSKNWLbxEu+zBz2bP","tlshash":"3f03015eddb31d86a41ac1b02afa6ba53b3d504b8a0edd353b9c31348f4169d8121ff9","first_seen":"2026-07-29T05:00:35.616005Z","last_seen":"2026-10-04T04:38:44.395572Z","times_seen":28,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/bootstrap/css/bootstrap.min.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.285Z","timestamp":1789671334285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/resources/bootstrap/css/bootstrap.min.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FW%2BKwdRMU9nAJXjkjGCxpgvwxG1IDg303OSt0GRmDfOzTLMahQqpHNqt3TuOubGIm7NfsISPYzDazz7dKvL66Rhlpcelv%2F7IePJ4m2horyx5IbPEDKFyyQxyrsx5cX8njlRGyDAwPC4Lw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f4fc41a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":286581,"size_decoded":35491,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65304)","md5":"3a924c7b00a739662c1ecba7aefa114e","sha1":"5fda0043e18274bfeed1ea07353ef8b30d0010df","sha256":"8652a432aba4cba2a806a512177cf70a38b2bc801160b835a03da0dcc7b312d6","sha512":"795c981df4b15a2a0080f75b186a28689e10bd984d9be183d50967ac473b00180ad24fe8183651dd9b6c59603af3a263312a70a5246b23ba6b103fb312857abf","ssdeep":"3072:ByhG3ZvSIKI1kVvGkLvGv3a0vDo5iHHEx:By03ZvSIKI1kVvGkLvGv3a0vDo5iHHEx","tlshash":"62543f1df13c7029b166c7391490ebaa1ffa0301d503caae631e9e684e7c5dda522df9","first_seen":"2026-07-30T10:31:26.808828Z","last_seen":"2026-10-13T17:52:10.808593Z","times_seen":53,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.6","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.249Z","timestamp":1789671334249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.6 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQf%2FZIWZKvcnxrFUO3aPX8moU%2Baq4EC9lyBiRthpUZHTJAZ0zI3bR5vvKa68tfdTiQDI%2BMrl4Hv96KOQCSR5dwVEuyxRd5KA5OAxzGppjen%2BQgWMLK%2FSA9zJmMDzb83U3ZbEz20BCtvcgw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f1fa71a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:09:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2979,"size_decoded":1698,"mime_type":"text/css","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-10-15T06:34:10.192103Z","times_seen":33072,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/css/advanced.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.262Z","timestamp":1789671334262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/css/advanced.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCcO9TZ9r2khIbvN%2Fg%2F1PQOF%2BcFprrkWzssg74alGq9MXma6ql7hQvefvws%2FtID%2B%2BXHIFwxsL8RZS3Bf3r%2FouANgpJfVDmacUshs1zLyiil1cVucDsvDG7dbxHxLPIRTx4X9anNl0MDLGA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f2faf1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:56 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2659,"size_decoded":1566,"mime_type":"text/css","magic":"ASCII text, with very long lines (2617)","md5":"48aa30e16730ddffa38681dda1068130","sha1":"c41cbad43b023200061ccc8d9ad5260ec639b9f0","sha256":"f0e2e3f98787709a75d66c6f2ae2f761e38a7a7a077b2a186b301ad528abfa4a","sha512":"2d72660eafade87e08e45c41796efe5bc1f0a7317a78a73916c74ca00bf08c082373e943de970d6ab5c3b8dddc10a2227ffa74c83148cf7e8671fcf59cf73517","ssdeep":"","tlshash":"e6511022d4d1312aa56bd61bd4c5cbed211dda27bea306bcfc18b86ec384cc1506bb1d","first_seen":"2023-05-06T10:25:26Z","last_seen":"2026-10-10T11:18:22.867Z","times_seen":40,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/ladda.min.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.273Z","timestamp":1789671334273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/frontend/resources/css/ladda.min.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=px5Gjw3MYxHRJcq46LqlkodgMuCqypDvr2nz60%2FOKHHtclct6vG6kv51GZSWTeVsd%2BJ3O7T8p1%2BzTz%2F%2FvMWhs7La96tsE7dtVopUmnMgF3dCU80TqdWY9mcRX8RpkRWrCYWiKHspIzRwrg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f3fb91a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9184,"size_decoded":2131,"mime_type":"text/css","magic":"ASCII text, with very long lines (9022)","md5":"614e769024385cf21879d6a238b682e1","sha1":"3dca7a5932e058b8195fdf25fc474e1046167348","sha256":"6300274a7cac61720ed4df4819d69df27c27d91245a160015d6dff2dd57c904a","sha512":"37bcadf176fd7fb30c10859b630869382b8f852d6e40943bc9890321fbd8d5968de24d955e6af0b81772d220549e9d0296ed234b2b0811697403621b50a3af55","ssdeep":"96:F7/zByr4+5NMCR46Gb1IYRECaTudnwvaXaE:F7gdadzdnyuaE","tlshash":"201297c47c0a4bddd1a3074557cab13c3827b1a363c15b9a762925eaf1e39cd3029b9e","first_seen":"2023-04-05T15:18:57Z","last_seen":"2026-10-15T06:06:12.363765Z","times_seen":1422,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/bootstrap.min.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.493Z","timestamp":1789671334493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/lib/bootstrap.min.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmnCmPkaXlUMKT9xZdmAzfA7IBNhieUiuGCbUnL01T3%2FgWHfAIzN%2FBfFqky%2BtW05IoroQOxK83ZY3k6Zu8VFYh9n25RVv0ObDIQ9I%2BMo1VvmvPxFc1FyGMwuekL7fOMKg%2FRovmKrR8Cq%2Fw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370980d1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32627,"size_decoded":4583,"mime_type":"text/css","magic":"ASCII text, with very long lines (28709)","md5":"a3091eb481a9d7ed061be73ea9a369f4","sha1":"3f02567f61a288d54c8edc15c4c922f6e689f21a","sha256":"8b4042c7d228798072e5ffa79246d78a3e8c8e618941c27df616e86b6d0bf858","sha512":"1a6d4f3e010ff3a10a0e2b2e8e01e9a877f6c5c9898e19fcf7c2c6d0f0aee2120bae201130963236b83654fdcc936189b6a8fe04101cc5606caa4bba3778ef47","ssdeep":"192:f0FU9OHyHpu7xpMK0SX6t3cQAnAIBNtYaFRqXhDSmIACpL6Lx:f2UAHyHpinXiExucI/","tlshash":"5ce2d0a3f4a11a9d4612c40c25d57bfc447fd489e7b29ef9e8632770078a1e74ee248e","first_seen":"2025-10-22T03:38:34.441223Z","last_seen":"2026-09-17T18:56:44.038247Z","times_seen":5,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/jquery.fitvids.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.597Z","timestamp":1789671334597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/jquery.fitvids.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeZ69A6dBuitNyx0uXK70gA2zJhFShnBDKzAsO6SnCgAhb0fwPrCDmRvIoHoB4h11u1Vt4fudYOII8jWrmZu2gy%2FBtT36eYawEK2iL8xzovHrHqEMPkzuwSt%2BHaHY5ui9CvRR7gs6pOMWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537138731a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2442,"size_decoded":1716,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2158)","md5":"1a6e8887370c060d07ed9e43f3b5e126","sha1":"9de03880e7e8cb1583d2dabb62cc9cd650feca38","sha256":"b0197845574f786612ae1e43a73226d3ca2d306c4aa9b56922e5400b2efddf2e","sha512":"673dfcaf3c6558f4411f2a92efcd69c341092a0a70c897dfdb8ba653bcbba1f6eae2733a5a097999afaf783e3f393224654e130d5622570bfb0dbd636e187c20","ssdeep":"","tlshash":"c95174923310a53c5689349ba92f415dba94c8fc07efe41cb1f6d8e9992cd4c50354fe","first_seen":"2023-03-08T05:56:55Z","last_seen":"2026-10-14T07:36:36.518989Z","times_seen":75,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.246Z","timestamp":1789671334246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/quikblock/dist/assets/fontawesome/css/all.min.css?ver=1749168163 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=alqfhHvjEi4uUlQLKhJqR7oMTsjQR9A8gcllnRR9sEdMPWqX2s9vuxHqW8goCKR%2BTfd6Lq%2FsDxiGG1eNfDi2%2Bs1P4gXe%2F4Tmeg2ocU1vlwnzJerXBro3QUQukvbRcOlniUYTF0MY9Iscqw%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f1fa41a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46930,"size_decoded":10605,"mime_type":"text/css","magic":"ASCII text, with very long lines (46750)","md5":"20a9ce516eaea76da29a23adc43e8998","sha1":"cf1a3fd771900af34f2af22142beecfb47367548","sha256":"8891a160f8a2afb81de5259f9f68e5af3782348ea2927ad9e969bc88c7d39984","sha512":"e9ce275f6b67e4a6f3781268f58c296b41a4b7e9b30b3241ac4d5107a7e6a5cb2837e6ffc3f7aec0832e40a37252853f9d3a0a3776bc4a034eb4fadb5b5d9fba","ssdeep":"768:m31EUdlQ62oU2lfQkOt/rMdj3RScMxB8/2:PUdC62oLo35sINAe","tlshash":"02230cb8e58c41c5a731c44fff82b2b861baf73ce5854d95f00e691c2ad26a811c5fb9","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-10-15T05:59:15.465585Z","times_seen":6484,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":9,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/js/event-calendar.min.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.530Z","timestamp":1789671334530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/js/event-calendar.min.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3CME5QZtLY%2FmC7Raw8T4bscyD69%2Fit5XRbDsIx3lUpP9dV9QCl2jzODtgIuBZ0oLjK7PRAMLd48xc%2BC%2BBSr4czT3Bmw%2BssW7KKxZjLqBY0SPSO5jQ%2FdBgpkAbyuk15FLgjfqklXcSvQtYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370d8391a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117887,"size_decoded":42921,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65466)","md5":"57c79a1c09b65d519c48acae3410af61","sha1":"2af5a7f39baeeefe88d68c9bb98892cad5c1d20b","sha256":"a0c7f26b1893aaf0a334d6054fa550f13e69d50ab472f6352fb245d7f2488677","sha512":"96ac001fe804e9e9772f924fd04057f4f8b8318ea31e840bed8e1bccd877a8ec910ebdb5dedfd56dad4abec8c3684b0fb69db34f21ff79d182029a755bec7d6a","ssdeep":"1536:bnAq/L40LkiTQ2mffxy3/jRuX5X4wbxj7gn0Fiu1hENUvPXB5Gvl:bLj4akiWuUhEKnx5Cl","tlshash":"48b319c53285b12aa3eb41a9406f0107b3359dd5144a842db13aedcd34ba8d896fffb7","first_seen":"2026-02-08T11:20:41.939405Z","last_seen":"2026-10-15T04:25:14.569322Z","times_seen":78,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/06/SNY07201-copy-2-1.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.714Z","timestamp":1789671334714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/SNY07201-copy-2-1.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8ba1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Wed, 25 Jun 2025 21:54:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMibdb2FmEPE9qw2mdpb9wW8V4qk5lzLlc7eE4%2BnpNlu%2FXqJzwWa6wIMOTlYhDsBYCZ%2FAJBUAvNcmBXINjQDqGx%2BJFUD1GEZKkFQLhxK3DGJdRJcYFRTJmmZoGmiwuleO9zZ9Uuq9eYZTw%3D%3D\"}]}\r\ncontent-length: 4447621\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4447621,"size_decoded":4448394,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=7008, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=4672], progressive, precision 8, 5810x8145, components 3","md5":"8bdfefc5d449a00fb7d62fe106ba1bcf","sha1":"9d4416935bdf14f0dd2d06db68ff3fe839b6bff9","sha256":"9994d3e17219e1a7447f9991cd90a95f0704a5a1f87b899ad0a460203c6f23a6","sha512":"10326b422e1d00b74b805a320252af53a940859af998338ad7d11e059a87fd98272cf1aabfa6423f10c8f7215579b88612c87140fc382f759434ef208fb21236","ssdeep":"24576:yMF0ClUFJrUlOpz+yqOwHiqKIs4/VZTyeL9GL6VdLVODrUW:yMFlQ4SRqOwHith45L9GWrLVOfUW","tlshash":"4b252317d7010e61c0ac1e76d2eb830bbb3566b092431a17bb4d6a1577f6bdcee4a390","first_seen":"2026-09-17T18:49:29.886473Z","last_seen":"2026-09-17T18:56:44.040672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":683,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clientcdn.pushengage.com/v1/sdk-app-data/faf227c1-5e65-4a29-9e2d-a7e5a7107ebf?source=sdk\u0026sdkv=3.0.78\u0026swv=3.0.78","fqdn":"clientcdn.pushengage.com","domain":"pushengage.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.640Z","timestamp":1789671335640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clientcdn.pushengage.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 13 Sep 2026 15:28:31 GMT","end":"Sat, 12 Dec 2026 15:28:30 GMT"},"fingerprint":{"sha1":"BF:E7:FC:BD:2B:2C:D6:A4:AB:A6:8D:21:44:42:6F:DF:B1:BC:97:1C","sha256":"A7:BB:84:E3:15:7E:CB:EB:C6:E5:3F:BA:6C:B6:05:8D:9B:56:16:C9:D9:41:F4:27:65:8C:6C:8A:78:34:EE:4D"}}},"request":{"raw":"GET /v1/sdk-app-data/faf227c1-5e65-4a29-9e2d-a7e5a7107ebf?source=sdk\u0026sdkv=3.0.78\u0026swv=3.0.78 HTTP/1.1\r\nHost: clientcdn.pushengage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rooftopantalya.live/\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6016921\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, s-maxage=120, must-revalidate\r\netag: W/\"24aa-65dzAs3rSUAx58Wnhb0LrPzSghQ\"\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1220, 830\r\ncdn-cachedat: 09/17/2026 18:48:10\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 262443b7acbe22c98b6373cc6dd7500a\r\ncdn-cache: STALE\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9386,"size_decoded":3537,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c34e90988cc31095cb8923543bbf7f6b","sha1":"eb977302cdeb494031e7c5a785bd0bacfcd28214","sha256":"04f64281f2d7425cecbcb4a56f4c84ef38658153c99666bf66b94e0285b456e8","sha512":"7a5a57630b98e6f68a8cf01185c25603592f31ec9bfb2a227f2a48d2a4f461cff1c72cf959fd63dcfbfb50a678a6f146be43bf1729fb0da43e9536aa8a305945","ssdeep":"192:u0a9TfEfifFfrh5mR9XMWF0NQuzFkZwkZW4+Z6p:u0a9TfEfifFfr68AfZaa","tlshash":"1012c904ca24ac765bcb919c756f2e46207d503bb4c1eebae7c8d46c61e779ca30b217","first_seen":"2026-09-17T18:49:29.911894Z","last_seen":"2026-09-17T18:56:44.041304Z","times_seen":2,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":29,"dns":0,"connect":1,"send":0,"wait":7,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-brands-400.ttf","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.671Z","timestamp":1789671335671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/webfonts/fa-brands-400.ttf HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/@fortawesome/fontawesome-free/css/all.min.css?ver=8.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5377faf31a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 444\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:11 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:54 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5rM5CcxJKcd%2F%2BSRKlMqqIHPbcrvzCaZ6VLuoaXE1wycIqN1gEH4P5ThxY2kvkUshpxIfkYtqjFd4aD1ij%2FvaG3cY2tYmUQTHgfaLrcr4Tmnf7vNT%2F5j44ydgoREWZiDjW4YCf3IZfPyaug%3D%3D\"}]}\r\ncontent-length: 88772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":133988,"size_decoded":89589,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"513aa607d398efaccc559916c3431403","sha1":"8ab907083fecaaa2a9ec93b27f884ad74573705c","sha256":"cda59d6efffa685830fd95b55f64ae9cb51279cd34b2410b69f84c7ec30157d9","sha512":"04eb62f5572bc477048487215bb9829b64d5bfd2bc22fcf6eaf4b3a4983e54e01d9deb7669acf34aa371cf2904634cee60fc0ada68ba1e125d21d067c8d21b01","ssdeep":"3072:hhPzoKcJ4eZS23Mukm6YSa257FCvhxeOWvLi:hhroKB8fMfYNOkvhYRzi","tlshash":"fbd3af06b3dfce8fc11369be4cd0a617a6e5b518ab111692fe4b2e6dc0277c84c79316","first_seen":"2023-05-16T22:22:15Z","last_seen":"2026-10-07T16:23:07.147968Z","times_seen":108,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/fa-solid-900.woff2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.740Z","timestamp":1789671335740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-turbo-charged-by: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/woff2\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3ca53786b1a1a30-OSL\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2r%2BS3rkfmkzLHiX1m%2BDRBhaSqcxn1bs5Fk%2BWBYpN2b5c8hOF8Q%2BfP03e8%2F1ipG8cfeneTwzJ8g5WmyyN%2FBDQH%2BjDCJGxwEA7UNzp3zEo%2F%2FOQkvrlFOttw4CllRAFC6GNaHZC10ceiOV8Q%3D%3D\"}]}\r\nage: 442\r\ncache-control: public, max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Fri, 17 Sep 2027 18:48:13 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75440,"size_decoded":76205,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75440, version 329.-1049","md5":"b5cf8ae26748570d8fb95a47f46b69e1","sha1":"07bed153d47f9129a944ee54dd72952deed074c8","sha256":"cd398be1a91817126cef10224738e624358edf6f08043abad7e60c1aaeccc8d0","sha512":"f08b9289695cf530094f076b2df4d2b0e1a1daedd00190d123b4179b2c1a1b5e8b2bb988d86fc6dc9eee117d88a58dd5b6dfe7689586c17068f5d2da01904d76","ssdeep":"1536:1Zq/f5ldhNurIqp+jqNT5Fm653lqWppat1Wa4W8TeodjxNrqM:1kvdS7ppFm6JhpgkrW6bGM","tlshash":"6f73028e1719f192f5d6cd177edc20be38f1a7121008f839e2eda6dd5085ab639a3825","first_seen":"2023-04-05T08:48:24Z","last_seen":"2026-10-15T07:05:51.808528Z","times_seen":23655,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/fonts/fa-brands-400.ttf","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:35.850Z","timestamp":1789671335850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/fonts/fa-brands-400.ttf HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://rooftopantalya.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.rooftopantalya.live/wp-content/themes/reflector/assets/css/lib/font-awesome.min.css?ver=7.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:35 GMT\r\ncontent-type: font/ttf\r\npriority: u=3,i=?0\r\ncf-ray: a3ca53791b571a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 443\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:12 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASf0kpYSYxxZBxz7MyZv%2Fqz%2B7PyFRvqS32EnGMn4d7rtS3slHRF2j%2BYkiPp4AjRCHh6yyHTL0s%2B%2B0TQ8B%2BhhbAlZqD8XGT976Iw3pobBuJ5DkJlf9n0DBqWZE5aPF7QpsErGce%2Ba6k2l6A%3D%3D\"}]}\r\ncontent-length: 86296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":129048,"size_decoded":87119,"mime_type":"font/ttf","magic":"TrueType Font data, 13 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"ed2b8bf117160466ba6220a8f1da54a4","sha1":"07d3f17fa86ddf58c8442ec3bacbcee90fe42bdc","sha256":"d7746d2966e30323266a9f7ea24be80940f7a0207a0b91dde1669f3b3bdecd33","sha512":"1d5028895df59943cde08316ae2c6a60436d43b173b8974b5643d399b8cee6959be467cbb05ac5a46faade022c38930598280396b785fe6a5d6836bdfa3fd648","ssdeep":"3072:tzzRC3JMtlRcn2tZ+8b6I9JevNViP3PbkWvLa:K3JMtjVtMGJeFQPfbvza","tlshash":"53c3bf06b3dfcf9fc11369be48d0955ba6e5b508ab112692ff4b2e2dc0176c84c7931a","first_seen":"2024-09-19T21:41:39.165861Z","last_seen":"2026-10-13T02:56:56.049847Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/scheduled/assets/js/tooltipster/css/themes/tooltipster-light.css?ver=3.3.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.253Z","timestamp":1789671334253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/scheduled/assets/js/tooltipster/css/themes/tooltipster-light.css?ver=3.3.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8PKW6JCBeTBGaTkd6cLFWksQY7rYYmQ46qlnY1QFUtDDrvEGfb6GmXT5qB0zLui3x2N85JDUoaPDAEXxmT%2Fp2cOd5iWfpVA2OrL2UBOQg0EnQUxZlXlZxiyW2tFuY4DPx6bAhwgREfz0A%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f1fa91a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:02:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":377,"size_decoded":961,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"48babba307cf0ba12faaa94cebb1ce35","sha1":"b16626a34920af056dfcbdf5b32f6ec490ebdf16","sha256":"2df3559fc6a8ac80f5d61b31c54577116cd6baab67a1bbcb0709b005bb0bd1d5","sha512":"0621b532d8f8bb5169dc2790ee74e7510194f3e82d1eabc746383d7bd2a505bf1f5c335f07d1fbca1a51148adecf1fb51d8c4ae21366e7c46f91a5778c5d537b","ssdeep":"","tlshash":"e0e0d836fe5d019a7e849a96f331ff4b578185124106513e66f27bb4dacb87b81f0350","first_seen":"2025-10-30T17:10:34.063658Z","last_seen":"2026-09-23T11:25:47.11215Z","times_seen":37,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/custom-facebook-feed/assets/css/cff-style.min.css?ver=4.9.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.265Z","timestamp":1789671334265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/custom-facebook-feed/assets/css/cff-style.min.css?ver=4.9.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkJdrozIzTyd4Yyg2pM3sVfYSAmBGFn512C%2Fx7brxLfJUoF1vVjpFBrfUA8JGHswIxeTDNhbEMpgvbqxfZZNozr4oCW7eX%2B0S2EhfiVYwJVCc9TbTcmdcIHEyHKbxLmhvKwU%2Fo7k7PCvVg%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f2fb11a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:19:01 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":30902,"size_decoded":7782,"mime_type":"text/css","magic":"ASCII text, with very long lines (30902), with no line terminators","md5":"89d7191d696c00063a781613f60bfffa","sha1":"fb26a63ccfa915282aa5cb7d85e785e476a813c7","sha256":"09beafb80e37015a4aaf6a01d23bf741155368aa7a21880c9afa1f49340f00f6","sha512":"d4d51ba117331035b95d2d3d89ba3880602d6bd3fb485ea78a348e6f6d26beeb7c73e810e2147f3ebe0a203c614e88f2eef7feb7f311c21a5ce78a3854b0c4fb","ssdeep":"768:Ju5X7Ua7ED90bG+jnMyJYDIDajlX8Rz47sQTnIe/yBafw97/:ezqIeKJ9T","tlshash":"d2d2a563b1956138b49a83b4b41b2bbf363b2873ffde88549185b374c76d2df1850a44","first_seen":"2025-03-18T05:35:36.701298Z","last_seen":"2026-10-15T02:16:51.339145Z","times_seen":4351,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/css/event-calendar.min.css?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.290Z","timestamp":1789671334290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-responsive-appointment-booking-tool/backend/modules/calendar/resources/css/event-calendar.min.css?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5C0pRebBGChx1zR3Qgc6NxBF8Ay%2BhaKVI0%2BXIxLYJZOI0pNkphJkCd6c39m6ojsePTQPcwVIb5%2FWnJccFa4qC3TwHgT7Fnd9XWispbDJ1vllaQ6ubFnfu03C3LKBsA3Pygc5oyutit0UA%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca536f5fc61a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:04 GMT\r\nlast-modified: Fri, 07 Aug 2026 09:16:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14671,"size_decoded":3684,"mime_type":"text/css","magic":"ASCII text, with very long lines (14600)","md5":"39f1debcc18b36c1ee2ae1272d7064bf","sha1":"454d18d17e88bb76faded6fa2830777536f98909","sha256":"4d6314560d30bfeaf4a8e70941bb3f76e96b6458804c877093e02ec348615c97","sha512":"6652fe8fb04409977d498182044ae3d0709f20981b084424ea841d29033ab5a8b0f5a5afc6a06400ab3e528dea83fc614ac752e8b3630116c014bbdef006530f","ssdeep":"192:h/8fAqL886i6683g9wDfX092g1QIrl3J1eW5a61uFwiJX3ZXkVakuF83ywwSXuT2:7Oft4pXFxitsJk","tlshash":"be621fb6f810537e382fa71c1a94b68a5f21fcd1cc1237a4fb94ca4174ca5b91e9427e","first_seen":"2026-02-08T11:20:41.885671Z","last_seen":"2026-10-15T04:25:14.448731Z","times_seen":83,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/js/lib/TweenMax.min.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.596Z","timestamp":1789671334596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/js/lib/TweenMax.min.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXZvadOCUjzArs0Xbg2idEtxfP0KeXsO4QT0Hwhz4JhO0itxbDm15dxzzLTsrC%2BlcObLLhaz3p3RbzpEfinu0xTdKveAcDi3FdHHxvLT8PKP%2FWktsSUim4ppsMCS4NjqLBpt9jCRO%2Bujbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537138711a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111639,"size_decoded":39706,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32010)","md5":"7ee7428c71304b253a0f67607cc1ea17","sha1":"13ef89a2e605e5eada028438c18a3a813645f356","sha256":"ce17c1e05b06a4a394c6aba9e5becfedfbd3105783cf262614234ca53419d55b","sha512":"57f38ef410d9d9570dd434c52c771725501d5132dbb9ee3356d7eb54b4e053fc81968b5cf8183a014fb6c9f5dabf088db1deca3fd06a4e99575698f61b79adc1","ssdeep":"1536:j36fJZjIbDJjzglHP0VH4dLk2IrVp8XIKXkPxbnNku87CWWCut+7u5zO6:jzZUFjGXAojNICWWCuq4","tlshash":"58b308c63212701244962196597f0a477337ddeab4498e2cf588c9ce3e1dd8922bff76","first_seen":"2023-03-08T05:56:55Z","last_seen":"2026-10-14T07:36:36.707046Z","times_seen":30,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.615Z","timestamp":1789671334615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QJaKGM1z3djclrbS1sr83POZK%2BkWM5Jn4yTmT8I0VyMytoQbo3y3XCXQMVq3U5Yuvp4hzX8wcapJjYf%2FAlLYuWdY01r%2Bt4b2vAylegK%2FO2%2B8TzWVSGHukLRjB2M%2B9YeRoYGZIs%2BlInBS5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371588b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5520,"size_decoded":2536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-10-15T06:35:44.487288Z","times_seen":218448,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/translatepress-multilingual/assets/images/flags/ru_RU.png","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.733Z","timestamp":1789671334733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/ru_RU.png HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3ca537218cb1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Tue, 07 Jul 2026 21:10:45 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJJCER29XzqQIPqs6iglPbMgZtbKQy46%2BDmt%2BGZxZPmjsy%2FacZuk5EPxNcPtKJmTzPgMK7lPbPFaiO33F6yvivb9ZbNRUE6ockfyLR193ylNdkij%2BIc0vK2usxhpOJf2nX8OMDFzSxjVsw%3D%3D\"}]}\r\ncontent-length: 241\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":241,"size_decoded":1009,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"3e4733a9ecb758d58eec825cc227fee2","sha1":"ded9f036f70fbb4253f8b3a08adab51de76e84fd","sha256":"bc78f50b6e27078e91fe318c8ebdc52bac6cabbe5c298f471bc60292e126e1a5","sha512":"e0656de4d204b826e186a4b8f86eeaadc7dd7adae86ab11cc43ed270ebad29b7d019a8752d6638707545f3a7556bc1b23116897475fbf8ba712684edeb175d79","ssdeep":"","tlshash":"51d0a7f28ddc4a34d01b1a9f521539a8f47604e6415307d2be0e4619187d5a86387a54","first_seen":"2023-05-02T01:14:22Z","last_seen":"2026-10-15T05:55:48.807201Z","times_seen":1671,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/themes/reflector/assets/css/menu/menu-simple.css?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.504Z","timestamp":1789671334504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/themes/reflector/assets/css/menu/menu-simple.css?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o8sryfi3q5FHeEa6MGb3oCSmt3FaO605WFs1dx0p1veYLC5uVZCHhFEVHgXHGgmitbkSznjK4nRiciRfuyoZiqptvSrtnogytFbl3rDNQ%2FpH78VSh7gVdWpfGbxjwUPhmtF2bk89%2Bb%2F0BQ%3D%3D\"}]}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370a8181a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 449\r\ncache-control: public, max-age=14400\r\ncontent-encoding: br\r\nexpires: Fri, 17 Sep 2027 18:48:05 GMT\r\nlast-modified: Fri, 06 Jun 2025 00:00:11 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14538,"size_decoded":3133,"mime_type":"text/css","magic":"ASCII text, with very long lines (14538), with no line terminators","md5":"f2855e053fe117070c18138d14b70005","sha1":"5850bdfbb56bab0bab393caeb0162822686e34ab","sha256":"b2a330d70aedf14ff02e9540bdb915fcf74a7a968607e633f31c775b870a1172","sha512":"e41cb5a12b8f2aed698c38060c6b67d282f3779abed16e912cd7993da4b19b7eba522df1296466413a09dcbcdd467edada1a64595e0cf4d58b1f60b21f6a41dc","ssdeep":"192:c3/DnsVcCH7+7V7uk9yDVg2rNTvji8B5HT:y/ocCbu9uYKVpTL","tlshash":"7662326ac172b33cd063971e92c9a6e5463cda62e90703dc775b150b83cbbb912e394d","first_seen":"2026-04-13T06:27:19.22141Z","last_seen":"2026-09-17T18:56:44.048686Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/whizzy/assets/js/advanced.min.js","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.578Z","timestamp":1789671334578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/whizzy/assets/js/advanced.min.js HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8MihczVoJKNed4brWW9qCgJOUAkX3RCOzrQUInhE98EKaXeNcxhtbc4wDdIpx90kbvvOLCEWZ2%2BpmD%2BexyjkAefa6uWkJTp%2FrvhIPzU9qjvsI9VJkD36x1wmP8RTg0LGgVNoKFl0%2FhLIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca537118621a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2981,"size_decoded":1669,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2980)","md5":"f860562cc09ee22939cf150f1cd63f6e","sha1":"f63f734e383f3acc89df708caf23a7adee4b8f5d","sha256":"ba8af8fe4589198c961ca491907a8d54d1a6c4c35ec02fb923a5fbce967e311f","sha512":"9f9d73bfa745bf49d04ed6ce92557b5deabee22337e9e5af03dc76ab5b3942adb3fafe2bc14e1f33b443014388068ae1507a521ccafce4f35bb18569432b03c5","ssdeep":"","tlshash":"6651fc58b6d1a6db016ba22a06cbe71e21ae4d3edd8245600511c0fe0ff9fc8605b72f","first_seen":"2023-03-07T12:09:08Z","last_seen":"2026-10-10T11:18:22.957803Z","times_seen":135,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/js/lightbox.min.js?ver=8.2","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.621Z","timestamp":1789671334621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/lib/vendor/node_modules/lightbox2/dist/js/lightbox.min.js?ver=8.2 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMq9nKYpGR35nN8A4mhNVvc%2F9re1nWr80pUOb4kFyDhIkCxNp%2BKEMdz1E7YVJkaq6tdqpKW7IlvBReV%2FWJvIImy5mZMJFJYgBCk5VWy2TmhhnpxN0nZTk96gg5qm9uvV1ln%2FpyAbr0LVIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3ca5371688f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9754,"size_decoded":3835,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9465)","md5":"ff500f2b4b58b37e17c2a11a38df1822","sha1":"92004462ac1d5c249a82ba3640b3b00665a2a57c","sha256":"03a8c8e55f6cd49ce7916c2c05a44af2449e5cb808a907f17e7bdd0ce6445116","sha512":"29b4456e30396f035a9fa0ef3e5d4e0d4a25bd34d9fef724b2c9c58646b9706f342556b9cd29513c2af4e79c52814feaea83081a16562e171b8080b47f2c3745","ssdeep":"192:U6kcrredKIevdZTQkH+3alLxERpXFZRbzk:PXPYP+7Qke6","tlshash":"59127109fa14212ad6af40d7310b9f1a03376636be03966c743cc6e969f9c44597bf38","first_seen":"2024-11-12T10:11:12.93625Z","last_seen":"2026-10-14T12:44:53.198047Z","times_seen":974,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2026/01/SNY02704-copy-scaled.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.709Z","timestamp":1789671334709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/SNY02704-copy-scaled.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371e8b21a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Tue, 06 Jan 2026 21:16:31 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BKzSEiMNphRDNnvZ1dyCMRb6%2FaE1mesQWFakobAhc2Qsn162GaLlnPTUQsxOMracitJDxauK%2F%2BdEcceQYfJut17DUNgNb0r%2BodMDiM0cK6s%2B6AO8AXVlvMtDgDQBbfI%2BQnzYhzn1WfuQQ%3D%3D\"}]}\r\ncontent-length: 400042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":400042,"size_decoded":400820,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=14, height=4672, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=7008], baseline, precision 8, 2560x1707, components 3","md5":"861fda1dfa8257227ce4c1469abd3a8f","sha1":"489830a72290bbbf22a3ba93270e36934d90330f","sha256":"e54ff013fc5694f92fed04b8479d10661363f67c4698688e303ed53ff71ecb1e","sha512":"631057660ffab45e11f211441228449aa4909630aaf394acbe15ebb48f2b2a2eb4c61d27af46af58e547d3c87a9bc8831bc6d7cd613b76dc0f176ad2651b067a","ssdeep":"6144:535bodjY40I1/WnKBB0L35vDGsYMdR/MljxEKDmxqBLipFERllptKaOjioGXYxLu:XoqI1/INlYM8lFECRZisjtKaOeTYmvO6","tlshash":"c584121234609961c58c7e33d8e65bd2cb7266955ec24923b8cee414ffb58d88dc32bb","first_seen":"2026-09-17T18:49:29.910038Z","last_seen":"2026-09-17T18:56:44.050527Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/uploads/2025/10/SNY03995.jpg","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.715Z","timestamp":1789671334715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/SNY03995.jpg HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3ca5371f8bb1a30-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 448\r\ncache-control: public, max-age=14400\r\nexpires: Fri, 17 Sep 2027 18:48:06 GMT\r\nlast-modified: Fri, 10 Oct 2025 16:40:51 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQGDYR4QlXU81m6JSbGiC8QZaYOdlKWlKaxIhxbvNoa8TiFqle8ZoRPMU8hFXGzOF8YhxKHDzcA%2BAkOU%2FF71RXp3%2BhGr4rgivhs2xhrIqHfxfOH8upH%2FcaVfOBwvqbbUJgRQDYCQjEaMuw%3D%3D\"}]}\r\ncontent-length: 1767139\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1767139,"size_decoded":1767912,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=7008, bps=182, PhotometricInterpretation=RGB, manufacturer=SONY, model=ILCE-7M4, orientation=upper-left, width=4672], progressive, precision 8, 6285x9428, components 3","md5":"d64f087d657fa6318b8039dd2ca5f397","sha1":"38cb1b5539d8c7d8bec88a74009801207e9597e5","sha256":"884824ab47a26366f7b5f6f077b49d5463801739c7ecd0c15265a3d9b774be24","sha512":"6e3146452d88ff6951b91fa9d72cf1ae25e83f58e1d9cdef3ac690c9d71cf1b9a9ee2a591803b5e64ab5f5d12a3180a9395a96d8c4e6e8afde5031a1e5091505","ssdeep":"24576:Q7pcZOUs3OMvq8k5LeorzGX+jmV13GOY4fON7:QjkdPGaC1TzON7","tlshash":"ff2512e3af628943c9cd2774d99323703e2746b1c7898a83f3ee15312be6755ac9c581","first_seen":"2026-09-17T18:49:29.793404Z","last_seen":"2026-09-17T18:56:44.051129Z","times_seen":2,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":446,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-content/plugins/bookly-addon-pro/frontend/modules/calendar/resources/js/frontend-calendar.js?ver=27.9","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.533Z","timestamp":1789671334533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-content/plugins/bookly-addon-pro/frontend/modules/calendar/resources/js/frontend-calendar.js?ver=27.9 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqnyrtdNziA1WBGgTl9Kb5ZaBPGVccSX3e%2BuRtiGF7rhkouut1N0PGH3YYJmF%2B7VvGj1dbs0jxwq%2FEZfIc89UAkZt7X%2BUnm%2FjOMmxIvr29bs5KjMPtlYFgmTcWXNqOVGiGQMRoBdTiORxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3ca5370d83b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8426,"size_decoded":2894,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ce028f318b04d506c09f3bf1e430abf3","sha1":"acddb1f883341bfb1088d81722c732d53f8f5ea9","sha256":"a8be8ad193210df3510d90846c7c334afa5036e39593e056862ba8c6672a4f65","sha512":"a77af1e07026dade7165d1fb73c958d2d1288de435a65347fe09c9b95dab7093dd502527d0014544262a0ae53250bc18a045b12b993338135da32275db5b421a","ssdeep":"192:WYsSu6LKJXl6kQ7vr/w/rOwdrWCFujZcZngNC+S3GBuWCBQInJ6:3KCvr4/rvdrW5d","tlshash":"e40233085aa6242143e3e1789a6f23043672982f494d7d227e5eeb505fc8f2c65fd7e8","first_seen":"2025-10-07T10:40:53.808384Z","last_seen":"2026-10-12T23:25:16.733339Z","times_seen":31,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.rooftopantalya.live/wp-includes/js/comment-reply.min.js?ver=7.1","fqdn":"www.rooftopantalya.live","domain":"rooftopantalya.live","tld":"live"},"ip":{"addr":"104.21.15.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rooftopantalya.live/","date":"2026-09-17T18:55:34.605Z","timestamp":1789671334605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rooftopantalya.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Aug 2026 14:21:03 GMT","end":"Tue, 10 Nov 2026 15:19:28 GMT"},"fingerprint":{"sha1":"B0:19:95:84:49:77:26:AE:6B:88:77:D2:58:48:43:8B:0A:44:73:2E","sha256":"5C:2D:82:CF:9B:99:73:70:6E:AF:D7:98:6A:43:2E:C8:5F:DE:61:86:BC:BA:7E:4E:19:E4:18:73:1E:A2:8A:E6"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=7.1 HTTP/1.1\r\nHost: www.rooftopantalya.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://rooftopantalya.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 17 Sep 2026 18:55:34 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p9hFviZXeKXWKYCVogUoXDn3CYzbNcGg8atn2JfGFHaNQqiGWencaAtZTwIudReV%2FoUuoQk5HW0AQ1KDClBq35layCrraeVmJMDA2eb7dE0%2BN2A0pGVTcqjjBZ9xzoGJoqDmTCaylmQxNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a3ca5371487a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2950,"size_decoded":2021,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2915)","md5":"43fbbc12678117aff1fa824e8f55ccc7","sha1":"ba2b88b9dc15479ac67752fb703ee6df40f5c0f9","sha256":"f2cc60607c1d407e194dddc628e9fde74e56b9a60c4ba39d6b17a5e2629c83fb","sha512":"b77e9c630cdcc1e6b4ff29462882f64f6849cbea72b0fa0c417e971dbb09446dfe9d9f58ddd1e6a3e22c977f3a7f8bda122ce7231afcf4361fde3399f5e5ae8b","ssdeep":"","tlshash":"2251b8d833c95e767a8373355efe9302b2702705b50859618815c8a9217cf9523babbe","first_seen":"2026-07-09T07:53:36.929284Z","last_seen":"2026-10-15T06:38:03.326495Z","times_seen":5293,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-17","alert":"Phishing Block","trigger":"www.rooftopantalya.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"www.rooftopantalya.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}